@iasiv5/dsh-quota-watch 0.1.20 → 0.1.22

package/README.md

@@ -15,7 +15,7 @@
 ## ✨ 功能一览
 
 - **🚀 悬浮胶囊（默认界面）**：一行「GLM 15% · Copilot 1.8%」常驻屏幕（默认右下角安全区），单击展开面板——胶囊上没有任何隐藏手势（右键 / 长按菜单已于 0.1.14 退役）。拖拽跟手（保持抓取点，transform 渲染）、任意位置停放、位置跨重启记忆、越界自动钳回视口（距边 8px 安全边距），并自动避开 Windows Desktop 壳顶部的标题栏拖拽带（0.1.20：该带按布局吞掉指针输入、无视 z-index，胶囊/面板落进去就再也点不到、拖不回——现与壳自家浮窗同款消费 `--dsh-windows-titlebar-height` 让位，历史卡死位置在启动时自动钳回带外；Web 无此变量，行为零漂移）；触摸设备直接拖拽（更宽的防误拖阈值）、点击热区 44px、自动避让 iPhone 刘海 / 小黑条（safe-area）。已用超过 80% 转橙、超过 95% 转红，任一 provider 超 95% 时轻微脉动（尊重系统「减少动态效果」设置）。悬停提示与 aria-label 实时给出摘要。
-- **🖥️ 详情面板**：半透明毛玻璃底，宽 `min(320px, 100vw−24px)`，靠边自动翻侧，滚动 / 缩放跟随；≤480px 窄屏自动改为底部弹层并避开 safe-area；Esc 或点击面板外关闭。概览列两个 provider 行，点击进入详情：
+- **🖥️ 详情面板**：半透明毛玻璃底；总览（Token 额度）宽 `240px` 与侧边栏卡片同宽（窄屏 `min(240px, 100vw−24px)` 兜底），点进 GLM / Copilot 详情后恢复 0.0.18 内容自适应宽度（上限 `min(320px, 100vw−24px)`），靠边自动翻侧，滚动 / 缩放跟随；≤480px 窄屏自动改为底部弹层并避开 safe-area；Esc 或点击面板外关闭。概览列两个 provider 行，点击进入详情：
   - **GLM**：今日 Tokens / 调用次数双大数字 + 五列对齐窗口网格（MCP（月）→ 5 小时 → 每月 → 每周固定排序，周窗口未下发时显示「每周额度 · ♾️（无限）」占位）+ 分模型用量行；
   - **Copilot**：可用额度、本期已用（credits 消耗 + 弱化百分比）、重置时间三行。
   - 窗口备注的括号按语言成对统一（zh 全角 `（…）` / en 半角 `(…)`），备注列左缘恒对齐（0.1.16）。接口未下发有效 `remaining` / `percent_remaining` 时该行不渲染，`credits_used` 绝不用于推算余额。

