# RevHero QA Run — scheduled-20260430T163802

**Started:** 2026-04-30T16:38:04.486Z
**Finished:** 2026-04-30T16:44:38.341Z

## Summary

| | Count |
|---|---|
| Total | 241 |
| PASS | 190 |
| FAIL | 24 |
| SKIP | 20 |
| NOT_EXEC | 7 |

## Results

| ID | Status | Duration | Description |
|---|---|---|---|
| `FE-AUTH-001` | PASS | 3171.828903ms | /login page renders with email + password + Forgot Password + Login + Register link |
| `FE-AUTH-002` | FAIL | 60349.117578ms | Login with valid credentials → redirect to /automation-campaign |
| `FE-AUTH-003` | PASS | 219.5181109999976ms | Login with wrong password → friendly error, no stack trace |
| `FE-AUTH-004` | PASS | 109.57338799999707ms | Login with non-existent email → generic friendly error (no enumeration) |
| `FE-AUTH-005` | PASS | 1897.1837620000006ms | Login with empty fields → form validation errors |
| `FE-AUTH-006` | PASS | 1012.7712380000012ms | Eye icon on password field toggles show/hide |
| `FE-AUTH-007` | PASS | 2975.956726000004ms | Forgot Password link → /forgot-password page renders |
| `FE-AUTH-008` | PASS | 311.7976079999935ms | Submit forgot password form with valid email → success message |
| `FE-AUTH-009` | FAIL | 126.68452700000489ms | Submit forgot password with non-existent email → generic success (anti-enumeration) |
| `FE-AUTH-010` | PASS | 131.19979300000705ms | /auth-reset-password?token=invalid → friendly invalid token error |
| `FE-AUTH-011` | PASS | 245.8134940000018ms | /auth-reset-password validates min length and match |
| `FE-AUTH-012` | FAIL | 60290.73370000001ms | Sign Out button → clears cookies → redirects to /login |
| `FE-AUTH-013` | FAIL | 60375.25501299999ms | Hard refresh of authenticated page → session restores, no console errors |
| `FE-AUTH-014` | PASS | 1051.143408999982ms | Direct nav to authenticated route while logged out → redirects to /login with ?redirect= |
| `FE-AUTH-015` | PASS | 48.5584530000051ms | JWT expires mid-session → next API call triggers refresh; refresh fail → logout |
| `FE-AUTH-016` | PASS | 5724.101373999991ms | Login on staging hits staging BFF, NOT prod (FE-BUG-002 regression) |
| `FE-AUTH-017` | FAIL | 60419.979865ms | Cookie has Secure, HttpOnly, SameSite flags set on auth cookies |
| `FE-AUTH-018` | FAIL | 60339.62391299999ms | Open redirect — ?redirect=https://evil.com after login → blocked |
| `FE-AUTH-019` | PASS | 2162.746469000005ms | Login button shows loading spinner while authenticating |
| `FE-AUTH-020` | PASS | 76.56615500000771ms | Rate limiting on /login — rapid wrong-password attempts trigger 429 |
| `FE-CAMP-001` | SKIP | 0ms | /automation-campaign lists campaigns or shows empty state |
| `FE-CAMP-002` | SKIP | 0ms | Tabs Active / Inactive / All switch correctly |
| `FE-CAMP-003` | SKIP | 0ms | Search Campaigns input filters list |
| `FE-CAMP-004` | SKIP | 0ms | Pagination Next/Prev (where present) is sane |
| `FE-CAMP-005` | SKIP | 0ms | PULSE / SWARM tabs at top (SWARM dev-only on staging) |
| `FE-CAMP-006` | SKIP | 0ms | /automation-campaign/create renders builder |
| `FE-CAMP-007` | SKIP | 0ms | Builder header shows 'Untitled' (FE-BUG-08 fix — not literal 'undefined') |
| `FE-CAMP-008` | SKIP | 0ms | Builder canvas shows 'Add Stage +' button |
| `FE-CAMP-009` | SKIP | 0ms | Click Add Stage opens stage type modal |
| `FE-CAMP-010` | SKIP | 0ms | Stage settings modal validates required fields (sanity check) |
| `FE-CAMP-011` | SKIP | 0ms | Builder name area exists (route smoke) |
| `FE-CAMP-012` | SKIP | 0ms | Save Campaign with no stages → friendly error or warning |
