fix(sync): recover desktop syncing after a session goes stale

[plusmobileapps]

The problem

On desktop (reproduced on macOS, but the mechanism isn't Mac-specific), leaving the app open for a while ends with it silently syncing nothing to Supabase until it's force-quit and reopened.

Four things combine:

1. Token refresh has no lifecycle backstop outside Android. supabase-kt refreshes the access token with a single in-process delay() job. The "stop auto-refresh on background, restart on foreground" safety net is Android-only (AuthConfig.enableLifecycleCallbacks — "Currently only supported on Android"; androidMain/setupPlatform.kt installs the ProcessLifecycleOwner observers, and there is no desktop equivalent). After a sleep, an App Nap, or a Wi-Fi flap, nothing re-arms that timer from outside.
2. A refresh failure left the app pretending to be signed in, so every repository kept firing PostgREST calls with an expired JWT.
3. Every one of those failures was swallowed (catch { Logger.e }, catch (_: Exception) {}, .catch {}), so the failure mode was silence.
4. Even after the SDK recovered on its own, sync never restarted. Sync only ran when AuthState changed to Authenticated. A refresh produces an equal AuthState.Authenticated, and StateFlow drops equal values — so the collector never re-fired. A process restart was the only thing that re-ran the initial sync, which is exactly the workaround that was being used.

The fix

Four commits, one concern each:

• feat(auth) — authenticatedSessions emits on every usable session (initial sign-in and every silent refresh), and refreshSessionIfNeeded() renews an expired/expiring token inline, which also re-arms the SDK's refresh job. RefreshFailure now logs instead of passing silently, and the session collector runs under a SupervisorJob.
• feat(sync) — the four syncing repositories hang off authenticatedSessions instead of state, so a recovered token retries whatever was stranded; each syncWithRemote revives the session first.
• feat(desktop) — SyncCoordinator reconciles every repository in dependency order, throttled to one automatic run a minute. Desktop drives it from window focus (the strongest hint the machine just woke) plus a 15-minute heartbeat.
• feat(sync) — a blocked sync now surfaces as a snackbar instead of looking like the app doing nothing.

Testing

• New: SyncCoordinatorTest (7 cases — ordering, sign-out, session revival, throttle, force).
• New: recipe repo pushes a recipe stranded by a dead token once a session refresh arrives; grocery repo re-syncs on a refresh with no AuthState change. Both fail without the repository change.
• ./gradlew jvmTest green across the project.

Not covered by tests: the desktop focus/heartbeat wiring itself and the snackbar — those need the running app. Worth confirming by leaving a desktop build open overnight and checking that syncing resumes on focus without a restart.

🤖 Generated with Claude Code