package/lib/client.js

@@ -199,6 +199,7 @@ var COPY = {
     loading: "\u8BFB\u53D6\u4E2D",
     failed: "\u67E5\u8BE2\u5931\u8D25",
     stale: "\u6570\u636E\u53EF\u80FD\u5DF2\u8FC7\u671F",
+    authRejected: "\u51ED\u8BC1\u5DF2\u88AB\u670D\u52A1\u5546\u62D2\u7EDD\uFF0C\u8BF7\u91CD\u65B0\u6388\u6743",
     requestFailed: "\u5237\u65B0\u5931\u8D25\uFF0C\u663E\u793A\u4E0A\u6B21\u6210\u529F\u6570\u636E",
     available: "\u53EF\u7528\u989D\u5EA6",
     used: "\u672C\u671F\u5DF2\u7528",
@@ -236,6 +237,7 @@ var COPY = {
     loading: "Loading",
     failed: "Query failed",
     stale: "Data may be stale",
+    authRejected: "Credential rejected by provider \u2014 re-authorize",
     requestFailed: "Refresh failed; showing last successful data",
     available: "Available credits",
     used: "Used this cycle",
@@ -311,6 +313,11 @@ var FLOAT_STYLE_TEXT = `
 .dqw-panel { position: fixed; z-index: 2147483000; min-width: 166px; max-width: min(320px, calc(100vw - 24px)); max-height: calc(100vh - 24px); overflow-y: auto; padding: 10px 12px; border: 1px solid var(--dsw-alias-border-secondary, rgba(128,128,128,.35)); border-radius: 10px; background: var(--dsw-alias-bg-elevated, var(--dsw-alias-bg-base, #1f1f1f)); background: color-mix(in srgb, var(--dsw-alias-bg-base, #1f1f1f) 86%, transparent); -webkit-backdrop-filter: blur(14px) saturate(1.3); backdrop-filter: blur(14px) saturate(1.3); box-shadow: 0 8px 24px rgba(0,0,0,.25); color: var(--dsw-alias-label-primary, inherit); display: flex; flex-direction: column; gap: 8px; font: inherit; }
 @supports not ((backdrop-filter: blur(1px)) or (-webkit-backdrop-filter: blur(1px))) { .dqw-panel { background: var(--dsw-alias-bg-elevated, var(--dsw-alias-bg-base, #1f1f1f)); } }
 .dqw-panel--sheet { left:8px; right:8px; top:auto; bottom:calc(8px + env(safe-area-inset-bottom, 0px)); width:auto; max-width:none; max-height:calc(100dvh - 24px); }
+/* Overview-only pin: the capsule pop matches the sidebar card (240px); detail
+   views (GLM/Copilot) keep the 0.0.18 content-driven width above. :not() keeps
+   the bottom sheet (\u2264480px) winning over the pin. Keyed off the data attr that
+   syncPop already maintains \u2014 no JS state change. */
+.dqw-panel[data-dsh-quota-watch-panel-overview]:not(.dqw-panel--sheet) { width: min(240px, calc(100vw - 24px)); }
 .dqw-panel[hidden] { display: none; }
 .dqw-panel *, .dqw-panel *::before, .dqw-panel *::after { box-sizing: border-box; }
 .dqw-panel-header { display: flex; align-items: center; gap: 6px; min-width: 0; }
@@ -330,7 +337,7 @@ var FLOAT_STYLE_TEXT = `
 .dqw-label { font-size: 11px; font-weight: 600; width: 52px; flex: none; }
 .dqw-label[data-action="refresh"] { cursor: pointer; border-radius: 4px; }
 .dqw-label[data-action="refresh"]:hover { opacity: .75; }
-.dqw-bar { display: block; flex: 0 0 auto; width: 100px; height: 4px; overflow: hidden; border-radius: 4px; background: var(--dsw-alias-bg-tertiary, rgba(128,128,128,.2)); }
+.dqw-bar { display: block; flex: 1 1 auto; width: auto; min-width: 36px; height: 4px; overflow: hidden; border-radius: 4px; background: var(--dsw-alias-bg-tertiary, rgba(128,128,128,.2)); }
 .dqw-bar-fill { display: block; height: 100%; border-radius: inherit; background: var(--dsw-alias-button-primary-fill, #5b8def); }
 .dqw-bar-fill.warn { background: var(--dsw-alias-label-warning, #d29922); }
 .dqw-bar-fill.danger { background: var(--dsw-alias-label-danger, #c93c3c); }
@@ -351,7 +358,7 @@ var FLOAT_STYLE_TEXT = `
 .dqw-kv { display: flex; justify-content: space-between; align-items: baseline; gap: 10px; font-size: 10.5px; line-height: 17px; font-variant-numeric: tabular-nums; }