| `FE-CAMP-013` | SKIP | 0ms | Active toggle persists after save (visual presence) |
| `FE-CAMP-014` | SKIP | 0ms | Click 'Import campaign from CRM' opens import modal |
| `FE-CAMP-015` | SKIP | 0ms | Import campaign validates CRM connection state (smoke) |
| `FE-CAMP-016` | SKIP | 0ms | /automation-campaign/[id] for non-existent ID → 404 or friendly error |
| `FE-CAMP-017` | SKIP | 0ms | /automation-campaign/[id]/deals lists campaign deals |
| `FE-CAMP-018` | SKIP | 0ms | Deals table renders without crashing (smoke) |
| `FE-CAMP-019` | SKIP | 0ms | Pull CRM State button triggers sync (button present) |
| `FE-CAMP-020` | SKIP | 0ms | Stage drag-and-drop reorders without crashes (page renders) |
| `FE-CROSS-001` | FAIL | 60352.36093199998ms | All staging API calls go to *.test.revhero.io (FE-BUG-002 regression) |
| `FE-CROSS-002` | PASS | 0.5050570000021253ms | Cloud-document uploads go to staging cloud-documents (smoke) |
| `FE-CROSS-003` | FAIL | 60186.049024999986ms | Dev-only routes accessible on staging (proxy.ts hostname check) |
| `FE-CROSS-004` | PASS | 0.4737569999997504ms | Same routes redirect to /automation-campaign on prod (skip on staging) |
| `FE-CROSS-005` | PASS | 0.30845899996347725ms | Free Plan signup completes without payment form (FE-BUG-001 regression) |
| `FE-CROSS-006` | PASS | 0.38171499996678904ms | Plan-feature labels render numbers with thousands separators (smoke) |
| `FE-CROSS-007` | PASS | 0.3671079999767244ms | Settings right-rail items don't truncate (smoke) |
| `FE-CROSS-008` | PASS | 0.3520489999791607ms | Currency values show 2 decimals consistently (smoke) |
| `FE-CROSS-009` | PASS | 0.2465010000159964ms | Campaign create header shows 'Untitled campaign' (FE-BUG-08 regression) |
| `FE-CROSS-010` | PASS | 0.38386999996146187ms | Phone /sms doesn't get stuck on skeleton (FE-BUG-04 regression) |
| `FE-DEAL-001` | PASS | 439.210294ms | Sweep endpoint returns jobs_scheduled count |
| `FE-DEAL-002` | PASS | 0.7006419999997888ms | Sweep moves a deal forward (smoke — needs seeded campaign) |
| `FE-DEAL-003` | PASS | 0.28104599999960556ms | Inactive campaign skips sweep (smoke) |
| `FE-DEAL-004` | PASS | 0.2199310000000878ms | Inactive user's stages skipped (smoke) |
| `FE-DEAL-005` | PASS | 0.4276709999999184ms | max_deals_to_move quota respected (smoke) |
| `FE-DEAL-006` | PASS | 0.41127000000005864ms | Worker pops job within 5s (smoke) |
| `FE-DEAL-007` | PASS | 0.22855699999990975ms | Worker triggers email/SMS action (smoke) |
| `FE-DEAL-008` | PASS | 0.4436110000001463ms | Action returns 425 → deal rolled back (smoke) |
| `FE-DEAL-009` | PASS | 0.2606580000001486ms | Action 5xx → exponential backoff retry (smoke) |
| `FE-DEAL-010` | PASS | 0.4031449999997676ms | Successful move appears in BFF /v1/deals/filter (smoke) |
| `FE-DEAL-011` | PASS | 0.7044089999999414ms | Successful move does NOT create activity row (smoke) |
| `FE-DEAL-012` | PASS | 0.24650299999984782ms | CRM sync goroutine fires after move (smoke) |
| `FE-DEAL-013` | PASS | 213.77108199999975ms | /v1/stages/scheduled endpoint reachable |
| `FE-DEAL-014` | PASS | 21.602276000000074ms | /v1/stages/moved endpoint reachable |
| `FE-DEAL-015` | PASS | 0.24589100000002873ms | Redis isolation between staging and prod (smoke) |
| `FE-DEAL-016` | PASS | 0.14050200000019686ms | Super-admin sweeper button (smoke) |
| `FE-DEAL-017` | PASS | 0.1311359999999695ms | next_move_date NULL → deal NOT picked up (smoke) |
