✔ typed durable note calls retain CSRF, business, no-store and response epoch boundaries (4.81ms)
✔ typed note flag does not disable ordinary idempotency on arbitrary routes (0.89725ms)
✔ old business response is discarded when the active membership changes (0.150333ms)
✔ private calls carry business context but session discovery can detect another-tab switch (0.212917ms)
✔ failed write retains retry id, while an account switch clears it (0.413792ms)
✔ portal requests are independent of staff context changes (0.172417ms)
✔ private image response is discarded across an account switch (0.303041ms)
✔ private image lease is revoked on context change and release is idempotent (0.782834ms)
✔ staff switch does not revoke a customer portal image (0.212833ms)
✔ upload retry identity includes bytes, not just endpoint (3.514083ms)
✔ opening another preview does not announce an account switch; login does (1.499042ms)
✔ private PDF arriving after a customer session switch is discarded before download (0.201959ms)
✔ private PDF uses business context and only downloads confirmed PDF responses (21.340125ms)
✔ customer CSV cannot download after an owner business switch (0.161542ms)
✔ customer CSV enforces type and downloads the safe filename with credentials and business scope (0.26825ms)
✔ Week and day navigation cross months, years and UK clocks without shifting dates (9.461ms)
✔ Midnight endings are exclusive while all-day end dates are inclusive (0.079375ms)
✔ Repeated UK hour shows distinguishable summer and winter clock labels (34.317875ms)
✔ matching contacts never select identity; inactive records cannot be transfer choices (1.597333ms)
✔ confirmation uses the exact preview rather than later selection and preserves false acknowledgement (0.095959ms)
✔ export filter is encoded and completion rows contain only explicitly selected exact evidence (0.149375ms)
✔ correction freezes the reviewed body and validates the durable exact outcome (2.374167ms)
✔ retention stores only authenticated ciphertext, no key/text/job/account/URL (14.686625ms)
✔ reopening is locked; same authorized key unlocks after reconnect (1.214083ms)
✔ another exact scope cannot list, claim or decrypt actor ciphertext (0.771084ms)
✔ reload retries same operation after before failure (5.108458ms)
✔ reload retries same operation after after failure (2.911ms)
✔ concurrent enqueue does not disappear when an older item is acknowledged (4.457375ms)
✔ two tabs cannot concurrently claim one retained note (2.44475ms)
✔ late response after sign-out or switching cannot unlock or acknowledge (2.924667ms)
✔ late unlock result is ignored after access changes (1.136167ms)
✔ expired lease cannot retain, read or send and no reconnect submits work (2.165208ms)
✔ invalid reply preserves note and operation (4.116625ms)
✔ stale reply preserves note and operation (0.517667ms)
✔ denied reply preserves note and operation (2.40525ms)
✔ quota failure never reports retained or sends without a durable sending marker (1.042625ms)
✔ lost correction reply retains both versions and recovers same identity (2.13525ms)
✔ confirmed earlier revision retains proposed correction without duplicate (2.868291ms)
✔ update is blocked while retaining or sending, durable idle notes permit update (8.752042ms)
✔ storage loss is not presented as a successful confirmation (5.091166ms)
✔ key failure preserves ciphertext instead of silently resetting the store (3.421291ms)
✔ late local retention reply keeps one durable identity when editor retries (1.730791ms)
✔ failed local acknowledgement after server commit is safely resolved after reload (7.791666ms)
✔ unavailable IndexedDB denies retention before requesting a key (0.599458ms)
✔ fractional lines round half up in integer pence before subtotal and VAT (0.508458ms)
✔ percentage deposit rounds half up and leaves the exact remaining pence (1.063292ms)
✔ invalid deposit percentages and sub-penny deposits are rejected (0.323458ms)
✔ stage editing cannot silently drop or add a penny (0.335291ms)
✔ opening a saved job and inspecting read-only history leaves editable facts clean (1.082083ms)
✔ job status changes and exact reversion are detected (0.117208ms)
✔ job notes changes and exact reversion are detected (0.061792ms)
✔ job scheduled_date changes and exact reversion are detected (0.069541ms)
✔ private job metadata priority stays protected (0.063625ms)
✔ private job metadata next_action stays protected (0.043709ms)
