✔ typed durable note calls retain CSRF, business, no-store and response epoch boundaries (2.978791ms)
✔ typed note flag does not disable ordinary idempotency on arbitrary routes (1.494584ms)
✔ old business response is discarded when the active membership changes (0.153417ms)
✔ private calls carry business context but session discovery can detect another-tab switch (0.119ms)
✔ failed write retains retry id, while an account switch clears it (0.203708ms)
✔ portal requests are independent of staff context changes (0.13925ms)
✔ private image response is discarded across an account switch (0.284959ms)
✔ private image lease is revoked on context change and release is idempotent (0.47325ms)
✔ staff switch does not revoke a customer portal image (0.696375ms)
✔ upload retry identity includes bytes, not just endpoint (6.733875ms)
✔ opening another preview does not announce an account switch; login does (1.240667ms)
✔ private PDF arriving after a customer session switch is discarded before download (0.203083ms)
✔ private PDF uses business context and only downloads confirmed PDF responses (12.279083ms)
✔ customer CSV cannot download after an owner business switch (0.139708ms)
✔ customer CSV enforces type and downloads the safe filename with credentials and business scope (0.257833ms)
✔ Week and day navigation cross months, years and UK clocks without shifting dates (1.4205ms)
✔ Midnight endings are exclusive while all-day end dates are inclusive (0.076792ms)
✔ Repeated UK hour shows distinguishable summer and winter clock labels (13.920083ms)
✔ matching contacts never select identity; inactive records cannot be transfer choices (1.085125ms)
✔ confirmation uses the exact preview rather than later selection and preserves false acknowledgement (0.363541ms)
✔ export filter is encoded and completion rows contain only explicitly selected exact evidence (0.6285ms)
✔ retention stores only authenticated ciphertext, no key/text/job/account/URL (8.443166ms)
✔ reopening is locked; same authorized key unlocks after reconnect (0.995417ms)
✔ another exact scope cannot list, claim or decrypt actor ciphertext (1.127875ms)
✔ reload retries same operation after before failure (2.249625ms)
✔ reload retries same operation after after failure (2.8155ms)
✔ concurrent enqueue does not disappear when an older item is acknowledged (0.810084ms)
✔ two tabs cannot concurrently claim one retained note (1.082041ms)
✔ late response after sign-out or switching cannot unlock or acknowledge (1.90925ms)
✔ late unlock result is ignored after access changes (0.707792ms)
✔ expired lease cannot retain, read or send and no reconnect submits work (1.3755ms)
✔ invalid reply preserves note and operation (1.429333ms)
✔ stale reply preserves note and operation (0.657833ms)
✔ denied reply preserves note and operation (1.956542ms)
✔ quota failure never reports retained or sends without a durable sending marker (0.919041ms)
✔ lost correction reply retains both versions and recovers same identity (2.449166ms)
✔ confirmed earlier revision retains proposed correction without duplicate (2.470083ms)
✔ update is blocked while retaining or sending, durable idle notes permit update (0.968792ms)
✔ storage loss is not presented as a successful confirmation (0.369041ms)
✔ key failure preserves ciphertext instead of silently resetting the store (0.579333ms)
✔ late local retention reply keeps one durable identity when editor retries (0.41575ms)
✔ failed local acknowledgement after server commit is safely resolved after reload (1.245083ms)
✔ unavailable IndexedDB denies retention before requesting a key (0.333042ms)
✔ fractional lines round half up in integer pence before subtotal and VAT (0.941375ms)
✔ percentage deposit rounds half up and leaves the exact remaining pence (0.514ms)
✔ invalid deposit percentages and sub-penny deposits are rejected (0.094042ms)
✔ stage editing cannot silently drop or add a penny (0.116416ms)
✔ opening a saved job and inspecting read-only history leaves editable facts clean (1.440333ms)
✔ job status changes and exact reversion are detected (0.258958ms)
✔ job notes changes and exact reversion are detected (0.125375ms)
✔ job scheduled_date changes and exact reversion are detected (0.146583ms)
✔ private job metadata priority stays protected (0.155417ms)
✔ private job metadata next_action stays protected (0.111666ms)
✔ private job metadata next_action_date stays protected (0.09275ms)