| `FE-DEAL-SEARCH-001` | PASS | 9508.685826ms | Type email into Search Deals input → table filters by email |
| `FE-DEAL-SEARCH-002` | PASS | 6825.334501000001ms | Type partial first name → filter applies |
| `FE-DEAL-SEARCH-003` | PASS | 5764.003358999998ms | Press Enter in search submits without page reload |
| `FE-DEAL-SEARCH-004` | PASS | 6776.390833999998ms | Clear input → full deal list returns |
| `FE-DEAL-SEARCH-005` | PASS | 0.6087499999994179ms | Search persists across pagination |
| `FE-DEAL-SEARCH-006` | PASS | 6757.954444000003ms | Include lost deals toggle ON/OFF persists |
| `FE-EMAIL-001` | FAIL | 60551.884230999996ms | /email-system/email lists messages or empty state |
| `FE-EMAIL-002` | FAIL | 60230.348439ms | 'Mailbox not connected' empty state with Connect Mailbox CTA |
| `FE-EMAIL-003` | FAIL | 60188.158182000014ms | Connect Mailbox button opens OAuth flow (button presence) |
| `FE-EMAIL-004` | FAIL | 60154.69657900001ms | Email filters work (filter UI exists) |
| `FE-EMAIL-005` | PASS | 62155.19750499999ms | Search Emails input filters list |
| `FE-EMAIL-006` | PASS | 6421.377978999983ms | '+' button opens compose / add modal |
| `FE-EMAIL-007` | PASS | 6490.013487000018ms | /email-system/email/add page renders without crashing |
| `FE-EMAIL-008` | PASS | 36258.692332000006ms | Compose form requires recipient + subject + body |
| `FE-EMAIL-009` | PASS | 2.2623960000346415ms | Send email triggers BFF call (network observation) |
| `FE-EMAIL-010` | PASS | 4365.045129999984ms | /email-system/email/[id] shows email detail (route accessible) |
| `FE-EMAIL-011` | PASS | 3453.3834710000083ms | Email categories sidebar navigates |
| `FE-EMAIL-012` | PASS | 0.3182360000209883ms | Pagination at top right (X of Y) updates with results |
| `FE-EMAIL-IN-001` | PASS | 2.1955820000000585ms | Reply appears in FE thread within ~30s (smoke) |
| `FE-EMAIL-IN-002` | PASS | 0.4299750000000131ms | email row has sentiment after scoring (smoke) |
| `FE-EMAIL-IN-003` | PASS | 0.2868470000000798ms | 'unsubscribe' triggers NEGATIVE heuristic + deal-loss (smoke) |
| `FE-EMAIL-IN-004` | PASS | 0.2845720000000256ms | OOO autoresponder → NEUTRAL + date extraction (smoke) |
| `FE-EMAIL-IN-005` | PASS | 0.2534440000001723ms | Self-reply skips sentiment (smoke) |
| `FE-EMAIL-IN-006` | PASS | 0.3939070000001266ms | Inbound XSS subject escapes on render (smoke) |
| `FE-EMAIL-IN-007` | PASS | 0.4173519999999371ms | Bounce notification flags original send (smoke) |
| `FE-EMAIL-IN-008` | PASS | 727.5094960000001ms | POST /v1/emails/sentiment-webhook from public internet — must return 401/403/404 |
| `FE-EMAIL-IN-009` | PASS | 0.7751720000001114ms | Mark inbound email Read/Unread/Favourite/Archive (smoke) |
| `FE-EMAIL-IN-010` | PASS | 0.4942959999998493ms | Conversation history merges sent + received chronologically (smoke) |
| `FE-EMAIL-IN-011` | PASS | 0.34068799999977273ms | Cross-tenant email isolation (smoke) |
| `FE-EMAIL-OUT-001` | PASS | 22392.356116ms | Connect Gmail mailbox via OAuth (external-blocked) — assert URL request returns redirec... |
| `FE-EMAIL-OUT-002` | PASS | 1925.6975850000017ms | Connect Microsoft mailbox same flow (external-blocked) |
| `FE-EMAIL-OUT-003` | PASS | 0.9473649999999907ms | Disconnect mailbox via POST /v1/user-mailboxes/:id/disconnect (smoke) |
| `FE-EMAIL-OUT-004` | PASS | 2603.397186000002ms | Test Email (rate-limited 5/hr) endpoint exists |
| `FE-EMAIL-OUT-005` | PASS | 0.5634649999992689ms | Test-Email button disabled when ai_personalization_enabled=false (FE check) |
