v1.4 - Login fixes, etc

frontend/src/lib/components/AdminShell.svelte

@@ -1,6 +1,7 @@
 <script lang="ts">
+  import { invalidateAll } from '$app/navigation';
   import { page } from '$app/state';
-  import { adminSession } from '$lib/session';
+  import { adminSession, sessionHydrated } from '$lib/session';
 
   const navigation = [
     { href: '/admin', label: 'Overview', shortLabel: 'OV' },
@@ -8,6 +9,8 @@
   ];
 
   let { children } = $props();
+  let isRestoringSession = $state(false);
+  let restoredToken = $state<string | null>(null);
 
   function matchesRoute(href: string, pathname: string) {
     return href === '/admin' ? pathname === '/admin' : pathname.startsWith(href);
@@ -27,6 +30,34 @@
   }
 
   const isProtectedRoute = $derived(page.url.pathname !== '/admin');
+
+  $effect(() => {
+    const hydrated = $sessionHydrated;
+    const token = $adminSession?.token ?? null;
+
+    if (!hydrated) {
+      return;
+    }
+
+    if (!token) {
+      isRestoringSession = false;
+      restoredToken = null;
+      return;
+    }
+
+    if (restoredToken === token) {
+      return;
+    }
+
+    restoredToken = token;
+    isRestoringSession = true;
+
+    invalidateAll().finally(() => {
+      if (restoredToken === token) {
+        isRestoringSession = false;
+      }
+    });
+  });
 </script>
 
 <svelte:head>
@@ -68,7 +99,15 @@
         <h1>{pageTitle(page.url.pathname)}</h1>
       </div>
 
-      {#if $adminSession}
+      {#if !$sessionHydrated}
+        <div class="profile-card guest">
+          <span class="profile-avatar">A</span>
+          <div>
+            <strong>Checking saved session</strong>
+            <span>Restoring admin access</span>
+          </div>
+        </div>
+      {:else if $adminSession}
         <div class="profile-card">
           <span class="profile-avatar">{initials($adminSession.name)}</span>
           <div>
@@ -88,7 +127,13 @@
     </header>
 
     <main class="admin-content">
-      {#if isProtectedRoute && !$adminSession}
+      {#if isProtectedRoute && (!$sessionHydrated || isRestoringSession)}
+        <section class="locked-card loading-card">
+          <p class="eyebrow">Checking Session</p>
+          <h2>Restoring the Lean 101 admin workspace.</h2>
+          <p>Refreshing the current route with the saved operator session before prompting for sign-in.</p>
+        </section>
+      {:else if isProtectedRoute && !$adminSession}
         <section class="locked-card">
           <p class="eyebrow">Restricted</p>
           <h2>Sign in through the Lean 101 Admin Panel to continue.</h2>
@@ -284,6 +329,10 @@
     box-shadow: 0 18px 40px rgba(15, 23, 17, 0.08);
   }
 
+  .loading-card {
+    min-height: 10rem;
+  }
+
   .locked-card h2,
   .locked-card p {
     margin: 0;