 .dqw-kv-label { flex: none; opacity: .65; }
 .dqw-kv-value { min-width: 0; text-align: right; font-weight: 600; }
-.dqw-kv-sub { font-weight: 400; opacity: .55; }
+.dqw-kv-sub { min-width: 0; overflow-wrap: anywhere; font-weight: 400; opacity: .55; }
 .dqw-wins { display: grid; grid-template-columns: max-content max-content max-content max-content 1fr; column-gap: 6px; row-gap: 3px; align-items: baseline; font-size: 10.5px; line-height: 17px; font-variant-numeric: tabular-nums; }
 .dqw-win-name { opacity: .65; }
 .dqw-win-mid { opacity: .65; white-space: nowrap; }
@@ -428,7 +435,7 @@ function kvRow(doc, label, value) {
 }
 function glmRowModel(provider) {
   if (provider?.status === "missing") return null;
-  if (provider?.status === "error") return { kind: "error", label: "GLM", error: provider.error };
+  if (provider?.status === "error") return { kind: "error", label: "GLM", error: provider.error, errorKind: provider.errorKind };
   const windows = provider?.plan?.windows;
   if (!Array.isArray(windows) || windows.length === 0) return null;
   const five = windows.find((window) => window?.key === "5h");
@@ -439,12 +446,13 @@ function glmRowModel(provider) {
     percent: five?.percent,
     stale: provider.status === "stale",
     error: provider.error,
+    errorKind: provider.errorKind,
     extra: tokens
   };
 }
 function copilotRowModel(provider) {
   if (provider?.status === "missing") return null;
-  if (provider?.status === "error") return { kind: "error", label: "Copilot", error: provider.error };
+  if (provider?.status === "error") return { kind: "error", label: "Copilot", error: provider.error, errorKind: provider.errorKind };
   const quota = provider?.quota;
   if (quota?.balanceAvailable !== true) return null;
   const used = remainingToUsed(quota.percentRemaining);
@@ -455,6 +463,7 @@ function copilotRowModel(provider) {
     percent: used,
     stale: provider.status === "stale",
     error: provider.error,
+    errorKind: provider.errorKind,
     extra: typeof quota.creditsUsed === "number" && quota.creditsUsed >= 0 ? quota.creditsUsed : void 0
   };
 }
@@ -735,7 +744,7 @@ function mountQuotaCard({
     if (model.stale) {
       const mark = text(doc, "span", "dqw-stale-mark", "\u26A0");
       mark.dataset.dshQuotaWatchStale = "";
-      mark.title = model.error ?? copy.stale;
+      mark.title = model.errorKind === "auth" && model.error ? `${copy.authRejected}: ${model.error}` : model.error ?? copy.stale;
       row.append(mark);
     }
     row.append(text(doc, "span", "dqw-pct", typeof model.percent === "number" ? formatPercent(model.percent, locale) : "\u2014"));
@@ -819,7 +828,8 @@ function mountQuotaCard({
     detail.replaceChildren();
     detail.append(panelHeader({ title: copy.providerNames[key], showBack: fromPanelNav }));
     if (provider?.status === "stale") {
-      detail.append(text(doc, "p", "dqw-error", `${copy.stale}${provider.error ? `: ${provider.error}` : ""}`));
+      const bannerPrefix = provider.errorKind === "auth" ? copy.authRejected : copy.stale;
+      detail.append(text(doc, "p", "dqw-error", `${bannerPrefix}${provider.error ? `: ${provider.error}` : ""}`));
     }
     if (key === "glm") {
       const usage = provider?.usage;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iasiv5/dsh-quota-watch",
-  "version": "0.1.20",
+  "version": "0.1.22",
   "description": "DSH Web sidebar monitor for GLM Coding Plan quotas and GitHub Copilot credits",
   "type": "module",
   "main": "./src/host.mjs",