| `FE-EMAIL-OUT-006` | PASS | 0.33451700000296114ms | 6 test emails in 1 hour → 429 |
| `FE-EMAIL-OUT-007` | PASS | 6839.881097000001ms | Send manual email with merge tags (composer renders) |
| `FE-EMAIL-OUT-008` | PASS | 2.100484000002325ms | Manual email to deal contact creates sent_email row (smoke) |
| `FE-EMAIL-OUT-009` | PASS | 3.9478220000019064ms | Email signature appended to outbound (smoke) |
| `FE-EMAIL-OUT-010` | PASS | 34621.17088400001ms | Empty subject → form validation rejects |
| `FE-EMAIL-OUT-011` | PASS | 0.407110999993165ms | Long body (>50 KB) handled (smoke — no 500) |
| `FE-EMAIL-OUT-012` | PASS | 0.19208000000799075ms | XSS in subject + body sanitised (smoke — no script execution) |
| `FE-HELP-001` | PASS | 5696.999177ms | /help renders FAQ section (dev-only on staging) |
| `FE-HELP-002` | PASS | 0.6546659999985422ms | Search articles input filters FAQ |
| `FE-HELP-003` | PASS | 0.6893010000003414ms | Help category cards render |
| `FE-HELP-004` | PASS | 0.19939400000112073ms | Contact Support button opens email/chat |
| `FE-HELP-005` | PASS | 5290.427791999999ms | /getting-started checklist progress bar updates |
| `FE-HELP-006` | PASS | 0.41055899999992107ms | Watch Video opens modal |
| `FE-HELP-007` | PASS | 0.199241999998776ms | Add Signature redirects to email signature settings |
| `FE-HELP-008` | PASS | 0.18454600000040955ms | Start Guided Walkthrough triggers tour |
| `FE-LAY-001` | FAIL | 61953.452562ms | Sidebar visible on every authenticated dashboard page |
| `FE-LAY-002` | FAIL | 60282.671367ms | Sidebar shows Dashboard / Campaign / Phone / Email / Settings (smoke) |
| `FE-LAY-003` | FAIL | 60436.39401199999ms | Header shows credit balance, notification bell, sign out |
| `FE-LAY-004` | PASS | 2.5203850000107195ms | Active sidebar item highlighted in primary color (smoke) |
| `FE-LAY-005` | PASS | 0.9840749999857508ms | Click sidebar item navigates without full page reload (smoke) |
| `FE-LAY-006` | PASS | 0.47727400000439957ms | Mobile nav (<768px) collapses sidebar to hamburger (smoke) |
| `FE-LAY-007` | PASS | 0.36008500002208166ms | Layout no CLS when notifications appear/dismiss (smoke) |
| `FE-LAY-008` | PASS | 0.3038200000009965ms | Layout no CLS when modals open/close (smoke) |
| `FE-NOTIF-001` | PASS | 7138.424762999999ms | /notifications renders list with All / Read / Unread tabs |
| `FE-NOTIF-002` | PASS | 5.756048999999621ms | Tabs filter notifications |
| `FE-NOTIF-003` | PASS | 0.5428659999997762ms | Sub-tabs Email/SMS/LinkedIn/System filter by type |
| `FE-NOTIF-004` | PASS | 0.34119900000041525ms | Mark all as read clears unread |
| `FE-NOTIF-005` | PASS | 0.24387600000045495ms | Per-row 'Mark as Read' updates row (smoke) |
| `FE-NOTIF-006` | PASS | 3.618716000000859ms | Notifications scoped to current account_id (smoke) |
| `FE-NOTIF-007` | PASS | 4.894615999999587ms | Bell icon shows unread badge (smoke) |
| `FE-NOTIF-008` | PASS | 1.0373820000004343ms | Relative timestamps update (smoke) |
| `FE-PHONE-001` | PASS | 6917.948011999999ms | /phone-system redirects to /phone-system/sms |
| `FE-PHONE-002` | PASS | 8469.605215000001ms | /phone-system/sms renders empty state (FE-BUG-04 fix — no permanent skeleton) |
| `FE-PHONE-003` | PASS | 4927.909032ms | Empty state shows 'Go to Phone System Settings' CTA (best-effort) |
| `FE-PHONE-004` | PASS | 5673.014284000001ms | /phone-system/voicemails lists voicemails or empty state |
| `FE-PHONE-005` | PASS | 0.5036130000007688ms | Brand registration flow accessible from phone system |
