✔ shared copy: npm ci, pushed reachability, readonly/existing copy, webui delegation (360.114466ms)
✔ wrapper preserves Q81 lease and marker, rejects foreign/symlink; check uses effective roots (360.979286ms)
✔ bus unit copy/pm pins, install refuses all busy states and failed reads, drop-in refusal (371.081526ms)
✔ missing package manifest refuses before npm; npm failure removes the unpublished temp copy (239.515751ms)
✔ real pinned install loads bus and Console; same-copy mosaic talk passes proof, other trees refuse (2932.184203ms)
✔ bus status reads effective copy/pm/drop-ins without writes; check refuses an overridden ExecStart (434.720133ms)
✔ drop-ins in either override field and malformed metadata refuse; uninstall also checks --no-reload (152.592525ms)
✔ render prints the unit without the preview flags (8.668624ms)
✔ render carries every serve flag, the preview set included (5.878672ms)
✔ a partial preview set is refused (12.995444ms)
✔ a value the unit cannot carry is refused, for every flag (219.349017ms)
✔ the rendered unit names none of the human proof agent markers and sets no agent variable (22.163105ms)
✔ install into --dir with --no-reload writes the file whole, then reports unchanged (52.292553ms)
✔ install without --no-reload runs daemon-reload and nothing that starts the unit (18.824605ms)
✔ uninstall refuses while the unit is running, with or without --no-reload, and removes it once it is not (96.203271ms)
✔ status prints the unit state and GET /healthz on the installed port (147.142625ms)
✔ usage: an unknown verb or flag, and start or enable, exit 4 (52.500037ms)
✔ without --send, render is the template with its placeholders filled, byte for byte (23.257654ms)
✔ render --send with the preview set ends ExecStart with --send and changes nothing else (37.653663ms)
✔ --send without the whole preview set is refused and writes nothing (96.156255ms)
✔ install --send into --dir with --no-reload writes the sending unit, and status says whether it sends (188.245628ms)
✔ uninstall and status take no --send (27.124647ms)
✔ install refuses while the unit is running, in any state but inactive or failed, and changes nothing (213.156461ms)
✔ when the state read fails, install and uninstall refuse with one line and change nothing (51.029706ms)
✔ install needs --copy naming a copy that exists, and refuses outside the canonical checkout without --allow-worktree (45.619683ms)
✔ install refuses unless the bus unit runs from the same copy, naming both paths, and changes nothing (181.265919ms)
✔ render --copy runs the copy and reads the queue in the checkout; without --copy the unit is unchanged (14.093906ms)
✔ the uid header takes only an Authentik uid; the username header still takes a username (243.870664ms)
✔ a preview value cannot start with - or . (25.856829ms)
✔ status names the copy and whether refactor has moved past it, and says when the unit runs from no copy (360.202113ms)
ℹ tests 30
ℹ suites 0
ℹ pass 30
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 4900.503159