package/src/client.mjs

@@ -34,6 +34,7 @@ const COPY = {
     loading: '读取中',
     failed: '查询失败',
     stale: '数据可能已过期',
+    authRejected: '凭证已被服务商拒绝，请重新授权',
     requestFailed: '刷新失败，显示上次成功数据',
     available: '可用额度',
     used: '本期已用',
@@ -71,6 +72,7 @@ const COPY = {
     loading: 'Loading',
     failed: 'Query failed',
     stale: 'Data may be stale',
+    authRejected: 'Credential rejected by provider — re-authorize',
     requestFailed: 'Refresh failed; showing last successful data',
     available: 'Available credits',
     used: 'Used this cycle',
@@ -153,6 +155,11 @@ const FLOAT_STYLE_TEXT = `
 .dqw-panel { position: fixed; z-index: 2147483000; min-width: 166px; max-width: min(320px, calc(100vw - 24px)); max-height: calc(100vh - 24px); overflow-y: auto; padding: 10px 12px; border: 1px solid var(--dsw-alias-border-secondary, rgba(128,128,128,.35)); border-radius: 10px; background: var(--dsw-alias-bg-elevated, var(--dsw-alias-bg-base, #1f1f1f)); background: color-mix(in srgb, var(--dsw-alias-bg-base, #1f1f1f) 86%, transparent); -webkit-backdrop-filter: blur(14px) saturate(1.3); backdrop-filter: blur(14px) saturate(1.3); box-shadow: 0 8px 24px rgba(0,0,0,.25); color: var(--dsw-alias-label-primary, inherit); display: flex; flex-direction: column; gap: 8px; font: inherit; }
 @supports not ((backdrop-filter: blur(1px)) or (-webkit-backdrop-filter: blur(1px))) { .dqw-panel { background: var(--dsw-alias-bg-elevated, var(--dsw-alias-bg-base, #1f1f1f)); } }
 .dqw-panel--sheet { left:8px; right:8px; top:auto; bottom:calc(8px + env(safe-area-inset-bottom, 0px)); width:auto; max-width:none; max-height:calc(100dvh - 24px); }
+/* Overview-only pin: the capsule pop matches the sidebar card (240px); detail
+   views (GLM/Copilot) keep the 0.0.18 content-driven width above. :not() keeps
+   the bottom sheet (≤480px) winning over the pin. Keyed off the data attr that
+   syncPop already maintains — no JS state change. */
+.dqw-panel[data-dsh-quota-watch-panel-overview]:not(.dqw-panel--sheet) { width: min(240px, calc(100vw - 24px)); }
 .dqw-panel[hidden] { display: none; }
 .dqw-panel *, .dqw-panel *::before, .dqw-panel *::after { box-sizing: border-box; }
 .dqw-panel-header { display: flex; align-items: center; gap: 6px; min-width: 0; }
@@ -172,7 +179,7 @@ const FLOAT_STYLE_TEXT = `
 .dqw-label { font-size: 11px; font-weight: 600; width: 52px; flex: none; }
 .dqw-label[data-action="refresh"] { cursor: pointer; border-radius: 4px; }
 .dqw-label[data-action="refresh"]:hover { opacity: .75; }
-.dqw-bar { display: block; flex: 0 0 auto; width: 100px; height: 4px; overflow: hidden; border-radius: 4px; background: var(--dsw-alias-bg-tertiary, rgba(128,128,128,.2)); }
+.dqw-bar { display: block; flex: 1 1 auto; width: auto; min-width: 36px; height: 4px; overflow: hidden; border-radius: 4px; background: var(--dsw-alias-bg-tertiary, rgba(128,128,128,.2)); }
 .dqw-bar-fill { display: block; height: 100%; border-radius: inherit; background: var(--dsw-alias-button-primary-fill, #5b8def); }
 .dqw-bar-fill.warn { background: var(--dsw-alias-label-warning, #d29922); }
 .dqw-bar-fill.danger { background: var(--dsw-alias-label-danger, #c93c3c); }
@@ -193,7 +200,7 @@ const FLOAT_STYLE_TEXT = `
 .dqw-kv { display: flex; justify-content: space-between; align-items: baseline; gap: 10px; font-size: 10.5px; line-height: 17px; font-variant-numeric: tabular-nums; }
 .dqw-kv-label { flex: none; opacity: .65; }
