Account form errors draw the shared danger component, and the page-local .error-note class is gone #9101

When the notify URL, profile or new-SSH-key form in Settings is refused, the message now shows in the shared danger toast (.toast[data-tone=danger] role="alert") that browse.ts already uses for a failed mirror. The page-local .error-note class is retired.

• src/web/pages/account.ts: a small refusal(message) helper draws the toast. The words are unchanged and still escaped. The toast sits under each form's actions, not above its first field. When it appears, it pushes nothing in the form down: only content below the form moves. The old note sat at the top and moved every field. Messages tied to one field (display name, email) still use the field's .error, as before.
• src/web/style/components.ts: the .error-note rule is deleted.
• docs/design/sections/5d-page-local-classes.md: its entry is deleted. That leaves the style/components.ts bullet with an intro line and no class under it; the design check accepts that.
• test/account-refusals.test.ts (new): posts one refused form to each of the three — an http: notify URL, a bogus commitEmail (which falls back to the form-level profile message), and a malformed SSH key. Each test checks for a 422, the words inside the danger toast with role="alert", and no error-note. The profile test also checks that the HTML-looking commitEmail value never comes back unescaped. All three fail on main.

grep -rn error-note src docs finds nothing. bun scripts/gate.ts, bun x tsc --noEmit and bun scripts/design-lint.ts pass. Because the diff touches the shared stylesheet, scripts/fast.ts named 1,089 test files (an estimated 95 minutes), so I ran the 44 files that cover this change instead: the account, notify, keys, settings and passkeys suites and the design-lint tests, with 0 failures. The forge's check runs the rest on this push.

To try it on the preview, go to Settings and save http://example.test/t as the notify URL. The red alert appears under the Save button.

🤖 Generated with Claude Code

Closes #9085

When the notify URL, profile or new-SSH-key form in Settings is refused, the message now shows in the shared danger toast (.toast[data-tone=danger] role="alert") that browse.ts already uses for a failed mirror. The page-local .error-note class is retired.

• src/web/pages/account.ts: a small refusal(message) helper draws the toast. The words are unchanged and still escaped. The toast sits under each form's actions, not above its first field. When it appears, it pushes nothing in the form down: only content below the form moves. The old note sat at the top and moved every field. Messages tied to one field (display name, email) still use the field's .error, as before.
• src/web/style/components.ts: the .error-note rule is deleted.
• docs/design/sections/5d-page-local-classes.md: its entry is deleted. That leaves the style/components.ts bullet with an intro line and no class under it; the design check accepts that.
• test/account-refusals.test.ts (new): posts one refused form to each of the three — an http: notify URL, a bogus commitEmail (which falls back to the form-level profile message), and a malformed SSH key. Each test checks for a 422, the words inside the danger toast with role="alert", and no error-note. The profile test also checks that the HTML-looking commitEmail value never comes back unescaped. All three fail on main.

grep -rn error-note src docs finds nothing. bun scripts/gate.ts, bun x tsc --noEmit and bun scripts/design-lint.ts pass. Because the diff touches the shared stylesheet, scripts/fast.ts named 1,089 test files (an estimated 95 minutes), so I ran the 44 files that cover this change instead: the account, notify, keys, settings and passkeys suites and the design-lint tests, with 0 failures. The forge's check runs the rest on this push.

To try it on the preview, go to Settings and save http://example.test/t as the notify URL. The red alert appears under the Save button.

🤖 Generated with Claude Code

When the notify URL, profile or new-SSH-key form in Settings is refused, the message now shows in the shared danger toast (.toast[data-tone=danger] role="alert") that browse.ts already uses for a failed mirror. The page-local .error-note class is retired.

• src/web/pages/account.ts: a small refusal(message) helper draws the toast. The words are unchanged and still escaped. The toast sits under each form's actions, not above its first field. When it appears, it pushes nothing in the form down: only content below the form moves. The old note sat at the top and moved every field. Messages tied to one field (display name, email) still use the field's .error, as before.
• src/web/style/components.ts: the .error-note rule is deleted.
• docs/design/sections/5d-page-local-classes.md: its entry is deleted. That leaves the style/components.ts bullet with an intro line and no class under it; the design check accepts that.
• test/account-refusals.test.ts (new): posts one refused form to each of the three — an http: notify URL, a bogus commitEmail (which falls back to the form-level profile message), and a malformed SSH key. Each test checks for a 422, the words inside the danger toast with role="alert", and no error-note. The profile test also checks that the HTML-looking commitEmail value never comes back unescaped. All three fail on main.

The first check failed because no commit message had a Try: line. An empty follow-up commit now carries one.

grep -rn error-note src docs finds nothing. bun scripts/gate.ts, bun x tsc --noEmit and bun scripts/design-lint.ts pass. Because the diff touches the shared stylesheet, scripts/fast.ts named 1,089 test files (an estimated 95 minutes), so I ran the 44 files that cover this change instead: the account, notify, keys, settings and passkeys suites and the design-lint tests, with 0 failures. The forge's check runs the rest on this push.

Try: open /settings on the preview, save http://example.test/t as the Notify URL, and the red alert appears under "Save notify URL".

🤖 Generated with Claude Code