diff --git a/test_auth.py b/test_auth.py
index 83f1bec..7051d2b 100644
--- a/test_auth.py
+++ b/test_auth.py
@@ -97,6 +97,14 @@ class AccessAPITests(unittest.TestCase):
         code,_,headers=self.request('/api/v1/login',{'password':password})
         self.assertEqual(code,200)
         return headers['Set-Cookie'].split(';')[0]
+    def test_prompt_enhancer_management_requires_login_and_validates_actions(self):
+        self.assertEqual(self.request('/api/v1/prompt-enhancers')[0],401)
+        cookie=self.setup_login()
+        code,state,_=self.request('/api/v1/prompt-enhancers',cookie=cookie)
+        self.assertEqual(code,200)
+        self.assertEqual(set(state['models']),{'t2i','i2i'})
+        self.assertEqual(self.request('/api/v1/prompt-enhancers/install',{'task':'unknown'},cookie=cookie)[0],400)
+        self.assertEqual(self.request('/api/v1/profiles/prompt-enhancer',{'id':'missing','revision':0,'prompt_enhancer':{'t2i':None,'i2i':None,'device':'auto'}},cookie=cookie)[0],400)
     def test_hub_credentials_are_session_only_and_never_returned(self):
         cookie=self.setup_login();path='/api/v1/huggingface';secret='hf_'+'a'*30
         for value in ({}, {'token':self.token}):