✔ private job metadata last_contact_date stays protected (0.090833ms)
✔ private job metadata completed_date stays protected (0.158083ms)
✔ private job metadata postcode_group stays protected (0.332166ms)
✔ private job metadata archived stays protected (0.10025ms)
✔ private job metadata followup_excluded stays protected (0.07375ms)
✔ valid equivalent tag case, spacing and order are clean; duplicate or invalid tags stay dirty (0.179875ms)
✔ a confirmed save advances only the saved snapshot, including after reopening (0.158709ms)
✔ failed and stale save attempts do not advance a draft baseline (0.592041ms)
✔ successful in-flight save accepts only the submitted values and preserves later text (0.768875ms)
✔ quote values cover each line, VAT, both dates and customer notes (0.438042ms)
✔ opening or cancelling a time editor is clean; blank override differs from an explicit zero rate (0.30575ms)
✔ transfer selection, reason and confirmation matter; object property order does not (0.182291ms)
✔ file selections and photo sharing fields remain distinct from viewing a photo (0.132042ms)
✔ clean leave executes immediately without a pending confirmation (3.819417ms)
✔ Keep editing and Escape cancellation execute nothing and preserve the selected draft (0.119375ms)
✔ dirty leave has one owner and repeated requests retain the first intended destination (1.008917ms)
✔ clean repeated clicks and async discard cannot execute twice or start a background action (0.480792ms)
✔ a failed logout exposes its error without changing private draft values (0.367625ms)
✔ an identity reset cancels pending leave and ignores completion from its old context (0.585125ms)
✔ selection rejects unsafe names, empty and oversized files but accepts supported size boundaries (0.552708ms)
✔ real HEIC content is selected without a native browser decoder or a misleading preview (6.812917ms)
✔ HEIF header checks do not accept a renamed non-image or an AVIF brand (0.161292ms)
✔ photo rejection 413 preserves selected bytes and permits a corrected retry (0.556166ms)
✔ photo rejection 415 preserves selected bytes and permits a corrected retry (0.138791ms)
✔ photo rejection 422 preserves selected bytes and permits a corrected retry (0.150125ms)
✔ selection checks image signatures instead of trusting extensions or declared MIME (0.076ms)
✔ visitor sends without cookies; a successful result exposes no receipt or private references (0.329084ms)
✔ concurrent clicks coalesce into one logical request (0.148125ms)
✔ lost response retains exact payload/key; edits are blocked until the unchanged retry succeeds (0.230583ms)
✔ a stalled request times out and retries the identical logical enquiry (11.448334ms)
✔ ambiguous HTTP 408 retains the logical operation (0.338875ms)
✔ ambiguous HTTP 500 retains the logical operation (0.101875ms)
✔ ambiguous HTTP 503 retains the logical operation (0.081875ms)
✔ malformed success is uncertain and never produces a successful-looking enquiry (0.158334ms)
✔ validation error allows correction without discarding the selected files or date (0.11325ms)
✔ a deliberately separate matching-contact enquiry has a new operation identity (0.087541ms)
✔ public permission defaults to no projection and no rating (0.680625ms)
✔ approved statement retains exact customer text (0.074459ms)
✔ approval requires explicit boolean and nonempty exact fields (0.12675ms)
✔ projection bounds are enforced (0.063834ms)
✔ unconfirmed response does not produce a payload (0.083833ms)
✔ response keeps private answers separate from optional publication (0.085875ms)
✔ all four ratings and recommendation require a deliberate valid choice (0.127ms)
✔ publication uses the exact current approved preview hash and version (0.086333ms)
✔ the repeated autumn hour requires the selected actual offset (20.482625ms)
✔ spring clock gap and seasonally incorrect offsets are rejected (1.71975ms)
✔ London date and intervals remain the same on a computer in another timezone (0.390959ms)
✔ incomplete, reversed and zero-duration correction inputs are rejected before saving (0.391916ms)
✔ customer price starts blank and no private source details become a document line (0.078292ms)
✔ timer display permits long captures but never negative elapsed time (0.066791ms)
✔ quoted commas, multiline text, escaped quotes, CRLF and blank lines (1.260417ms)
✔ auto mapping and preview require explicit valid prices; no NaN/default repairs (0.341125ms)
