feat(web): dashboard ergonomic cu tab-uri, stepper import si microcopy uman (3.4)

Reorganizeaza interfata web pe trei principii, fara a atinge backend-ul de
trimitere (worker, mapping, idempotency, masina de stari neatinse):

- US-001 app/web/labels.py: modul pur stari tehnice -> text uman + clasa CSS
- US-002 bara status /_fragments/status: microcopy uman, defalcare blocate, scoped cont
- US-003 shell 6 tab-uri (Acasa/Import/Coada/Mapari/Cont/Nomenclator): deep-link
  ?tab=, panou activ randat server-side, fragmente inactive lazy, ARIA real
- US-004 stepper import 4 pasi (pur vizual; hx-target + csrf pastrate)
- US-005 Acasa onboarding checklist auto-bifat + colaps + empty states prietenoase

Reparat in cursul VERIFY/CLOSE: izolare teste (reset ratelimit._hits in fixturi),
regresie avertisment "cont in asteptare de activare" (re-introdus in bara status),
culori hardcodate -> variabile paleta. 434 teste pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tests/test_web_status_fragment.py

@@ -0,0 +1,187 @@
+"""Teste US-002 (PRD 3.4): bara de status persistenta cu etichete umane.
+
+TDD: testele se scriu INAINTE de implementare; la inceput pica (RED),
+dupa implementare trec (GREEN).
+
+Rute testate:
+- GET /_fragments/status -> bara de status cu etichete umane, scoped pe cont
+"""
+
+from __future__ import annotations
+
+import os
+import re
+import tempfile
+
+import pytest
+from starlette.testclient import TestClient
+
+
+def _create_account_user(email: str = "user@test.com", password: str = "parolasecreta10"):
+    """Creeaza cont + user. Intoarce (acct_id, user_id)."""
+    from app.accounts import create_account
+    from app.users import create_user
+    from app.db import get_connection
+
+    conn = get_connection()
+    try:
+        acct_id = create_account(conn, "Service Test Status", active=True)
+        user_id = create_user(conn, acct_id, email, password)
+        return acct_id, user_id
+    finally:
+        conn.close()
+
+
+def _login(client, email: str, password: str) -> None:
+    """Face login real prin HTTP si seteaza cookie-ul de sesiune pe client."""
+    resp = client.get("/login")
+    assert resp.status_code == 200
+    m = re.search(r'name="csrf_token"\s+value="([^"]+)"', resp.text)
+    if not m:
+        m = re.search(r'value="([^"]+)"\s+name="csrf_token"', resp.text)
+    assert m, "csrf_token negasit pe /login"
+    csrf = m.group(1)
+
+    resp = client.post("/login", data={
+        "email": email,
+        "parola": password,
+        "csrf_token": csrf,
+    })
+    assert resp.status_code == 303, f"Login esuat: {resp.status_code} {resp.text[:200]}"
+
+
+def _insert_submission(status: str, account_id: int) -> None:
+    """Insereaza un submission cu status dat pentru un cont dat."""
+    from app.db import get_connection
+    import json
+
+    conn = get_connection()
+    try:
+        conn.execute(
+            "INSERT INTO submissions (idempotency_key, account_id, status, payload_json) "
+            "VALUES (?, ?, ?, ?)",
+            (
+                f"test-key-{status}-{account_id}-{os.urandom(4).hex()}",
+                account_id,
+                status,
+                json.dumps({"vin": "TEST", "status": status}),
+            ),
+        )
+        conn.commit()
+    finally:
+        conn.close()
+
+
+@pytest.fixture()
+def client(monkeypatch):
+    """Client cu BD izolata si autentificare web activata."""
+    tmp = tempfile.mkdtemp()
+    monkeypatch.setenv("AUTOPASS_DB_PATH", os.path.join(tmp, "status_test.db"))
+    monkeypatch.setenv("AUTOPASS_WEB_AUTH_REQUIRED", "true")
+    from app.config import get_settings
+    get_settings.cache_clear()
+    from app.web import ratelimit
+    ratelimit._hits.clear()  # izolare: limiterul login e global in-proces
+    from app.main import app
+    with TestClient(app, follow_redirects=False) as c:
+        yield c
+    ratelimit._hits.clear()
+    get_settings.cache_clear()
+
+
+# ============================================================
