Clarify local backup permission recovery

tests/auto-backup.test.mjs

@@ -94,13 +94,17 @@ test("manual backup replaces the day and retains ten non-consecutive versions",
   assert.equal(directory.files.get("notes.json"), "old");
 });
 
-test("permission failure prevents export and cleanup", async () => {
-  const directory = new FakeDirectory();
-  directory.permission = "prompt";
-  let generated = false;
-  const result = await saveBackup({ directoryHandle: directory, generateJson: async () => { generated = true; return "{}"; } });
-  assert.equal(result.reason, "permission");
-  assert.equal(generated, false);
+test("missing permission never opens a prompt or starts an export", async () => {
+  for (const permission of ["prompt", "denied"]) {
+    const directory = new FakeDirectory();
+    directory.permission = permission;
+    directory.requestPermission = () => { throw new Error("Permission popup must require user interaction"); };
+    let generated = false;
+    const result = await saveBackup({ directoryHandle: directory, generateJson: async () => { generated = true; return "{}"; } });
+    assert.equal(result.reason, "permission");
+    assert.equal(result.permission, permission);
+    assert.equal(generated, false);
+  }
 });
 
 test("cleanup failure does not invalidate a successfully written backup", async () => {

tests/helpers/data-validation.mjs

@@ -233,6 +233,7 @@ export function validateSiteContent(site) {
     "toolboxes.autoBackup.chooseFolder",
     "toolboxes.autoBackup.changeFolder",
     "toolboxes.autoBackup.reauthorize",
+    "toolboxes.autoBackup.permissionRequired",
     "toolboxes.autoBackup.saveNow",
     "toolboxes.autoBackup.noFolder",
     "toolboxes.autoBackup.never",