 .dqw-kv-value { min-width: 0; text-align: right; font-weight: 600; }
-.dqw-kv-sub { font-weight: 400; opacity: .55; }
+.dqw-kv-sub { min-width: 0; overflow-wrap: anywhere; font-weight: 400; opacity: .55; }
 .dqw-wins { display: grid; grid-template-columns: max-content max-content max-content max-content 1fr; column-gap: 6px; row-gap: 3px; align-items: baseline; font-size: 10.5px; line-height: 17px; font-variant-numeric: tabular-nums; }
 .dqw-win-name { opacity: .65; }
 .dqw-win-mid { opacity: .65; white-space: nowrap; }
@@ -317,7 +324,7 @@ function kvRow(doc, label, value) {
 /** GLM summary row view model: fixed 5h-window percent plus today's compact tokens. */
 function glmRowModel(provider) {
   if (provider?.status === 'missing') return null
-  if (provider?.status === 'error') return { kind: 'error', label: 'GLM', error: provider.error }
+  if (provider?.status === 'error') return { kind: 'error', label: 'GLM', error: provider.error, errorKind: provider.errorKind }
   const windows = provider?.plan?.windows
   if (!Array.isArray(windows) || windows.length === 0) return null
   const five = windows.find((window) => window?.key === '5h')
@@ -330,6 +337,7 @@ function glmRowModel(provider) {
     percent: five?.percent,
     stale: provider.status === 'stale',
     error: provider.error,
+    errorKind: provider.errorKind,
     extra: tokens,
   }
 }
@@ -337,7 +345,7 @@ function glmRowModel(provider) {
 /** Copilot summary row view model: used% inverted from the reported remaining percent. */
 function copilotRowModel(provider) {
   if (provider?.status === 'missing') return null
-  if (provider?.status === 'error') return { kind: 'error', label: 'Copilot', error: provider.error }
+  if (provider?.status === 'error') return { kind: 'error', label: 'Copilot', error: provider.error, errorKind: provider.errorKind }
   const quota = provider?.quota
   if (quota?.balanceAvailable !== true) return null
   const used = remainingToUsed(quota.percentRemaining)
@@ -348,6 +356,7 @@ function copilotRowModel(provider) {
     percent: used,
     stale: provider.status === 'stale',
     error: provider.error,
+    errorKind: provider.errorKind,
     extra: typeof quota.creditsUsed === 'number' && quota.creditsUsed >= 0 ? quota.creditsUsed : undefined,
   }
 }
@@ -690,7 +699,9 @@ export function mountQuotaCard({
     if (model.stale) {
       const mark = text(doc, 'span', 'dqw-stale-mark', '⚠')
       mark.dataset.dshQuotaWatchStale = ''
-      mark.title = model.error ?? copy.stale
+      mark.title = model.errorKind === 'auth' && model.error
+        ? `${copy.authRejected}: ${model.error}`
+        : (model.error ?? copy.stale)
       row.append(mark)
     }
     row.append(text(doc, 'span', 'dqw-pct', typeof model.percent === 'number' ? formatPercent(model.percent, locale) : '—'))
@@ -788,7 +799,8 @@ export function mountQuotaCard({
     detail.replaceChildren()
     detail.append(panelHeader({ title: copy.providerNames[key], showBack: fromPanelNav }))
     if (provider?.status === 'stale') {
-      detail.append(text(doc, 'p', 'dqw-error', `${copy.stale}${provider.error ? `: ${provider.error}` : ''}`))
+      const bannerPrefix = provider.errorKind === 'auth' ? copy.authRejected : copy.stale
+      detail.append(text(doc, 'p', 'dqw-error', `${bannerPrefix}${provider.error ? `: ${provider.error}` : ''}`))
     }
     if (key === 'glm') {
       const usage = provider?.usage

