✔ tester service render carries the tester port alongside existing flags (22.06822ms) ✔ tester service refuses forwarded 7332 even with another main port (7.009152ms) ✔ tester service invalid ports refuse render and install with exit 4 and leave the unit alone (84.165792ms) ✔ tester service counts the digits as written before it strips leading zeros (8.034596ms) ✔ tester service install and status show the tester port without changing send reporting (167.367852ms) ✔ render prints the unit without the preview flags (5.578475ms) ✔ render carries every serve flag, the preview set included (5.481169ms) ✔ a partial preview set is refused (13.134187ms) ✔ a value the unit cannot carry is refused, for every flag (250.465036ms) ✔ the rendered unit names none of the human proof agent markers and sets no agent variable (17.952492ms) ✔ install into --dir with --no-reload writes the file whole, then reports unchanged (53.376456ms) ✔ install without --no-reload runs daemon-reload and nothing that starts the unit (22.135658ms) ✔ uninstall refuses while the unit is running, with or without --no-reload, and removes it once it is not (111.703964ms) ✔ status prints the unit state and GET /healthz on the installed port (160.668027ms) ✔ usage: an unknown verb or flag, and start or enable, exit 4 (64.129863ms) ✔ without --send, render is the template with its placeholders filled, byte for byte (29.454514ms) ✔ render --send with the preview set ends ExecStart with --send and changes nothing else (46.55999ms) ✔ --send without the whole preview set is refused and writes nothing (119.138162ms) ✔ install --send into --dir with --no-reload writes the sending unit, and status says whether it sends (214.163668ms) ✔ uninstall and status take no --send (26.96065ms) ✔ install refuses while the unit is running, in any state but inactive or failed, and changes nothing (230.338563ms) ✔ when the state read fails, install and uninstall refuse with one line and change nothing (63.563272ms) ✔ install needs --copy naming a copy that exists, and refuses outside the canonical checkout without --allow-worktree (56.773823ms) ✔ install refuses unless the bus unit runs from the same copy, naming both paths, and changes nothing (208.030031ms) ✔ render --copy runs the copy and reads the queue in the checkout; without --copy the unit is unchanged (16.806145ms) ✔ the uid header takes only an Authentik uid; the username header still takes a username (290.308593ms) ✔ a preview value cannot start with - or . (25.101031ms) ✔ status names the copy and whether refactor has moved past it, and says when the unit runs from no copy (361.782017ms) ✔ proxy proof render carries both flags but never opens the fixture file (10.16144ms) ✔ proxy proof render refuses incomplete non-preview missing unsafe-mode and repo/copy paths (71.208914ms) ✔ proxy proof status retains send and tester reporting with both proof flags (96.230351ms) ℹ tests 31 ℹ suites 0 ℹ pass 31 ℹ fail 0 ℹ cancelled 0 ℹ skipped 0 ℹ todo 0 ℹ duration_ms 2934.252676