✔ column mapping, row limits, reviewed price overrides and invalid costs (0.144417ms)
✔ reopened saved rows and reordered object fields are clean (0.814917ms)
✔ equivalent valid price and quantity spellings do not create unsaved changes (0.70325ms)
✔ every catalogue edit is protected and reverting to saved values is clean (0.126291ms)
✔ blank optional prices, zero and invalid numeric input remain distinct (0.141416ms)
✔ job selection, purchasing dates, notes and applied previous-price values are protected (0.126958ms)
✔ supplier reference edits, additions and removals are protected (0.143334ms)
✔ catalogue selection and CSV mapping or programmatic overrides are protected (0.313708ms)
✔ a persisted changed price becomes a clean reopened baseline (0.690833ms)
✔ comparison pairs render before then after without changing stored order (1.080958ms)
✔ reorder preserves identity and bounds (0.107542ms)
✔ public drafts and selected photos start with fresh public text (2.93925ms)
✔ response binds to displayed version and saved snapshot with deliberate confirmation (0.794542ms)
✔ expired quote cannot produce a response payload (0.805792ms)
✔ superseded quote cannot produce a response payload (0.053292ms)
✔ draft quote cannot produce a response payload (0.041959ms)
✔ already accepted quote cannot produce a response payload (0.048542ms)
✔ declined quote cannot produce a response payload (0.038333ms)
✔ missing snapshot review is rejected (0.075541ms)
✔ PDF links remain private and scoped to exact document or stage (0.07725ms)
✔ a preview never requests private draft content without valid matching owner access (3.265791ms)
✔ draft preview loads once under exact owner access; valid checks do not replace its saved content (1.040916ms)
✔ owner context changes clear a loaded preview while customer context changes do not (0.846041ms)
✔ preview invalidates changed owner context slug (0.774792ms)
✔ preview invalidates changed owner context role (0.723042ms)
✔ preview invalidates changed owner context membership_id (0.629ms)
✔ preview invalidates changed owner context csrf (1.113708ms)
✔ unavailable preview validation clears access and does not reload draft content (2.097792ms)
✔ logout during an initial draft load prevents its late response from exposing content (1.50725ms)
✔ preview deadline fails closed, coalesces checks and ignores late success (0.828417ms)
✔ closing a preview cancels listeners and ignores a pending load without reporting lost access (0.590792ms)
✔ private gallery preview loads under owner access once and valid checks retain its saved content (0.667917ms)
✔ gallery preview clears all held draft content on owner logout or account broadcast (1.077208ms)
✔ gallery preview clears changed owner business_id (0.572166ms)
✔ gallery preview clears changed owner slug (0.546125ms)
✔ gallery preview clears changed owner role (0.510291ms)
✔ gallery preview clears changed owner membership_id (0.505667ms)
✔ gallery preview clears changed owner csrf (0.504958ms)
✔ gallery preview rejects staff access and an unavailable exact-business project (0.566ms)
✔ gallery preview cannot reappear from a late private response after access ends (0.576125ms)
✔ gallery preview fails closed when validation is unavailable and leaves no active polling (0.549083ms)
✔ gallery preview deadline ignores late load and closing cancels pending access (1.527792ms)
✔ feedback validation is request-only and valid checks never replace draft inputs (3.421917ms)
✔ contact, transfer and feedback changes revalidate without broadcasting codes or private answers (1.418917ms)
✔ feedback validation failure 401 clears only the request view (0.682208ms)
✔ feedback validation failure 404 clears only the request view (0.550041ms)
✔ feedback validation failure 503 clears only the request view (0.533875ms)
✔ feedback checks coalesce, time out closed and cannot revive a view with a late result (0.564875ms)
✔ stopped feedback checks ignore a late rejection and release all timers and listeners (0.771209ms)
✔ portal 401 clears private context and image leases, rejects old work and preserves staff access (2.00875ms)
✔ public credential errors and another customer document 404 do not end a valid portal context (0.741208ms)
✔ focus, visibility and visible periodic checks preserve a valid context without resetting forms (0.713583ms)
✔ owner revoke, reissue, contact update and legacy rotation revalidate without blindly signing out (0.782125ms)