| `FE-PHONE-006` | PASS | 0.4611740000000282ms | A2P status badge displays correct color/text (smoke) |
| `FE-PHONE-007` | PASS | 0.5021699999997509ms | Phone Number purchase flow renders available numbers (smoke) |
| `FE-PHONE-008` | PASS | 6.855095999999321ms | Buy phone number button triggers purchase API call (smoke) |
| `FE-PHONE-009` | PASS | 0.4225609999994049ms | Send SMS modal validates recipient + body (smoke) |
| `FE-REG-001` | PASS | 3292.9810500000003ms | /signup step 1 renders register form (name, email, password, phone) |
| `FE-REG-002` | PASS | 2263.977465ms | Submit empty form → field validation errors |
| `FE-REG-003` | PASS | 1894.5360110000001ms | Submit with invalid email format → validation error |
| `FE-REG-004` | PASS | 2727.537821ms | Submit with weak password → strength meter + rejection |
| `FE-REG-005` | PASS | 255.18715499999962ms | Submit with duplicate email → friendly 'email already registered' |
| `FE-REG-006` | PASS | 22380.885732000002ms | Submit valid form → advances to step 2 (Select Plan) |
| `FE-REG-007` | PASS | 547.4524859999947ms | Step 2 shows Pulse Free + Pulse Pro side-by-side |
| `FE-REG-008` | PASS | 449.5163110000067ms | Toggle Monthly / Annually switches plan prices |
| `FE-REG-009` | PASS | 793.1637090000004ms | Click Free Plan → advances to step 4 (Order Information), skipping step 3 |
| `FE-REG-010` | PASS | 599.6647190000003ms | Click Pulse Pro → advances to step 3 (Add-ons) |
| `FE-REG-011` | PASS | 309.1344390000013ms | Step 4 (Free Plan) — Total Due $0.00, 'Continue' button (NOT 'Continue to Payment') |
| `FE-REG-012` | PASS | 263.55347800000163ms | Step 4 (Free Plan) — promo code field hidden (FE-BUG-001 fix) |
| `FE-REG-013` | PASS | 344.4010049999997ms | Step 4 (Free Plan) — clicking Continue skips payment form |
| `FE-REG-014` | NOT_EXEC | 0ms | Step 4 (Paid plan) — Payment Information form shows card fields @paid |
| `FE-REG-015` | NOT_EXEC | 0ms | Step 4 — apply promo code BETAOFFER → 100% discount → label changes @paid |
| `FE-REG-016` | NOT_EXEC | 0ms | Step 4 — invalid promo code → friendly error @paid |
| `FE-REG-017` | NOT_EXEC | 0ms | Step 4 — expired promo code → friendly error @paid |
| `FE-REG-018` | NOT_EXEC | 0ms | Step 4 — payment form rejects invalid card number @paid |
| `FE-REG-019` | NOT_EXEC | 0ms | Step 4 — payment form rejects expired card @paid |
| `FE-REG-020` | NOT_EXEC | 0ms | Step 4 — payment form requires all billing address fields @paid |
| `FE-REG-021` | PASS | 1373.6759650000022ms | Browser back button mid-wizard preserves form state |
| `FE-REG-022` | PASS | 1488.8243340000045ms | Direct nav to ?step=4 without completing 1-3 → redirects |
| `FE-REG-023` | FAIL | 60279.35912ms | Already-authenticated user navigating to /signup → redirects to dashboard |
| `FE-REG-024` | PASS | 772.8090579999989ms | Wizard step indicator updates correctly per step |
| `FE-SET-G-001` | FAIL | 61944.854849ms | /settings/general renders Billing section by default |
| `FE-SET-G-002` | FAIL | 60366.054910000006ms | Right sidebar nav items show full text (fe-ui-01 regression) |
| `FE-SET-G-003` | PASS | 11.184070000002976ms | Right sidebar nav items list (smoke) |
| `FE-SET-G-004` | PASS | 0.5965700000087963ms | Switching nav items updates panel without reload (smoke) |
| `FE-SET-G-005` | PASS | 0.4012230000080308ms | Current Plan card shows plan name + price (smoke) |
| `FE-SET-G-006` | FAIL | 60489.68495899999ms | Plan features show numbers with thousands separators (fe-ui-02 regression) |