✔ private job metadata next_action_date stays protected (0.042625ms)
✔ private job metadata last_contact_date stays protected (0.0395ms)
✔ private job metadata completed_date stays protected (0.056333ms)
✔ private job metadata postcode_group stays protected (0.089291ms)
✔ private job metadata archived stays protected (0.652916ms)
✔ private job metadata followup_excluded stays protected (0.040542ms)
✔ valid equivalent tag case, spacing and order are clean; duplicate or invalid tags stay dirty (0.088959ms)
✔ a confirmed save advances only the saved snapshot, including after reopening (0.0755ms)
✔ failed and stale save attempts do not advance a draft baseline (0.469292ms)
✔ successful in-flight save accepts only the submitted values and preserves later text (0.809625ms)
✔ quote values cover each line, VAT, both dates and customer notes (0.219959ms)
✔ opening or cancelling a time editor is clean; blank override differs from an explicit zero rate (0.121542ms)
✔ transfer selection, reason and confirmation matter; object property order does not (0.4235ms)
✔ file selections and photo sharing fields remain distinct from viewing a photo (0.284041ms)
✔ clean leave executes immediately without a pending confirmation (9.518958ms)
✔ Keep editing and Escape cancellation execute nothing and preserve the selected draft (0.233708ms)
✔ dirty leave has one owner and repeated requests retain the first intended destination (0.649958ms)
✔ clean repeated clicks and async discard cannot execute twice or start a background action (2.265042ms)
✔ a failed logout exposes its error without changing private draft values (0.488625ms)
✔ an identity reset cancels pending leave and ignores completion from its old context (3.057292ms)
✔ selection rejects unsafe names, empty and oversized files but accepts supported size boundaries (1.240416ms)
✔ real HEIC content is selected without a native browser decoder or a misleading preview (8.051625ms)
✔ HEIF header checks do not accept a renamed non-image or an AVIF brand (0.190167ms)
✔ photo rejection 413 preserves selected bytes and permits a corrected retry (0.621042ms)
✔ photo rejection 415 preserves selected bytes and permits a corrected retry (0.148083ms)
✔ photo rejection 422 preserves selected bytes and permits a corrected retry (0.198375ms)
✔ selection checks image signatures instead of trusting extensions or declared MIME (0.084458ms)
✔ visitor sends without cookies; a successful result exposes no receipt or private references (0.233875ms)
✔ concurrent clicks coalesce into one logical request (0.188292ms)
✔ lost response retains exact payload/key; edits are blocked until the unchanged retry succeeds (0.249667ms)
✔ a stalled request times out and retries the identical logical enquiry (12.340958ms)
✔ ambiguous HTTP 408 retains the logical operation (0.288125ms)
✔ ambiguous HTTP 500 retains the logical operation (0.099834ms)
✔ ambiguous HTTP 503 retains the logical operation (0.089125ms)
✔ malformed success is uncertain and never produces a successful-looking enquiry (0.177125ms)
✔ validation error allows correction without discarding the selected files or date (0.11775ms)
✔ a deliberately separate matching-contact enquiry has a new operation identity (0.091167ms)
✔ public permission defaults to no projection and no rating (0.758625ms)
✔ approved statement retains exact customer text (0.1995ms)
✔ approval requires explicit boolean and nonempty exact fields (0.3505ms)
✔ projection bounds are enforced (0.096209ms)
✔ unconfirmed response does not produce a payload (0.112458ms)
✔ response keeps private answers separate from optional publication (0.090208ms)
✔ all four ratings and recommendation require a deliberate valid choice (0.128584ms)
✔ publication uses the exact current approved preview hash and version (0.08825ms)
✔ the repeated autumn hour requires the selected actual offset (45.151083ms)
✔ spring clock gap and seasonally incorrect offsets are rejected (1.714084ms)
✔ London date and intervals remain the same on a computer in another timezone (0.84975ms)
✔ incomplete, reversed and zero-duration correction inputs are rejected before saving (4.828834ms)
✔ customer price starts blank and no private source details become a document line (0.222375ms)
✔ timer display permits long captures but never negative elapsed time (0.1465ms)
✔ quoted commas, multiline text, escaped quotes, CRLF and blank lines (3.501709ms)
✔ auto mapping and preview require explicit valid prices; no NaN/default repairs (0.827791ms)
