Fix: Handle 401 errors with automatic redirect to login

- Add 401 (Unauthorized) handling in fetchApi
- Automatically redirect to login page when session expires
- Add credentials: "include" to ensure cookies are sent
- Update .gitignore to not ignore frontend/src/lib/

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.gitignore

@@ -12,6 +12,8 @@ eggs/
 .eggs/
 lib/
 lib64/
+# But don't ignore frontend source lib
+!frontend/src/lib/
 parts/
 sdist/
 var/

frontend/src/lib/api.ts

@@ -30,10 +30,19 @@ async function fetchApi<T>(
       "Content-Type": "application/json",
       ...options?.headers,
     },
+    credentials: "include", // Ensure cookies are sent with requests
     ...options,
   });
 
   if (!response.ok) {
+    // Handle 401 (Unauthorized) - session expired, redirect to login
+    if (response.status === 401) {
+      console.warn("🔐 Session expired - redirecting to login...");
+      // Redirect to login page
+      window.location.href = "/auth/login-page";
+      throw new ApiError(401, "Session expired. Please log in again.");
+    }
+
     // Handle 429 (Too Many Requests) with exponential backoff
     if (response.status === 429 && retryCount < 3) {
       const backoffDelay = Math.pow(2, retryCount) * 1000; // 1s, 2s, 4s