| `FE-SET-G-007` | PASS | 0.7485129999986384ms | Promo code card shows discount + expiry + COPY (smoke) |
| `FE-SET-G-008` | PASS | 0.4833750000107102ms | Manage Add-ons button opens manage-plans page (smoke) |
| `FE-SET-G-009` | PASS | 0.5872009999875445ms | CRM API tab shows connected CRM with masked key (smoke) |
| `FE-SET-G-010` | PASS | 0.30164499999955297ms | Sub-User Management lists invited users (smoke) |
| `FE-SET-G-011` | PASS | 0.2697150000021793ms | Sub-User Invite form validates email (smoke) |
| `FE-SET-G-012` | PASS | 0.548439000005601ms | Active Hours tab allows setting weekly schedule (smoke) |
| `FE-SET-G-013` | PASS | 0.39402700000209734ms | Email Signatures tab renders editor + preview (smoke) |
| `FE-SET-G-014` | PASS | 0.45026499999221414ms | Book Link tab persists URL (smoke) |
| `FE-SET-G-015` | PASS | 0.20980300000519492ms | AI Customized Templates tab lists templates (smoke) |
| `FE-SET-M-001` | FAIL | 60165.550107999996ms | /settings/manage-plans renders manage add-ons section |
| `FE-SET-M-002` | PASS | 0.39936799998395145ms | Existing add-ons list (smoke) |
| `FE-SET-M-003` | PASS | 0.2915270000230521ms | Empty state friendly message (smoke) |
| `FE-SET-M-004` | PASS | 0.22682400001212955ms | Available add-ons list (smoke) |
| `FE-SET-M-005` | PASS | 0.3309000000008382ms | Add new add-on triggers checkout flow (smoke) |
| `FE-SET-M-006` | PASS | 0.3490839999867603ms | Cancel add-on triggers confirmation modal (smoke) |
| `FE-SET-S-001` | FAIL | 60393.63021599999ms | /settings/system renders Brand Status + Phone Settings |
| `FE-SET-S-002` | PASS | 1.356011000025319ms | Right sidebar Phone / Email Settings (smoke) |
| `FE-SET-S-003` | PASS | 1.3482160000130534ms | Brand Status badge color matches status (smoke) |
| `FE-SET-S-004` | PASS | 0.28542499998002313ms | Register Brand button opens modal (smoke) |
| `FE-SET-S-005` | PASS | 1.084912999998778ms | Phone Number Settings shows empty state (smoke) |
| `FE-SET-S-006` | PASS | 0.7803520000015851ms | Email Settings shows OAuth connection state (smoke) |
| `FE-SET-S-007` | PASS | 0.5089649999863468ms | Save Route button persists route preferences (smoke) |
| `FE-SETUP-001` | FAIL | 60635.17714ms | /setup page renders for newly-signed-up users |
| `FE-SETUP-002` | PASS | 1229.6871309999988ms | Setup wizard captures business profile info (form renders) |
| `FE-SETUP-003` | FAIL | 60184.001165ms | Skip onboarding via 'Skip for now' → dashboard with welcome modal (skip CTA exists) |
| `FE-SETUP-004` | FAIL | 60235.127223ms | /getting-started shows checklist with at least one step |
| `FE-SETUP-005` | PASS | 45962.924759999994ms | Welcome greeting renders user's first name |
| `FE-SETUP-006` | PASS | 188.86744299999555ms | setup_finished flag persists in DB for the test admin |
| `FE-SETUP-007` | PASS | 8641.526962000004ms | /getting-started accessible even when setup_finished is true (onboarding route exception) |
| `FE-SMS-TOKY-001` | PASS | 2.090535999999929ms | BYOC card lists Toky in /settings/system (smoke) |
| `FE-SMS-TOKY-002` | PASS | 0.32493799999997464ms | Save bogus Toky API key → red error (smoke) |
| `FE-SMS-TOKY-003` | PASS | 0.7434520000001612ms | Save real test API key creates carrier_credentials row (smoke) |
| `FE-SMS-TOKY-004` | PASS | 0.9779920000000857ms | Save handshake registers webhook on Toky side (smoke) |
| `FE-SMS-TOKY-005` | PASS | 0.3685409999998228ms | Re-save credential clears existing webhook auth (smoke) |
| `FE-SMS-TOKY-006` | PASS | 0.34359299999982795ms | Add Toky Number lists user inventory (smoke) |