✔ column mapping, row limits, reviewed price overrides and invalid costs (0.354709ms)
✔ reopened saved rows and reordered object fields are clean (0.565041ms)
✔ equivalent valid price and quantity spellings do not create unsaved changes (0.507584ms)
✔ every catalogue edit is protected and reverting to saved values is clean (0.10875ms)
✔ blank optional prices, zero and invalid numeric input remain distinct (0.292458ms)
✔ job selection, purchasing dates, notes and applied previous-price values are protected (0.166125ms)
✔ supplier reference edits, additions and removals are protected (0.154208ms)
✔ catalogue selection and CSV mapping or programmatic overrides are protected (0.151583ms)
✔ a persisted changed price becomes a clean reopened baseline (0.0635ms)
✔ comparison pairs render before then after without changing stored order (0.697708ms)
✔ reorder preserves identity and bounds (0.087875ms)
✔ public drafts and selected photos start with fresh public text (8.379458ms)
✔ response binds to displayed version and saved snapshot with deliberate confirmation (0.812417ms)
✔ expired quote cannot produce a response payload (1.127834ms)
✔ superseded quote cannot produce a response payload (0.148208ms)
✔ draft quote cannot produce a response payload (0.08675ms)
✔ already accepted quote cannot produce a response payload (0.089166ms)
✔ declined quote cannot produce a response payload (0.077666ms)
✔ missing snapshot review is rejected (0.227208ms)
✔ PDF links remain private and scoped to exact document or stage (0.183083ms)
✔ a preview never requests private draft content without valid matching owner access (3.195041ms)
✔ draft preview loads once under exact owner access; valid checks do not replace its saved content (1.023ms)
✔ owner context changes clear a loaded preview while customer context changes do not (0.841666ms)
✔ preview invalidates changed owner context slug (0.768292ms)
✔ preview invalidates changed owner context role (0.728875ms)
✔ preview invalidates changed owner context membership_id (0.661167ms)
✔ preview invalidates changed owner context csrf (0.633917ms)
✔ unavailable preview validation clears access and does not reload draft content (2.490084ms)
✔ logout during an initial draft load prevents its late response from exposing content (5.340541ms)
✔ preview deadline fails closed, coalesces checks and ignores late success (6.588167ms)
✔ closing a preview cancels listeners and ignores a pending load without reporting lost access (2.694958ms)
✔ private gallery preview loads under owner access once and valid checks retain its saved content (3.320541ms)
✔ gallery preview clears all held draft content on owner logout or account broadcast (4.8ms)
✔ gallery preview clears changed owner business_id (2.052875ms)
✔ gallery preview clears changed owner slug (0.844917ms)
✔ gallery preview clears changed owner role (0.665667ms)
✔ gallery preview clears changed owner membership_id (0.601291ms)
✔ gallery preview clears changed owner csrf (1.125375ms)
✔ gallery preview rejects staff access and an unavailable exact-business project (0.833875ms)
✔ gallery preview cannot reappear from a late private response after access ends (0.749833ms)
✔ gallery preview fails closed when validation is unavailable and leaves no active polling (0.684459ms)
✔ gallery preview deadline ignores late load and closing cancels pending access (1.352542ms)
✔ feedback validation is request-only and valid checks never replace draft inputs (5.04775ms)
✔ contact, transfer and feedback changes revalidate without broadcasting codes or private answers (1.763ms)
✔ feedback validation failure 401 clears only the request view (0.735292ms)
✔ feedback validation failure 404 clears only the request view (0.583625ms)
✔ feedback validation failure 503 clears only the request view (0.557667ms)
✔ feedback checks coalesce, time out closed and cannot revive a view with a late result (0.586917ms)
✔ stopped feedback checks ignore a late rejection and release all timers and listeners (0.900375ms)
✔ portal 401 clears private context and image leases, rejects old work and preserves staff access (1.819917ms)
✔ public credential errors and another customer document 404 do not end a valid portal context (0.841417ms)
✔ focus, visibility and visible periodic checks preserve a valid context without resetting forms (0.740209ms)
✔ owner revoke, reissue, contact update and legacy rotation revalidate without blindly signing out (0.791458ms)
