3 Commits

Author	SHA1	Message	Date
Scott Idem	c73b5a09e4	feat: add element_access_denied.svelte; use in badge review page ... - New reusable element_access_denied.svelte with title, message, action props - Badge review page: swap inline 'Access Denied' card with the component - Project doc: all 6 steps complete, status → Complete	2026-03-11 17:06:11 -04:00
Scott Idem	0c11cfb3e2	fix: replace alert() access guard in event settings with proper UX ... - Remove blocking alert() + module-level browser guard - Move access check to onMount with 500ms grace delay (matches /core pattern) - Add {:else} block: Lock icon + 'Access Restricted' message + redirect link - Remove now-unused 'browser' import; add Lock from lucide	2026-03-11 16:59:26 -04:00
Scott Idem	53c517ec30	feat: session-expired banner via ae_auth_error store ... - Add ae_auth_error writable store to ae_stores.ts - Wire api_get_object, api_post_object, api_patch_object to set ae_auth_error on 401/403 (browser-only guard, never fires SSR) - Root layout watches ae_auth_error; only raises flag_expired when a JWT is present (prevents false trigger on unauthenticated loads) - Dismissible amber banner added to root layout (non-blocking, above content) - Tested via debug menu trigger; banner fires and clears correctly	2026-03-11 16:56:07 -04:00