Auth: login with valid credentials
Auth: login with bad password
Auth: /api/inbox without session
Inbox: reply to conversation
Inbox: close conversation
Inbox: add note with @mention
Inbox: simulate inbound (triage call-out)
Inbox: simulate inbound (triage running late)
Inbox: simulate inbound (normal)
Settings: list assign rules
Call Blasts: create deterministic
Call Blasts: create agent
API Keys: list (shows prefix, not raw key)
Whippy webhook: inbound creates conversation