package/src/host.mjs

@@ -77,11 +77,17 @@ function initialProvider(key, displayName) {
   return { key, displayName, status: 'loading', credential: 'unknown' }
 }
 
-function safeProbeError(error) {
-  if (error?.name === 'TimeoutError' || error?.name === 'AbortError') return '请求超时'
-  if (Number.isInteger(error?.status)) return `HTTP ${error.status}`
-  if (error?.code === 'UNRECOGNIZED_RESPONSE') return '服务商响应格式无法识别'
-  return '探测失败'
+/** Classify a probe failure into a user-facing message and a stable kind for the client. */
+export function classifyProbeError(error) {
+  if (error?.name === 'TimeoutError' || error?.name === 'AbortError') return { message: '请求超时', kind: 'network' }
+  if (Number.isInteger(error?.status)) {
+    if (error.status === 401 || error.status === 403) return { message: `HTTP ${error.status}`, kind: 'auth' }
+    return { message: `HTTP ${error.status}`, kind: 'server' }
+  }
+  if (error?.code === 'UNRECOGNIZED_RESPONSE') return { message: '服务商响应格式无法识别', kind: 'parse' }
+  const causeCode = String(error?.cause?.code ?? '')
+  if (/^[A-Z0-9_]{3,60}$/.test(causeCode)) return { message: `探测失败 (${causeCode})`, kind: 'network' }
+  return { message: '探测失败', kind: 'network' }
 }
 
 function responseJson(res, status, body) {
@@ -117,6 +123,7 @@ export function createQuotaService(ctx, options = {}) {
   let pollPromise
   let timer
   let disposed = false
+  let coldAttempts = 0
 
   function view() {
     return {
@@ -131,6 +138,7 @@ export function createQuotaService(ctx, options = {}) {
           ...(provider.updatedAt !== undefined ? { updatedAt: provider.updatedAt } : {}),
           ...(provider.checkedAt !== undefined ? { checkedAt: provider.checkedAt } : {}),
           ...(provider.error !== undefined ? { error: provider.error } : {}),
+          ...(provider.errorKind !== undefined ? { errorKind: provider.errorKind } : {}),
           ...(provider.plan !== undefined ? { plan: provider.plan } : {}),
           ...(provider.quota !== undefined ? { quota: provider.quota } : {}),
           ...(provider.usage !== undefined ? { usage: provider.usage } : {}),
@@ -139,7 +147,16 @@ export function createQuotaService(ctx, options = {}) {
     }
   }
 
+  /** Log one real state transition; degradations warn, recoveries and missing-credentials inform. */
+  function logTransition(key, from, to, detail) {
+    if (from === to) return
+    const line = `quota-watch: ${key} ${from}→${to}${detail ? ` (${detail})` : ''}`
+    if (to === 'error' || to === 'stale') ctx.logger?.warn?.(line)
+    else ctx.logger?.info?.(line)
+  }
+
   function markMissing(key, displayName) {
+    const from = providers.get(key)?.status
     providers.set(key, {
       key,
       displayName,
@@ -147,9 +164,11 @@ export function createQuotaService(ctx, options = {}) {
       credential: 'none',
       checkedAt: now(),
     })
+    logTransition(key, from, 'missing')
   }
 
   function markSuccess(key, displayName, payload) {
+    const from = providers.get(key)?.status
     const at = now()
     providers.set(key, {
       key,
@@ -160,6 +179,7 @@ export function createQuotaService(ctx, options = {}) {
       checkedAt: at,
       ...payload,
     })
+    logTransition(key, from, 'ready')
   }
 
   function markGlmPlanSuccess(plan) {
@@ -175,6 +195,7 @@ export function createQuotaService(ctx, options = {}) {
       plan,
       ...(previous?.usage !== undefined ? { usage: previous.usage } : {}),
     })
+    logTransition('glm', previous?.status, 'ready')
   }
 
