From d3f3360c485109a8023a12f7c0bafcdb1f6674ca Mon Sep 17 00:00:00 2001
From: James <james@jongsma.me>
Date: Thu, 12 Mar 2026 04:54:42 -0400
Subject: [PATCH] fix: role restrictions use localStorage fallback; request
 text body size not h1 bold

---
 data/dealspace.db-shm             | Bin 32768 -> 32768 bytes
 data/dealspace.db-wal             | Bin 131872 -> 140112 bytes
 portal/templates/app/request.html |  18 ++++++------------
 3 files changed, 6 insertions(+), 12 deletions(-)

diff --git a/data/dealspace.db-shm b/data/dealspace.db-shm
index dd338dac997653f8b5a70db7b5f0efed6239c19b..4e5aaed33792843b8bbee68a8ba6a4da77e4e5be 100644
GIT binary patch
delta 163
zcmZo@U}|V!s+V}A%K!pQK+MR%AfN=Krvvc|x$RreS98vK`zpNf*S1qNzU!X<ncr(B
wOR9RHQD6Wv_dgPV3NtY%Ol)l5#JI?Q^C|}>X=X(RrOkqj|K&EXs|sQT0M>vwg#Z8m

delta 164
zcmZo@U}|V!s+V}A%K!o_K+MR%AfN!GrvvftbtwnE!sffaeHC8#Yul-se=Bb6fAJ}6
yI;rY`MuC9>ko=DXAfgOR3=$I?+c%3aPP3n^z{s<Cl>?LXW+6r<`OWL9f>;4D96MhC

diff --git a/data/dealspace.db-wal b/data/dealspace.db-wal
index b51ced78cc1e2b58651912d3bf9a972d1dfdb6a2..967e87a74c28bacea7c95c7ff67fb4c8ca82e5e3 100644
GIT binary patch
delta 87
zcmV-d0I2_<h6vEc2!MnEw?KaZFar<KiZaspMC-N<0000C1kRTa;{g}}&ar{31Q3CA
tB7t!t3V{t(fp-N32oaa~_W|VsX=1m^=mAa&2(`B!=$Z+8&!-^s0T8EMA#?x$

delta 13
Ucmca`jAKC?M?(wa7A6H|04XU1s{jB1

diff --git a/portal/templates/app/request.html b/portal/templates/app/request.html
index 617715c..fa73db1 100644
--- a/portal/templates/app/request.html
+++ b/portal/templates/app/request.html
@@ -18,12 +18,9 @@
 
         <!-- LEFT: Request -->
         <div class="lg:col-span-7 bg-[#0d1f3c] border border-white/[0.08] rounded-xl p-6">
-          <div class="flex items-center gap-2 mb-5">
-            <span class="text-lg">&#128203;</span>
-            <h2 class="text-sm font-semibold text-[#94a3b8] uppercase tracking-wider">Request</h2>
-          </div>
+          
           <div class="flex items-start gap-3 mb-4">
-            <h1 id="reqTitle" class="text-base font-semibold text-white leading-snug flex-1">Loading...</h1>
+            <p id="reqTitle" class="text-sm text-white leading-relaxed flex-1">Loading...</p>
             <button id="editReqBtn" onclick="startEditRequest()" class="shrink-0 p-1.5 rounded-lg hover:bg-white/[0.08] text-[#94a3b8] hover:text-white transition" title="Edit request">
               <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15.232 5.232l3.536 3.536m-2.036-5.036a2.5 2.5 0 113.536 3.536L6.5 21.036H3v-3.572L16.732 3.732z"/></svg>
             </button>
@@ -76,10 +73,7 @@
 
         <!-- RIGHT: Response -->
         <div class="lg:col-span-5 bg-[#0d1f3c] border border-white/[0.08] rounded-xl p-6 flex flex-col">
-          <div class="flex items-center gap-2 mb-5">
-            <span class="text-lg">&#128193;</span>
-            <h2 class="text-sm font-semibold text-[#94a3b8] uppercase tracking-wider">Response</h2>
-          </div>
+          
           <div id="answeredBanner" class="hidden mb-4 px-4 py-2.5 rounded-lg bg-green-500/10 border border-green-500/20 text-green-300 text-sm font-medium flex items-center gap-2">
             <svg class="w-4 h-4" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M5 13l4 4L19 7"/></svg>
             Answered
@@ -137,9 +131,9 @@
     async function applyRoleRestrictions() {
       try {
         const res = await fetchAPI('/api/auth/me');
-        if (!res.ok) return;
-        const me = await res.json();
-        const role = me.test_role || '';
+        const me = res.ok ? await res.json() : {};
+        // Use server role first, fall back to localStorage (survives service restarts)
+        const role = me.test_role || localStorage.getItem('ds_test_role') || '';
         const isReadOnly = role === 'buyer' || role === 'seller' || role === 'advisor';
         if (isReadOnly) {
           const ua = document.getElementById('uploadArea');