✔ another-tab access notice checks the active account and clears it only when validation fails (0.592084ms)
✔ customer identity changes clear old content even if the browser cookie now authenticates successfully (0.846333ms)
✔ business identity changes clear old content even if the browser cookie now authenticates successfully (0.672917ms)
✔ unreachable validation fails closed and overlapping focus checks coalesce (0.66625ms)
✔ validation deadline clears content and a late successful response cannot restore it (0.582834ms)
✔ stopping a watcher removes its deadline and ignores a late successful identity result (0.5735ms)
✔ apiImage clears current portal content on 401 but an old response cannot clear a newer session (0.489375ms)
✔ downloadPrivate clears current portal content on 401 but an old response cannot clear a newer session (0.446709ms)
✔ install verifies every exact asset, never caches HTML navigation, and never forces activation (22.263875ms)
✔ corrupt, missing, redirected and wrong-type shell responses fail installation without touching previous caches (17.574ms)
✔ all mutations, APIs, private images/documents, queries, ranges and foreign requests bypass cache (6.174416ms)
✔ fresh navigations are network-only; offline and 503 return neutral fallback without recording URL or credentials (3.942958ms)
✔ old hashed bundles coexist; unknown assets are never learned or read from unrelated caches (10.969916ms)
✔ cleanup retains old/unresponsive tabs and removes only our obsolete namespace when all current (1505.272208ms)
✔ updates require every tab to prepare; dirty/uncertain/unresponsive/changed tab sets postpone (1503.726333ms)
✔ only a deliberate request from a window with all safe responses can activate (1.049416ms)
✔ switching between week and month rules keeps valid explicit choices (1.92775ms)
✔ all-day conversion clears incompatible clock inputs (0.092125ms)
✔ single visit proposal retains original identity and requires fresh acknowledgement (0.067ms)
✔ booking edits send booleans and exclude server and history fields (0.084625ms)
✔ suggested window is inclusive and bounded through DST (0.077125ms)
✔ month views include leap days and cross-year navigation (0.146083ms)
✔ range rejects reversed or over-62-day windows (0.098166ms)
✔ weekly windows and DST remain London calendar dates (0.056417ms)
✔ excluded placeholder can propose a reviewed single-date override without assuming a booking (0.091167ms)
✔ new request, edited filter, context change and unmount reject late success and failure (1.576125ms)
✔ drills use exact customer/resource IDs and one metric, never matching names or allocating money (0.260875ms)
✔ supporting row pages disclose full totals and do not lose the final partial page (1.423875ms)
✔ exports bind applied filters and exact snapshot, not draft input; time displays exact minutes (0.396583ms)
✔ service enquiry uses only the exact published business service and keeps its canonical title (0.467125ms)
✔ reordering is bounded, preserves identities and leaves the saved array untouched (0.374292ms)
✔ new page starts unpublished with independent editable content (2.793292ms)
✔ page and service routes resolve exactly and links retain the business prefix (0.105208ms)
✔ light and dark branding retain a contrasting button text colour (0.089584ms)
✔ draft, timer and in-flight blocks compose and are released independently (0.943208ms)
✔ new requests wait for the bounded update hold without starting or losing work (0.251792ms)
✔ unresolved ordinary saves block updates, reuse their operation ID, and known outcomes clear the block (4.078417ms)
✔ the form safety net detects edited mounted fields, accepts reversal and ignores removed forms (0.165166ms)
✔ registration does not reload on controller change; clean tab holds/release and old protocol is ignored (2.09575ms)
✔ dirty local page refuses update before contacting the worker and leaves current UI intact (0.535125ms)
✔ ready reviews exclude closed, snoozed and ineligible history (0.415167ms)
✔ snooze expiry uses the server effective state (0.0865ms)
✔ only preparation writes a draft and only snooze writes its date (0.614792ms)
✔ review confirmation is not inferred from a filled draft (0.05025ms)
✔ tag input retains duplicates for server validation (0.369334ms)
✔ all established workspace labels remain reachable alongside new sections (0.066792ms)
ℹ tests 206
ℹ suites 0
ℹ pass 206
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 3276.662125