fix(auth): token acquisition failure causes silent 30-second delay

[FL-AntoineDurand]

Problem

When OAuth token acquisition fails (e.g., CSRF rejection, network error, session expiration), LocalStorageStore enters an error state with a 30-second retry wait (ERROR_WAIT = 1000 * 30). During this time, all API calls that require authentication are blocked — the frontend appears frozen with no user-visible feedback.

How It Happens

1. Frontend needs an OAuth token → calls doOauthCode()
2. doOauthCode() sends POST /oauth/authorize → POST /oauth/token
3. If either request fails (network error, 4xx, 5xx), LocalStorageStore.start() catches the error
4. Writes { error: true, wait: now + 30_000 } to localStorage
5. Schedules retry after 30s + jitter (0-5s)
6. All calls to LocalStorageStore.get() return { value: null, promise } — callers wait
7. _doTokenLogic() awaits the promise, blocking the API call
8. After ~30s, retry fires — if it succeeds, everything unblocks at once

Impact

• User experience: Page appears stuck/frozen for 30+ seconds after any token failure
• No feedback: No error message, spinner, or indication of what's happening
• Cross-tab impact: Error state in localStorage affects all open tabs
• Silent failure: The 30s delay is invisible — looks like a slow server

Proposed Fixes

1. Show loading/retry state in UI — Surface the LocalStorageStore error state to the user with a "Reconnecting..." message and countdown
2. Reduce ERROR_WAIT for token errors — 30 seconds is appropriate for server-side rate limiting but excessive for token failures. Consider shorter retry (5-10s) for auth-specific errors
3. Add immediate retry option — Let the user click "Retry now" instead of waiting the full 30s
4. Distinguish error types — Network errors vs auth failures vs rate limiting should have different retry strategies

Files

• packages/frontend-data/src/lib/local-storage-store.ts — ERROR_WAIT, scheduleRetry()
• packages/frontend-data/src/lib/api-ganymede.ts — _doTokenLogic() wait loop
• packages/frontend-data/src/lib/oauth-client.ts — doOauthCode() request chain