+# test_status_fragment_text_uman
+# ============================================================
+
+def test_status_fragment_text_uman(client):
+    """GET /_fragments/status (autentificat) -> contine 'Trimitere automata', NU 'worker viu'."""
+    _create_account_user("status@test.com", "parolasecreta10")
+    _login(client, "status@test.com", "parolasecreta10")
+
+    resp = client.get("/_fragments/status")
+    assert resp.status_code == 200
+
+    html = resp.text
+    # Trebuie sa contina textul uman din eticheta_worker (labels.py)
+    assert "Trimitere automata" in html, (
+        f"Fragmentul nu contine 'Trimitere automata'. HTML (primele 500 ch): {html[:500]}"
+    )
+    # NU trebuie sa contina textul brut tehnic
+    assert "worker viu" not in html.lower(), (
+        f"Fragmentul contine 'worker viu' (text tehnic brut). HTML (primele 500 ch): {html[:500]}"
+    )
+    # NU trebuie sa contina "mort" (stare tehnica bruta)
+    # (poate aparea in 'oprita' -> acceptam; 'mort' singur -> nu)
+    # Verificam ca nu apare 'mort' ca eticheta standalone
+    assert "viu</div>" not in html, (
+        "Fragmentul contine eticheta bruta 'viu'"
+    )
+
+
+# ============================================================
+# test_status_blocate_defalcare
+# ============================================================
+
+def test_status_blocate_defalcare(client):
+    """Cu submissions blocate in DB, fragmentul arata defalcarea pe motiv (texte umane)."""
+    acct_id, _ = _create_account_user("blocate@test.com", "parolasecreta10")
+    _login(client, "blocate@test.com", "parolasecreta10")
+
+    # Insereaza submissions blocate din fiecare tip
+    _insert_submission("needs_mapping", acct_id)
+    _insert_submission("needs_mapping", acct_id)
+    _insert_submission("needs_data", acct_id)
+    _insert_submission("error", acct_id)
+
+    resp = client.get("/_fragments/status")
+    assert resp.status_code == 200
+
+    html = resp.text
+    # Trebuie sa arate titlul grupului de blocate
+    assert "Necesita atentia ta" in html, (
+        f"Fragmentul nu contine 'Necesita atentia ta'. HTML: {html[:800]}"
+    )
+    # Trebuie sa arate etichetele umane pe motiv (din STARI_SUBMISSION in labels.py)
+    assert "Lipseste codul prestatiei" in html, (
+        "Fragmentul nu arata eticheta pentru needs_mapping"
+    )
+    assert "Date incomplete" in html, (
+        "Fragmentul nu arata eticheta pentru needs_data"
+    )
+    assert "Eroare la trimitere" in html, (
+        "Fragmentul nu arata eticheta pentru error"
+    )
+    # Trebuie sa arate numere concrete (2 needs_mapping, 1 needs_data, 1 error)
+    # Verificam ca exista cel putin un numar > 0 langa fiecare eticheta
+    # (nu strict format, ci prezenta datelor)
+    assert "2" in html or "1" in html, "Fragmentul nu arata numarul de submissions blocate"
+
+
+# ============================================================
+# test_status_se_reincarca_htmx
+# ============================================================
+
+def test_status_se_reincarca_htmx(client):
+    """Fragmentul contine atribut hx-trigger cu poll periodic (every 15s)."""
+    _create_account_user("htmx@test.com", "parolasecreta10")
+    _login(client, "htmx@test.com", "parolasecreta10")
+
+    resp = client.get("/_fragments/status")
+    assert resp.status_code == 200
+
+    html = resp.text
+    # Trebuie sa contina hx-trigger periodic
+    assert "hx-trigger" in html, (
+        f"Fragmentul nu contine atribut hx-trigger. HTML: {html[:500]}"
+    )
+    assert "every 15s" in html, (
+        f"Fragmentul nu contine poll 'every 15s'. HTML: {html[:500]}"
+    )
+    # Trebuie sa aiba endpoint corect pentru auto-refresh
+    assert "/_fragments/status" in html, (
+        "Fragmentul nu contine referinta la /_fragments/status pentru hx-get"
+    )
+    # Trebuie sa aiba un id stabil pe containerul radacina
+    assert 'id="status-bar"' in html, (
+        "Fragmentul nu are id='status-bar' pe containerul radacina"
+    )