| `FE-SMS-TOKY-007` | PASS | 0.20787000000018452ms | Import test number creates phonenumbers row (smoke) |
| `FE-SMS-TOKY-008` | PASS | 0.15194399999995767ms | Send SMS via Toky doesn't decrement credits (smoke) |
| `FE-SMS-TOKY-009` | PASS | 1.446860999999899ms | Reply lands inbound within 10s (smoke) |
| `FE-SMS-TOKY-010` | PASS | 219.860817ms | Toky inbound webhook validates HTTP Basic auth |
| `FE-SMS-TOKY-011` | PASS | 3.4638170000000628ms | Toky payload is JSON array (smoke) |
| `FE-SMS-TOKY-012` | PASS | 0.44283999999993284ms | Toky inbound NEGATIVE sentiment marks deal LOST (smoke) |
| `FE-SMS-TOKY-013` | PASS | 0.20009600000003047ms | Replay same payload twice → idempotent (smoke) |
| `FE-SMS-TOKY-014` | PASS | 3.3535320000000866ms | Disconnect Toky credential revokes webhook (smoke) |
| `FE-SMS-TOKY-015` | PASS | 0.3387840000000324ms | Twilio + Toky number coexistence (smoke) |
| `FE-SMS-TOKY-016` | PASS | 1.1323009999998703ms | AI personalization charges AI credits but not phone (smoke) |
| `FE-SMS-TOKY-017` | PASS | 0.20571500000005472ms | Twilio regression after Toky enabled (smoke) |
| `FE-SMS-TOKY-018` | PASS | 0.20503300000018498ms | Legacy provider=NULL treated as 'twilio' (smoke) |
| `FE-SMS-TOKY-019` | PASS | 0.1371879999999237ms | Toky API key with zero numbers → empty inventory (smoke) |
| `FE-SMS-TOKY-020` | PASS | 1.0552560000000994ms | Webhook dedup respects DRF pagination shape (smoke) |
| `FE-SMS-TW-001` | PASS | 2.046342000000095ms | A2P brand registration starts from /settings/system (smoke) |
| `FE-SMS-TW-002` | PASS | 0.4175920000000133ms | Phone-number purchase blocked when A2P != brand_approved |
| `FE-SMS-TW-003` | PASS | 0.355054999999993ms | Phone-number purchase succeeds when approved |
| `FE-SMS-TW-004` | PASS | 0.3255189999999857ms | Send SMS from /phone-system/sms (smoke) |
| `FE-SMS-TW-005` | PASS | 0.3310999999998785ms | Send SMS with merge tag rendered correctly |
| `FE-SMS-TW-006` | PASS | 0.36158799999998337ms | Send SMS with no credits → 402 / out-of-credits |
| `FE-SMS-TW-007` | PASS | 0.38538199999993594ms | Twilio API failure releases reserved credits |
| `FE-SMS-TW-008` | PASS | 0.32275400000003174ms | Send SMS exceeds rate limit → 429 |
| `FE-SMS-TW-009` | PASS | 0.34390400000006593ms | Inbound SMS appears in FE thread (smoke) |
| `FE-SMS-TW-010` | PASS | 0.3485329999998612ms | Inbound negative sentiment marks deal LOST (smoke) |
| `FE-SMS-TW-011` | PASS | 360.19293600000015ms | Twilio webhook with wrong bears_key → 401 |
| `FE-SMS-TW-012` | PASS | 0.3113530000000537ms | Twilio status callback updates messages.status (smoke) |
| `FE-USER-001` | PASS | 31904.237130999973ms | /user renders profile fields |
| `FE-USER-002` | PASS | 6485.063239999989ms | Created date renders correctly (NOT 'Invalid Date') |
| `FE-USER-003` | PASS | 0.44550500001059845ms | Change Password button opens modal (smoke) |
| `FE-USER-004` | PASS | 0.28769899997860193ms | Password modal validates fields (smoke) |
| `FE-USER-005` | PASS | 3.683798999991268ms | Wrong current password → friendly error (smoke) |
| `FE-USER-006` | PASS | 0.3167740000062622ms | Password change success closes modal + toast (smoke) |
| `UNKNOWN-52lwl9` | PASS | 194.6904229999999ms | WEBHOOK-AUTH-001 — email-ingress sentiment-webhook rejects without auth |
| `UNKNOWN-7cbx0u` | PASS | 52.63764200000003ms | WEBHOOK-AUTH-002 — sms-service sentiment-webhook rejects without auth |
| `UNKNOWN-x42bvd` | PASS | 392.46098199999994ms | WEBHOOK-AUTH-003 — deal-mover sweeper rejects without auth |

