fix: auth race condition on refresh, section edit dialog, time slot duplicate, autocomplete disable

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

apps/app/src/lib/axios.ts

@@ -1,6 +1,8 @@
 import axios from 'axios'
 import type { AxiosInstance, InternalAxiosRequestConfig } from 'axios'
 import { useAuthStore } from '@/stores/useAuthStore'
+import { useNotificationStore } from '@/stores/useNotificationStore'
+import { useOrganisationStore } from '@/stores/useOrganisationStore'
 
 const apiClient: AxiosInstance = axios.create({
   baseURL: import.meta.env.VITE_API_URL,
@@ -15,11 +17,16 @@ const apiClient: AxiosInstance = axios.create({
 apiClient.interceptors.request.use(
   (config: InternalAxiosRequestConfig) => {
     const authStore = useAuthStore()
+    const orgStore = useOrganisationStore()
 
     if (authStore.token) {
       config.headers.Authorization = `Bearer ${authStore.token}`
     }
 
+    if (orgStore.activeOrganisationId) {
+      config.headers['X-Organisation-Id'] = orgStore.activeOrganisationId
+    }
+
     if (import.meta.env.DEV) {
       console.log(`🚀 ${config.method?.toUpperCase()} ${config.url}`, config.data)
     }
@@ -42,15 +49,40 @@ apiClient.interceptors.response.use(
       console.error(`❌ ${error.response?.status} ${error.config?.url}`, error.response?.data)
     }
 
-    if (error.response?.status === 401) {
+    const status = error.response?.status
+    const notificationStore = useNotificationStore()
+
+    if (status === 401) {
       const authStore = useAuthStore()
 
-      authStore.logout()
+      // During initialization, let initialize() handle the 401 — skip redirect
+      if (authStore.isInitialized) {
+        authStore.logout()
 
-      if (typeof window !== 'undefined' && window.location.pathname !== '/login') {
-        window.location.href = '/login'
+        if (typeof window !== 'undefined' && window.location.pathname !== '/login') {
+          window.location.href = '/login'
+        }
       }
     }
+    else if (status === 403) {
+      notificationStore.show('You don\'t have permission for this action.', 'error')
+    }
+    else if (status === 404) {
+      notificationStore.show('The requested item was not found.', 'warning')
+    }
+    else if (status === 422) {
+      // Validation errors — pass through to calling component
+    }
+    else if (status === 503) {
+      notificationStore.show('Service temporarily unavailable. Please try again later.', 'error')
+    }
+    else if (status && status >= 500) {
+      notificationStore.show('An unexpected error occurred. Please try again later.', 'error')
+    }
+    else if (!error.response) {
+      // Network error — no response received
+      notificationStore.show('Unable to connect to the server. Check your internet connection.', 'error')
+    }
 
     return Promise.reject(error)
   },