"""Unit tests for the report-proxy route and the inline iframe viewer. The Space exposes two paths for the per-submission HTML report: - ``/reports/{submission_id}.html`` (FastAPI route): re-serves the file with ``Content-Type: text/html``. Works under Bearer auth for programmatic clients; gets 404'd by HF's edge for logged-in browser users on a private Space (no auth carryover across same-origin pathname navigations). Kept as a backdoor / for the future public migration. - ``_format_detail_and_report`` (row-click handler): server-side fetches the report via ``hf_hub_download`` and inlines it into an ``