✔ typed durable note calls retain CSRF, business, no-store and response epoch boundaries (6.054834ms)
✔ typed note flag does not disable ordinary idempotency on arbitrary routes (1.271375ms)
✔ old business response is discarded when the active membership changes (0.461209ms)
✔ private calls carry business context but session discovery can detect another-tab switch (0.289709ms)
✔ failed write retains retry id, while an account switch clears it (1.050333ms)
✔ portal requests are independent of staff context changes (0.92ms)
✔ private image response is discarded across an account switch (0.78725ms)
✔ private image lease is revoked on context change and release is idempotent (1.175583ms)
✔ staff switch does not revoke a customer portal image (0.374542ms)
✔ upload retry identity includes bytes, not just endpoint (6.489167ms)
✔ opening another preview does not announce an account switch; login does (2.48825ms)
✔ private PDF arriving after a customer session switch is discarded before download (0.251834ms)
✔ private PDF uses business context and only downloads confirmed PDF responses (10.175042ms)
✔ customer CSV cannot download after an owner business switch (0.13925ms)
✔ customer CSV enforces type and downloads the safe filename with credentials and business scope (0.255584ms)
✔ Week and day navigation cross months, years and UK clocks without shifting dates (8.646333ms)
✔ Midnight endings are exclusive while all-day end dates are inclusive (0.086ms)
✔ Repeated UK hour shows distinguishable summer and winter clock labels (11.701791ms)
✔ matching contacts never select identity; inactive records cannot be transfer choices (1.489125ms)
✔ confirmation uses the exact preview rather than later selection and preserves false acknowledgement (0.08925ms)
✔ export filter is encoded and completion rows contain only explicitly selected exact evidence (0.174208ms)
✔ retention stores only authenticated ciphertext, no key/text/job/account/URL (18.3195ms)
✔ reopening is locked; same authorized key unlocks after reconnect (1.224292ms)
✔ another exact scope cannot list, claim or decrypt actor ciphertext (2.234375ms)
✔ reload retries same operation after before failure (5.313666ms)
✔ reload retries same operation after after failure (2.139167ms)
✔ concurrent enqueue does not disappear when an older item is acknowledged (1.099167ms)
✔ two tabs cannot concurrently claim one retained note (0.842209ms)
✔ late response after sign-out or switching cannot unlock or acknowledge (1.357916ms)
✔ late unlock result is ignored after access changes (0.293666ms)
✔ expired lease cannot retain, read or send and no reconnect submits work (1.218875ms)
✔ invalid reply preserves note and operation (2.043084ms)
✔ stale reply preserves note and operation (1.579833ms)
✔ denied reply preserves note and operation (3.66575ms)
✔ quota failure never reports retained or sends without a durable sending marker (1.012042ms)
✔ lost correction reply retains both versions and recovers same identity (2.529375ms)
✔ confirmed earlier revision retains proposed correction without duplicate (3.627458ms)
✔ update is blocked while retaining or sending, durable idle notes permit update (2.161708ms)
✔ storage loss is not presented as a successful confirmation (0.306209ms)
✔ key failure preserves ciphertext instead of silently resetting the store (0.8975ms)
✔ late local retention reply keeps one durable identity when editor retries (0.992667ms)
✔ failed local acknowledgement after server commit is safely resolved after reload (0.762792ms)
✔ unavailable IndexedDB denies retention before requesting a key (0.161334ms)
✔ fractional lines round half up in integer pence before subtotal and VAT (1.004292ms)
✔ percentage deposit rounds half up and leaves the exact remaining pence (1.112417ms)
✔ invalid deposit percentages and sub-penny deposits are rejected (0.142167ms)
✔ stage editing cannot silently drop or add a penny (0.133084ms)
✔ opening a saved job and inspecting read-only history leaves editable facts clean (0.751667ms)
✔ job status changes and exact reversion are detected (0.092083ms)
✔ job notes changes and exact reversion are detected (0.062125ms)
✔ job scheduled_date changes and exact reversion are detected (0.067459ms)
✔ private job metadata priority stays protected (0.096875ms)
✔ private job metadata next_action stays protected (0.052792ms)
✔ private job metadata next_action_date stays protected (0.051208ms)
