fix(5.19): corectii UX/retentie held (findings #2-#6 /code-review high)

#2 Filtrul "doar tinute" (held=1) devine persistent: hidden #f-held in
   #filtre-trimiteri sincronizat prin OOB din _submissions.html + paginare
   pastreaza held=1; chip "Doar tinute manual / Arata tot" ca off-switch.
   Param `held` schimbat la str (held= gol nu mai da 422 la coercion).
#3 Banner bulk "Trimite toate (N)" extras in _bulk_held_banner.html si
   re-randat prin OOB (#bulk-held-banner-wrap) la fiecare reincarcare a listei
   -> nu mai ramane stale dupa eliberari (count revine la 0).
#4 tools/carantina_held seteaza purge_after (blocked_retention_days) pe randurile
   carantinate -> PII nu mai sta la nesfarsit (purge_expired le poate sterge).
#5 Panoul de detaliu marcheaza randul tinut (eticheta amber) si ofera buton
   "Trimite acum la RAR" (paritate cu randul din lista).
#6 expire_held seteaza purge_after=now-1s -> randul expirat e purjabil in ACELASI
   ciclu (purge_expired foloseste comparatie stricta), nu la ciclul urmator.

Teste noi: stickiness held + banner OOB + detaliu buton (test_web_auto_send),
purge_after carantina, purge acelasi-ciclu (test_worker_held). 1541 passed.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tests/test_web_auto_send.py

@@ -345,3 +345,86 @@ def test_audit_held_eliberat_bulk(client):
     client.post("/trimite-toate", data={"csrf_token": csrf})
     evs = _events(aid, "held_eliberat")
     assert len(evs) >= 1
+
+
+# --------------------------------------------------------------------------- #
+# /code-review (fix findings #2/#3/#5): stickiness filtru held, banner OOB,    #
+# afordanta de eliberare in panoul de detaliu.                                 #
+# --------------------------------------------------------------------------- #
+
+def test_fragment_held_gol_nu_da_422(client):
+    """Formularul include mereu `held` (gol cand filtrul e oprit) -> `held=` NU trebuie 422."""
+    aid = _account_user("k1@test.com")
+    _login(client, "k1@test.com")
+    _ins(aid, "queued", held=0)
+    resp = client.get("/_fragments/submissions?held=")
+    assert resp.status_code == 200, resp.text[:200]
+
+
+def test_fragment_held_1_filtreaza_si_persista_oob(client):
+    """?held=1 -> doar randuri tinute + OOB #f-held=1 (sticky la reincarcari) + chip 'Arata tot'."""
+    aid = _account_user("k2@test.com")
+    _login(client, "k2@test.com")
+    sid_tinut = _ins(aid, "queued", held=1)
+    _ins(aid, "sent", held=0)
+    resp = client.get("/_fragments/submissions?held=1")
+    assert resp.status_code == 200
+    # OOB sincronizeaza filtrul in form ca sa nu se piarda la trimiteriChanged/paginare.
+    assert re.search(r'id="f-held"[^>]*value="1"[^>]*hx-swap-oob', resp.text) or \
+           re.search(r'id="f-held"[^>]*hx-swap-oob[^>]*value="1"', resp.text), resp.text[:400]
+    assert "Arata tot" in resp.text
+    # Paginare (daca apare) pastreaza held=1.
+    if "Paginare" in resp.text:
+        assert "held=1" in resp.text
+
+
+def test_fragment_lista_curata_reseteaza_f_held(client):
+    """Reincarcarea listei fara filtre (dupa actiune) reseteaza #f-held la gol via OOB."""
+    aid = _account_user("k3@test.com")
+    csrf = _login(client, "k3@test.com")
+    sid = _ins(aid, "queued", held=1)
+    # trimite-acum -> _render_submissions (fara filtre) -> OOB f-held=""
+    resp = client.post(f"/trimitere/{sid}/trimite-acum", data={"csrf_token": csrf})
+    assert resp.status_code == 200
+    assert re.search(r'id="f-held"[^>]*value=""[^>]*hx-swap-oob', resp.text) or \
+           re.search(r'id="f-held"[^>]*hx-swap-oob[^>]*value=""', resp.text), resp.text[:400]
+
+
+def test_banner_bulk_dispare_dupa_eliberare(client):
+    """Banner 'Trimite toate (N)' e OOB (#bulk-held-banner-wrap): dupa eliberarea tuturor
+    randurilor tinute, wrapper-ul revine gol (fara buton) — nu mai ramane stale (#3)."""
+    aid = _account_user("k4@test.com")
+    csrf = _login(client, "k4@test.com")
+    _ins(aid, "queued", held=1)
+    _ins(aid, "queued", held=1)
+    # Inainte: fragmentul contine bannerul cu butonul.
+    r0 = client.get("/_fragments/submissions")
+    assert 'id="bulk-held-banner-wrap"' in r0.text
+    assert "Trimite toate" in r0.text
+    # Elibereaza toate -> wrapper OOB re-randat gol (fara buton).
+    r1 = client.post("/trimite-toate", data={"csrf_token": csrf})
+    assert r1.status_code == 200
+    assert 'id="bulk-held-banner-wrap"' in r1.text
+    assert "Trimite toate" not in r1.text
+
+
+def test_detaliu_rand_tinut_are_buton_trimite_acum(client):
+    """Panoul de detaliu al unui rand tinut (queued AND held=1) arata eticheta manuala +
+    buton 'Trimite acum la RAR' (#5)."""
+    aid = _account_user("k5@test.com")
+    _login(client, "k5@test.com")
+    sid = _ins(aid, "queued", held=1)
+    resp = client.get(f"/_fragments/trimitere/{sid}")
+    assert resp.status_code == 200, resp.text[:200]
+    assert "Trimite acum la RAR" in resp.text
+    assert f"/trimitere/{sid}/trimite-acum" in resp.text
+
+
+def test_detaliu_rand_queued_neted_fara_buton(client):
+    """Un rand queued NEtinut (held=0) NU arata butonul de eliberare in detaliu."""
+    aid = _account_user("k6@test.com")
+    _login(client, "k6@test.com")
+    sid = _ins(aid, "queued", held=0)
+    resp = client.get(f"/_fragments/trimitere/{sid}")
+    assert resp.status_code == 200
+    assert "Trimite acum la RAR" not in resp.text