   function markGlmUsageSuccess(usage) {
@@ -189,6 +210,7 @@ export function createQuotaService(ctx, options = {}) {
       checkedAt: at,
       usage: { status: 'ready', updatedAt: at, ...usage },
     })
+    logTransition('glm-usage', previous.usage?.status ?? 'loading', 'ready')
   }
 
   function markGlmUsageFailure(error) {
@@ -197,27 +219,35 @@ export function createQuotaService(ctx, options = {}) {
     const lastGood = previous.usage?.status === 'ready' || previous.usage?.status === 'stale'
       ? previous.usage
       : undefined
+    const { message, kind } = classifyProbeError(error)
+    const status = lastGood !== undefined ? 'stale' : 'error'
     providers.set('glm', {
       ...previous,
       checkedAt: now(),
       usage: {
         ...(lastGood !== undefined ? lastGood : {}),
-        status: lastGood !== undefined ? 'stale' : 'error',
-        error: safeProbeError(error),
+        status,
+        error: message,
+        errorKind: kind,
       },
     })
+    logTransition('glm-usage', previous.usage?.status ?? 'loading', status, message)
   }
 
   function markFailure(key, displayName, error) {
     const previous = providers.get(key)
     const checkedAt = now()
     const hasLastGood = previous?.status === 'ready' || previous?.status === 'stale'
+    const { message, kind } = classifyProbeError(error)
+    const status = hasLastGood ? 'stale' : 'error'
     providers.set(key, {
       ...(hasLastGood ? previous : { key, displayName, credential: 'configured' }),
-      status: hasLastGood ? 'stale' : 'error',
+      status,
       checkedAt,
-      error: safeProbeError(error),
+      error: message,
+      errorKind: kind,
     })
+    logTransition(key, previous?.status, status, message)
   }
 
   async function fetchBody(spec) {
@@ -311,18 +341,23 @@ export function createQuotaService(ctx, options = {}) {
     timer = setTimeout(async () => {
       timer = undefined
       await refresh()
-      // Cold-start retry: until at least one provider has reached ready/stale,
-      // a failed or still-loading round re-arms shortly instead of waiting a
-      // full interval — a desktop cold start with a slow network would
-      // otherwise stare at no capsule for up to a minute. (updatedAt alone
-      // cannot signal "cold": refresh() stamps it even when every probe
-      // failed.) All-'missing' (no credentials configured) and warm states
-      // keep the normal cadence, so nobody without credentials gets
-      // high-frequency probing.
+      // Cold-start retry with capped exponential backoff: until at least one
+      // provider has reached ready/stale, a failed or still-loading round re-arms
+      // at coldRetryMs, doubling per consecutive retryable round and capping at
+      // the normal cadence — a desktop cold start with a slow network still gets
+      // fast early retries, but a persistently broken state (e.g. a rejected
+      // credential) can no longer hammer the upstream every few seconds forever.
+      // Any non-retryable round (success, or all-missing) resets the counter, so
+      // a later cold phase restarts from the short interval. (updatedAt alone
+      // cannot signal "cold": refresh() stamps it even when every probe failed.)
       const states = [...providers.values()].map((provider) => provider.status)
       const retryable = states.some((status) => status === 'loading' || status === 'error')
         && states.every((status) => status !== 'ready' && status !== 'stale')
-      schedule(retryable ? (options.coldRetryMs ?? 5_000) : pollIntervalSec * 1000)
+      if (retryable) coldAttempts += 1
+      else coldAttempts = 0
+      schedule(retryable
+        ? Math.min((options.coldRetryMs ?? 5_000) * 2 ** (coldAttempts - 1), pollIntervalSec * 1000)
+        : pollIntervalSec * 1000)
     }, delayMs)
     timer.unref?.()
   }