✔ private job metadata last_contact_date stays protected (0.043ms)
✔ private job metadata completed_date stays protected (0.071041ms)
✔ private job metadata postcode_group stays protected (1.025167ms)
✔ private job metadata archived stays protected (0.072917ms)
✔ private job metadata followup_excluded stays protected (0.089291ms)
✔ valid equivalent tag case, spacing and order are clean; duplicate or invalid tags stay dirty (0.101167ms)
✔ a confirmed save advances only the saved snapshot, including after reopening (0.081167ms)
✔ failed and stale save attempts do not advance a draft baseline (0.325625ms)
✔ successful in-flight save accepts only the submitted values and preserves later text (0.3935ms)
✔ quote values cover each line, VAT, both dates and customer notes (0.203667ms)
✔ opening or cancelling a time editor is clean; blank override differs from an explicit zero rate (0.120583ms)
✔ transfer selection, reason and confirmation matter; object property order does not (0.091084ms)
✔ file selections and photo sharing fields remain distinct from viewing a photo (0.062833ms)
✔ clean leave executes immediately without a pending confirmation (4.555417ms)
✔ Keep editing and Escape cancellation execute nothing and preserve the selected draft (0.329ms)
✔ dirty leave has one owner and repeated requests retain the first intended destination (2.018917ms)
✔ clean repeated clicks and async discard cannot execute twice or start a background action (0.315667ms)
✔ a failed logout exposes its error without changing private draft values (0.545583ms)
✔ an identity reset cancels pending leave and ignores completion from its old context (0.773458ms)
✔ selection rejects unsafe names, empty and oversized files but accepts supported size boundaries (1.286792ms)
✔ real HEIC content is selected without a native browser decoder or a misleading preview (11.525708ms)
✔ HEIF header checks do not accept a renamed non-image or an AVIF brand (0.338292ms)
✔ photo rejection 413 preserves selected bytes and permits a corrected retry (0.882209ms)
✔ photo rejection 415 preserves selected bytes and permits a corrected retry (0.184ms)
✔ photo rejection 422 preserves selected bytes and permits a corrected retry (0.175042ms)
✔ selection checks image signatures instead of trusting extensions or declared MIME (0.095541ms)
✔ visitor sends without cookies; a successful result exposes no receipt or private references (0.44825ms)
✔ concurrent clicks coalesce into one logical request (0.3785ms)
✔ lost response retains exact payload/key; edits are blocked until the unchanged retry succeeds (0.502209ms)
✔ a stalled request times out and retries the identical logical enquiry (12.012917ms)
✔ ambiguous HTTP 408 retains the logical operation (0.459541ms)
✔ ambiguous HTTP 500 retains the logical operation (0.119708ms)
✔ ambiguous HTTP 503 retains the logical operation (0.099583ms)
✔ malformed success is uncertain and never produces a successful-looking enquiry (0.166458ms)
✔ validation error allows correction without discarding the selected files or date (0.162125ms)
✔ a deliberately separate matching-contact enquiry has a new operation identity (0.194625ms)
✔ public permission defaults to no projection and no rating (1.357417ms)
✔ approved statement retains exact customer text (0.157333ms)
✔ approval requires explicit boolean and nonempty exact fields (0.607958ms)
✔ projection bounds are enforced (0.15475ms)
✔ unconfirmed response does not produce a payload (0.191584ms)
✔ response keeps private answers separate from optional publication (0.197ms)
✔ all four ratings and recommendation require a deliberate valid choice (0.333583ms)
✔ publication uses the exact current approved preview hash and version (0.251375ms)
✔ the repeated autumn hour requires the selected actual offset (16.737583ms)
✔ spring clock gap and seasonally incorrect offsets are rejected (0.927625ms)
✔ London date and intervals remain the same on a computer in another timezone (0.520583ms)
✔ incomplete, reversed and zero-duration correction inputs are rejected before saving (0.427958ms)
✔ customer price starts blank and no private source details become a document line (0.084542ms)
✔ timer display permits long captures but never negative elapsed time (0.069042ms)
✔ quoted commas, multiline text, escaped quotes, CRLF and blank lines (2.838709ms)
✔ auto mapping and preview require explicit valid prices; no NaN/default repairs (0.409917ms)
✔ column mapping, row limits, reviewed price overrides and invalid costs (0.157ms)