## Failures

### FE-AUTH-002 — Login with valid credentials → redirect to /automation-campaign

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 4m20s","retry_after_seconds":260,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-AUTH-009 — Submit forgot password with non-existent email → generic success (anti-enumeration)

```
expected 500 to be 404 // Object.is equality
```

### FE-AUTH-012 — Sign Out button → clears cookies → redirects to /login

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 3m13s","retry_after_seconds":193,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-AUTH-013 — Hard refresh of authenticated page → session restores, no console errors

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 2m13s","retry_after_seconds":133,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-AUTH-017 — Cookie has Secure, HttpOnly, SameSite flags set on auth cookies

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 1m6s","retry_after_seconds":66,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-AUTH-018 — Open redirect — ?redirect=https://evil.com after login → blocked

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 5s","retry_after_seconds":5,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-CROSS-001 — All staging API calls go to *.test.revhero.io (FE-BUG-002 regression)

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 1m21s","retry_after_seconds":81,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-CROSS-003 — Dev-only routes accessible on staging (proxy.ts hostname check)

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 21s","retry_after_seconds":21,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-EMAIL-001 — /email-system/email lists messages or empty state

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 3m52s","retry_after_seconds":232,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-EMAIL-002 — 'Mailbox not connected' empty state with Connect Mailbox CTA

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 2m52s","retry_after_seconds":172,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-EMAIL-003 — Connect Mailbox button opens OAuth flow (button presence)

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 1m51s","retry_after_seconds":111,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-EMAIL-004 — Email filters work (filter UI exists)

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 51s","retry_after_seconds":51,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-LAY-001 — Sidebar visible on every authenticated dashboard page

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 4m22s","retry_after_seconds":262,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-LAY-002 — Sidebar shows Dashboard / Campaign / Phone / Email / Settings (smoke)

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 3m22s","retry_after_seconds":202,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-LAY-003 — Header shows credit balance, notification bell, sign out

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 2m22s","retry_after_seconds":142,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-REG-023 — Already-authenticated user navigating to /signup → redirects to dashboard

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 3m45s","retry_after_seconds":225,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-SET-G-001 — /settings/general renders Billing section by default

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 4m22s","retry_after_seconds":262,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-SET-G-002 — Right sidebar nav items show full text (fe-ui-01 regression)

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 3m22s","retry_after_seconds":202,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-SET-G-006 — Plan features show numbers with thousands separators (fe-ui-02 regression)

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 2m22s","retry_after_seconds":142,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-SET-M-001 — /settings/manage-plans renders manage add-ons section

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 21s","retry_after_seconds":21,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-SET-S-001 — /settings/system renders Brand Status + Phone Settings

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 1m21s","retry_after_seconds":81,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-SETUP-001 — /setup page renders for newly-signed-up users

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 2m42s","retry_after_seconds":162,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-SETUP-003 — Skip onboarding via 'Skip for now' → dashboard with welcome modal (skip CTA exists)

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 1m41s","retry_after_seconds":101,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```

### FE-SETUP-004 — /getting-started shows checklist with at least one step

```
BFF /v1/auth/login returned 429: {"data":{"error":"too many login attempts; try again in 40s","retry_after_seconds":40,"scope":"email"},"message":"Too many login attempts. Please wait and try again."}
```