@alliance-droid/status-feedback-system 4.0.2 → 4.0.3

package/dist/api.d.ts

@@ -70,6 +70,8 @@ export interface BoardTransitions {
         publicStatus: PublicStatus;
     };
     targets: BoardTransition[];
+    /** Whether this user may manage status on this project (drives the UI affordance). */
+    canManage: boolean;
 }
 /** Result of applying a status change from the board. */
 export interface BoardStatusUpdate {

package/dist/components/board/state.svelte.js

@@ -184,11 +184,13 @@ export function createFeedbackBoard(options) {
         try {
             const result = await client.getBoardTransitions(itemId, token);
             transitions = { ...transitions, [itemId]: result };
-            statusPrivilege = true; // a successful load means the backend authorized this user
+            // The backend tells us whether this user may manage status (200 either
+            // way — no 403 console noise for ordinary signed-in users).
+            statusPrivilege = result.canManage;
             return result;
         }
         catch {
-            // 401/403 → not signed in or not privileged for this item: no control.
+            // 401 (no/invalid token) or network error → no control.
             return null;
         }
     }
@@ -205,7 +207,8 @@ export function createFeedbackBoard(options) {
         if (!sample)
             return;
         privilegeProbed = true;
-        statusPrivilege = (await loadTransitions(sample.id)) !== null;
+        // loadTransitions sets statusPrivilege from the result's canManage flag.
+        await loadTransitions(sample.id);
     }
     async function setStatus(itemId, status, reason) {
         const token = await resolveToken();

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@alliance-droid/status-feedback-system",
-	"version": "4.0.2",
+	"version": "4.0.3",
 	"type": "module",
 	"description": "Drop-in system status pages and user feedback forms for SvelteKit apps",
 	"svelte": "./dist/index.js",