✔ reopened saved rows and reordered object fields are clean (1.239958ms)
✔ equivalent valid price and quantity spellings do not create unsaved changes (0.838083ms)
✔ every catalogue edit is protected and reverting to saved values is clean (0.135417ms)
✔ blank optional prices, zero and invalid numeric input remain distinct (0.142916ms)
✔ job selection, purchasing dates, notes and applied previous-price values are protected (0.123584ms)
✔ supplier reference edits, additions and removals are protected (0.13575ms)
✔ catalogue selection and CSV mapping or programmatic overrides are protected (0.130292ms)
✔ a persisted changed price becomes a clean reopened baseline (0.486ms)
✔ comparison pairs render before then after without changing stored order (0.785542ms)
✔ reorder preserves identity and bounds (0.657375ms)
✔ public drafts and selected photos start with fresh public text (2.716542ms)
✔ response binds to displayed version and saved snapshot with deliberate confirmation (1.046792ms)
✔ expired quote cannot produce a response payload (0.432375ms)
✔ superseded quote cannot produce a response payload (0.04975ms)
✔ draft quote cannot produce a response payload (0.041208ms)
✔ already accepted quote cannot produce a response payload (0.041875ms)
✔ declined quote cannot produce a response payload (0.035292ms)
✔ missing snapshot review is rejected (0.074292ms)
✔ PDF links remain private and scoped to exact document or stage (0.076541ms)
✔ a preview never requests private draft content without valid matching owner access (8.534042ms)
✔ draft preview loads once under exact owner access; valid checks do not replace its saved content (3.752792ms)
✔ owner context changes clear a loaded preview while customer context changes do not (7.758792ms)
✔ preview invalidates changed owner context slug (5.142875ms)
✔ preview invalidates changed owner context role (5.184709ms)
✔ preview invalidates changed owner context membership_id (4.386209ms)
✔ preview invalidates changed owner context csrf (1.578875ms)
✔ unavailable preview validation clears access and does not reload draft content (1.938625ms)
✔ logout during an initial draft load prevents its late response from exposing content (2.023291ms)
✔ preview deadline fails closed, coalesces checks and ignores late success (1.747375ms)
✔ closing a preview cancels listeners and ignores a pending load without reporting lost access (0.951875ms)
✔ private gallery preview loads under owner access once and valid checks retain its saved content (0.840417ms)
✔ gallery preview clears all held draft content on owner logout or account broadcast (1.515084ms)
✔ gallery preview clears changed owner business_id (0.728334ms)
✔ gallery preview clears changed owner slug (1.599542ms)
✔ gallery preview clears changed owner role (1.161833ms)
✔ gallery preview clears changed owner membership_id (0.705208ms)
✔ gallery preview clears changed owner csrf (0.612292ms)
✔ gallery preview rejects staff access and an unavailable exact-business project (0.650875ms)
✔ gallery preview cannot reappear from a late private response after access ends (0.630875ms)
✔ gallery preview fails closed when validation is unavailable and leaves no active polling (0.597833ms)
✔ gallery preview deadline ignores late load and closing cancels pending access (1.168458ms)
✔ feedback validation is request-only and valid checks never replace draft inputs (2.805583ms)
✔ contact, transfer and feedback changes revalidate without broadcasting codes or private answers (1.261167ms)
✔ feedback validation failure 401 clears only the request view (0.643375ms)
✔ feedback validation failure 404 clears only the request view (0.5205ms)
✔ feedback validation failure 503 clears only the request view (0.518417ms)
✔ feedback checks coalesce, time out closed and cannot revive a view with a late result (0.5465ms)
✔ stopped feedback checks ignore a late rejection and release all timers and listeners (1.098667ms)
✔ portal 401 clears private context and image leases, rejects old work and preserves staff access (1.56675ms)
✔ public credential errors and another customer document 404 do not end a valid portal context (0.845083ms)
✔ focus, visibility and visible periodic checks preserve a valid context without resetting forms (0.704167ms)
✔ owner revoke, reissue, contact update and legacy rotation revalidate without blindly signing out (0.746625ms)
