Preconditions
Organizer can import guests; fixture includes valid rows, invalid rows, duplicates, and a large file over the preview size.
Happy path / Lifecycle
Open Group invite/upload.
Organizer uploads CSV/XLSX and sees a parsed preview before any rows commit.
Resolve mappings and commit.
Valid rows persist, invalid rows remain downloadable with reasons, and audit records counts.
Send invites as an async job.
Bulk send progress shows sent, failed, and retryable counts.
Failure modes
Permission denied at the right boundary
Trigger: viewer/support attempts organizer-only operation.
Resolution: the write request returns 403, the editable surface remains closed or read-only, and the response does not leak hidden guest, event, or tenant fields.
Cross-tenant isolation
Trigger: tenant-A user guesses tenant-B resource id.
Resolution: the server returns 404 instead of 403, masks existence, and the UI renders a generic not-found state.
Soft-delete leaves audit trail
Trigger: organizer removes or deactivates the configured object.
Resolution: the row is marked inactive/deleted with actor, timestamp, and prior state preserved in audit.
Archive vs delete distinction
Trigger: organizer chooses between reversible archive and destructive delete.
Resolution: archive stays reversible and copy/export labels it archived; delete requires separate destructive confirmation and changes copy behavior.
Edit lock during publish
Trigger: publish snapshot begins while an edit is open.
Resolution: publish wins; stale save receives a deterministic conflict modal and does not mutate the published snapshot silently.
Audit log row written on every state change
Trigger: organizer saves any state transition.
Resolution: each state mutation writes an audit row with actor, timestamp, entity id, and before/after payload.
Two organizers concurrent
Trigger: two organizers edit the same state from stale versions.
Resolution: the second save gets conflict UI, both sessions refresh to the same final state, and there is no silent overwrite.
Undo window for destructive actions
Trigger: organizer deletes, cancels, or clears the object.
Resolution: a visible undo affordance lasts 10 seconds and restores the exact prior state when used.
CSV import preview component used
Trigger: organizer uploads a guest CSV.
Resolution: upload parses into ui-csv-import-preview with valid, warning, and rejected row groups before commit.
Partial-success commit
Trigger: some rows are valid and some fail validation.
Resolution: commit persists valid rows, reports failed rows with reasons, and records partial-success in audit.
Large-file commit processes all rows, not preview only
Trigger: upload has more rows than the preview page displays.
Resolution: commit job processes the full uploaded file, not just visible preview rows.
Bulk resend progress
Trigger: organizer sends invitations after group import.
Resolution: ui-async-job-tracker displays batch progress, failures, and retry affordance.
Cross-tenant rejection at row level
Trigger: CSV includes contact/event ids from another tenant.
Resolution: those rows are rejected as not found, valid same-tenant rows can still commit, and no foreign ids leak.
Parity gap: upload breadth incomplete
Trigger: matrix marks group invite/upload partial.
Resolution: gap panel stays visible until duplicate reports and bulk email timing controls reach EventFarm parity.
Stable test attributes
Visibility teeth. Each attribute must be effectively visible when active and must match the agent probes.
| data-test | Where | Purpose |
|---|---|---|
group-invite-upload-page | surface | page |
group-invite-upload-file-uploader | surface | file uploader |
group-invite-upload-csv-preview | surface | csv preview |
group-invite-upload-commit-cta | surface | commit cta |
group-invite-upload-result-summary | surface | result summary |
group-invite-upload-job-tracker | surface | job tracker |
group-invite-upload-row-error | surface | row error |
group-invite-upload-archive-batch-cta | surface | archive batch cta |
group-invite-upload-delete-batch-cta | surface | delete batch cta |
group-invite-upload-undo-toast | surface | undo toast |
group-invite-upload-conflict-modal | surface | conflict modal |
group-invite-upload-gap-panel | surface | gap panel |
Agent test plan
- group-invite-and-upload-opens
- group-invite-and-upload-saves
- group-invite-and-upload-audit-visible
- permission-denied-boundary
- cross-tenant-404
- soft-delete-audit
- archive-delete-distinction
- publish-edit-lock
- audit-row-every-change
- concurrent-organizers-conflict
- destructive-undo-window
- csv-import-preview-required
- partial-success-commit
- large-file-commit-all-rows
- bulk-resend-progress
- row-level-cross-tenant-rejection
- group-upload-gap-probe
- evaluate-group-invite-and-upload