From 7786671c00994e33d1e5288377910006dd2b907e Mon Sep 17 00:00:00 2001
From: FragginWagon <greg.r.jacobs@gmail.com>
Date: Fri, 11 Sep 2026 12:36:09 -0400
Subject: [PATCH] fix: expose logout progress

---
 apps/web/src/pages/AdminShell.stories.js |  8 ++++++++
 apps/web/src/pages/AdminShell.vue        | 13 ++++++++++---
 docs/IMPLEMENTATION-STATUS.md            |  1 +
 3 files changed, 19 insertions(+), 3 deletions(-)

diff --git a/apps/web/src/pages/AdminShell.stories.js b/apps/web/src/pages/AdminShell.stories.js
index 7a521bf..0883843 100644
--- a/apps/web/src/pages/AdminShell.stories.js
+++ b/apps/web/src/pages/AdminShell.stories.js
@@ -8,6 +8,14 @@ export default {
 
 export const Navigation = { args: { routed: false } };
 
+export const LogoutControl = {
+  args: { routed: false },
+  play: async ({ canvasElement }) => {
+    const canvas = within(canvasElement);
+    await expect(canvas.getByRole('button', { name: 'Sign out' })).toHaveAttribute('aria-busy', 'false');
+  },
+};
+
 export const KeyboardSkipLink = {
   args: { routed: false },
   play: async ({ canvasElement }) => {
diff --git a/apps/web/src/pages/AdminShell.vue b/apps/web/src/pages/AdminShell.vue
index 7f01dc3..62bd2a8 100644
--- a/apps/web/src/pages/AdminShell.vue
+++ b/apps/web/src/pages/AdminShell.vue
@@ -1,14 +1,21 @@
 <script setup>
 import { RouterView } from 'vue-router';
+import { ref } from 'vue';
 
 import { useAuth } from '@/composables/useAuth.js';
 
 defineProps({ routed: { type: Boolean, default: true } });
 const { principal, signOut } = useAuth();
+const isLoggingOut = ref(false);
 
 async function logout() {
-  await signOut();
-  window.location.href = '/login';
+  isLoggingOut.value = true;
+  try {
+    await signOut();
+    window.location.href = '/login';
+  } finally {
+    isLoggingOut.value = false;
+  }
 }
 </script>
 
@@ -29,7 +36,7 @@ async function logout() {
       </nav>
       <div class="admin-sidebar__footer">
         <span>{{ principal?.email }}</span>
-        <button class="button button--secondary" type="button" @click="logout">Sign out</button>
+        <button class="button button--secondary" type="button" :disabled="isLoggingOut" :aria-busy="isLoggingOut" @click="logout">{{ isLoggingOut ? 'Signing out…' : 'Sign out' }}</button>
       </div>
     </aside>
     <section id="admin-content" class="admin-shell__content" tabindex="-1"><RouterView v-if="routed" /></section>
diff --git a/docs/IMPLEMENTATION-STATUS.md b/docs/IMPLEMENTATION-STATUS.md
index da5667a..8e1f653 100644
--- a/docs/IMPLEMENTATION-STATUS.md
+++ b/docs/IMPLEMENTATION-STATUS.md
@@ -276,6 +276,7 @@ Remaining roadmap areas are approved external provider credentials/adapters, bro
 - Saved-view rows now expose an accessible view name, and the image-limit setting includes range guidance tied to its input.
 - Login errors now move focus to the announced error message so failed authentication is immediately available to keyboard and assistive-technology users.
 - Login error focus behavior now has Storybook interaction coverage using a deterministic failed-authentication response.
+- Admin logout now exposes a busy state and disables repeat activation while the session is being revoked.
 
 ## Local Commands