✔ another-tab access notice checks the active account and clears it only when validation fails (0.591ms)
✔ customer identity changes clear old content even if the browser cookie now authenticates successfully (1.38375ms)
✔ business identity changes clear old content even if the browser cookie now authenticates successfully (1.5455ms)
✔ unreachable validation fails closed and overlapping focus checks coalesce (1.624375ms)
✔ validation deadline clears content and a late successful response cannot restore it (1.546417ms)
✔ stopping a watcher removes its deadline and ignores a late successful identity result (0.666875ms)
✔ apiImage clears current portal content on 401 but an old response cannot clear a newer session (0.53625ms)
✔ downloadPrivate clears current portal content on 401 but an old response cannot clear a newer session (0.525ms)
✔ install verifies every exact asset, never caches HTML navigation, and never forces activation (20.919083ms)
✔ corrupt, missing, redirected and wrong-type shell responses fail installation without touching previous caches (12.641709ms)
✔ all mutations, APIs, private images/documents, queries, ranges and foreign requests bypass cache (3.3555ms)
✔ fresh navigations are network-only; offline and 503 return neutral fallback without recording URL or credentials (2.297334ms)
✔ old hashed bundles coexist; unknown assets are never learned or read from unrelated caches (4.11775ms)
✔ cleanup retains old/unresponsive tabs and removes only our obsolete namespace when all current (1505.48575ms)
✔ updates require every tab to prepare; dirty/uncertain/unresponsive/changed tab sets postpone (1517.186125ms)
✔ only a deliberate request from a window with all safe responses can activate (4.075917ms)
✔ switching between week and month rules keeps valid explicit choices (2.224667ms)
✔ all-day conversion clears incompatible clock inputs (0.089083ms)
✔ single visit proposal retains original identity and requires fresh acknowledgement (0.065959ms)
✔ booking edits send booleans and exclude server and history fields (0.078958ms)
✔ suggested window is inclusive and bounded through DST (0.075583ms)
✔ month views include leap days and cross-year navigation (0.154208ms)
✔ range rejects reversed or over-62-day windows (0.096666ms)
✔ weekly windows and DST remain London calendar dates (0.054208ms)
✔ excluded placeholder can propose a reviewed single-date override without assuming a booking (0.087584ms)
✔ new request, edited filter, context change and unmount reject late success and failure (1.416958ms)
✔ drills use exact customer/resource IDs and one metric, never matching names or allocating money (0.264959ms)
✔ supporting row pages disclose full totals and do not lose the final partial page (0.960416ms)
✔ exports bind applied filters and exact snapshot, not draft input; time displays exact minutes (0.204375ms)
✔ service enquiry uses only the exact published business service and keeps its canonical title (0.916417ms)
✔ reordering is bounded, preserves identities and leaves the saved array untouched (0.9065ms)
✔ new page starts unpublished with independent editable content (2.594ms)
✔ page and service routes resolve exactly and links retain the business prefix (0.100167ms)
✔ light and dark branding retain a contrasting button text colour (0.08975ms)
✔ draft, timer and in-flight blocks compose and are released independently (0.40475ms)
✔ new requests wait for the bounded update hold without starting or losing work (0.1125ms)
✔ unresolved ordinary saves block updates, reuse their operation ID, and known outcomes clear the block (2.983291ms)
✔ the form safety net detects edited mounted fields, accepts reversal and ignores removed forms (0.364208ms)
✔ registration does not reload on controller change; clean tab holds/release and old protocol is ignored (0.885584ms)
✔ dirty local page refuses update before contacting the worker and leaves current UI intact (0.192708ms)
✔ ready reviews exclude closed, snoozed and ineligible history (0.38375ms)
✔ snooze expiry uses the server effective state (0.074334ms)
✔ only preparation writes a draft and only snooze writes its date (0.54625ms)
✔ review confirmation is not inferred from a filled draft (0.081042ms)
✔ tag input retains duplicates for server validation (0.400042ms)
✔ all established workspace labels remain reachable alongside new sections (0.084541ms)
ℹ tests 205
ℹ suites 0
ℹ pass 205
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 3235.936958