✔ another-tab access notice checks the active account and clears it only when validation fails (0.571542ms)
✔ customer identity changes clear old content even if the browser cookie now authenticates successfully (0.515292ms)
✔ business identity changes clear old content even if the browser cookie now authenticates successfully (0.476834ms)
✔ unreachable validation fails closed and overlapping focus checks coalesce (0.528333ms)
✔ validation deadline clears content and a late successful response cannot restore it (0.494875ms)
✔ stopping a watcher removes its deadline and ignores a late successful identity result (0.493708ms)
✔ apiImage clears current portal content on 401 but an old response cannot clear a newer session (0.439208ms)
✔ downloadPrivate clears current portal content on 401 but an old response cannot clear a newer session (0.429458ms)
✔ install verifies every exact asset, never caches HTML navigation, and never forces activation (43.599416ms)
✔ corrupt, missing, redirected and wrong-type shell responses fail installation without touching previous caches (6.889541ms)
✔ all mutations, APIs, private images/documents, queries, ranges and foreign requests bypass cache (2.366417ms)
✔ fresh navigations are network-only; offline and 503 return neutral fallback without recording URL or credentials (3.342083ms)
✔ old hashed bundles coexist; unknown assets are never learned or read from unrelated caches (4.808042ms)
✔ cleanup retains old/unresponsive tabs and removes only our obsolete namespace when all current (1504.625375ms)
✔ updates require every tab to prepare; dirty/uncertain/unresponsive/changed tab sets postpone (1511.676333ms)
✔ only a deliberate request from a window with all safe responses can activate (4.2455ms)
✔ switching between week and month rules keeps valid explicit choices (3.695666ms)
✔ all-day conversion clears incompatible clock inputs (0.219958ms)
✔ single visit proposal retains original identity and requires fresh acknowledgement (0.148541ms)
✔ booking edits send booleans and exclude server and history fields (0.182833ms)
✔ suggested window is inclusive and bounded through DST (0.186292ms)
✔ month views include leap days and cross-year navigation (0.322709ms)
✔ range rejects reversed or over-62-day windows (0.213166ms)
✔ weekly windows and DST remain London calendar dates (0.135375ms)
✔ excluded placeholder can propose a reviewed single-date override without assuming a booking (0.18825ms)
✔ new request, edited filter, context change and unmount reject late success and failure (0.74625ms)
✔ drills use exact customer/resource IDs and one metric, never matching names or allocating money (0.116916ms)
✔ supporting row pages disclose full totals and do not lose the final partial page (1.081959ms)
✔ exports bind applied filters and exact snapshot, not draft input; time displays exact minutes (0.202292ms)
✔ service enquiry uses only the exact published business service and keeps its canonical title (0.468834ms)
✔ reordering is bounded, preserves identities and leaves the saved array untouched (0.374ms)
✔ new page starts unpublished with independent editable content (3.196459ms)
✔ page and service routes resolve exactly and links retain the business prefix (0.102125ms)
✔ light and dark branding retain a contrasting button text colour (0.088042ms)
✔ draft, timer and in-flight blocks compose and are released independently (0.394708ms)
✔ new requests wait for the bounded update hold without starting or losing work (0.139125ms)
✔ unresolved ordinary saves block updates, reuse their operation ID, and known outcomes clear the block (2.916792ms)
✔ the form safety net detects edited mounted fields, accepts reversal and ignores removed forms (0.169375ms)
✔ registration does not reload on controller change; clean tab holds/release and old protocol is ignored (0.841583ms)
✔ dirty local page refuses update before contacting the worker and leaves current UI intact (0.183542ms)
✔ ready reviews exclude closed, snoozed and ineligible history (0.393875ms)
✔ snooze expiry uses the server effective state (0.078625ms)
✔ only preparation writes a draft and only snooze writes its date (0.404125ms)
✔ review confirmation is not inferred from a filled draft (0.071667ms)
✔ tag input retains duplicates for server validation (0.377166ms)
✔ all established workspace labels remain reachable alongside new sections (0.067917ms)
ℹ tests 205
ℹ suites 0
ℹ pass 205
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 3297.818167