diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 8013360b..c518dc72 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -9,6 +9,25 @@ on:
   #  branches:
   #    - main
 jobs:
+  lint-client:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v7
+      - name: Set up Node.js
+        uses: actions/setup-node@v7
+        with:
+          node-version: "22"
+      - name: Enable Corepack
+        run: |
+          corepack enable
+      - name: Install client dependencies
+        working-directory: client
+        run: |
+          yarn install --immutable
+      - name: Type check, lint, and check formatting
+        working-directory: client
+        run: |
+          yarn lint:ci
   test:
     runs-on: ${{ matrix.os }}
     strategy:
@@ -33,7 +52,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: "20"
+          node-version: "22"
       - name: Enable Corepack
         run: |
           corepack enable
@@ -47,9 +66,9 @@ jobs:
       - name: Build binary
         run: |
           tox -e binary
-      - name: Test binary runs
+      - name: Test binary
         run: |
-          dist/imagedephi --help
+          tox -e test-binary
       - name: Upload binary artifact
         uses: actions/upload-artifact@v7
         with:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index b37b37d2..55c79f07 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -28,7 +28,7 @@ jobs:
       - name: Set up Node.js
         uses: actions/setup-node@v7
         with:
-          node-version: "20"
+          node-version: "22"
       - name: Enable Corepack
         run: |
           corepack enable
diff --git a/client/package.json b/client/package.json
index 11b897c9..fc8c561f 100644
--- a/client/package.json
+++ b/client/package.json
@@ -9,6 +9,9 @@
     "lint:check": "eslint . --fix ",
     "lint:format": "prettier src  --write",
     "lint": "npm-run-all lint:tsc lint:check lint:format",
+    "lint:ci:check": "eslint . --max-warnings 0",
+    "lint:ci:format": "prettier src --check",
+    "lint:ci": "npm-run-all lint:tsc lint:ci:check lint:ci:format",
     "dev": "NODE_ENV=development vite --port 8080",
     "build:clean": "rimraf ../imagedephi/web_static",
     "build:compile": "vite build --outDir ../imagedephi/web_static",
diff --git a/client/src/HomePage.vue b/client/src/HomePage.vue
index ec208b98..8ed5de99 100644
--- a/client/src/HomePage.vue
+++ b/client/src/HomePage.vue
@@ -24,7 +24,7 @@ const loadExportOptions = () => {
     if (saved) {
       return JSON.parse(saved);
     }
-  } catch (e) {
+  } catch {
     // Ignore parse errors
   }
   return null;
@@ -33,7 +33,7 @@ const loadExportOptions = () => {
 const saveExportOptions = (options: Record<string, unknown>) => {
   try {
     localStorage.setItem("imageDePhiExportOptions", JSON.stringify(options));
-  } catch (e) {
+  } catch {
     // Ignore storage errors
   }
 };
@@ -44,9 +44,13 @@ const exportOptions = ref({
   exportAssociated: savedOptions?.exportAssociated ?? false,
 });
 
-watch(exportOptions, (newVal) => {
-  saveExportOptions(newVal);
-}, { deep: true });
+watch(
+  exportOptions,
+  (newVal) => {
+    saveExportOptions(newVal);
+  },
+  { deep: true },
+);
 
 const progress = ref({
   count: 0,
@@ -181,23 +185,31 @@ onMounted(() => {
             help-text="Custom ruleset to be used for redaction in addition to the baserules."
             :ruleset-modal="rulesetModal || undefined"
           />
-          <StepHeader step-number="4" title="Export Options" help-text="Choose how to handle output files." />
-          <div class="self-stretch px-5 py-3 bg-white border-b border-neutral-100 flex-col justify-start flex gap-2">
+          <StepHeader
+            :step-number="4"
+            title="Export Options"
+            help-text="Choose how to handle output files."
+          />
+          <div
+            class="self-stretch px-5 py-3 bg-white border-b border-neutral-100 flex-col justify-start flex gap-2"
+          >
             <label class="flex items-center gap-2 cursor-pointer">
               <input
+                v-model="exportOptions.rename"
                 type="checkbox"
                 class="checkbox checkbox-accent"
-                v-model="exportOptions.rename"
               />
               <span class="text-sm text-gray-700">Rename files</span>
             </label>
             <label class="flex items-center gap-2 cursor-pointer">
               <input
+                v-model="exportOptions.exportAssociated"
                 type="checkbox"
                 class="checkbox checkbox-accent"
-                v-model="exportOptions.exportAssociated"
               />
-              <span class="text-sm text-gray-700">Export associated images</span>
+              <span class="text-sm text-gray-700"
+                >Export associated images</span
+              >
             </label>
           </div>
           <FileBrowser
@@ -205,8 +217,8 @@ onMounted(() => {
             :modal-id="'inputDirectory'"
             :title="'Input Directory'"
             @update-image-list="
-              (redactionStateFlags.showImageTable = true),
-                (redactionStateFlags.redactionComplete = false)
+              ((redactionStateFlags.showImageTable = true),
+              (redactionStateFlags.redactionComplete = false))
             "
           />
           <FileBrowser
@@ -224,8 +236,11 @@ onMounted(() => {
               type="submit"
               :class="`${!selectedDirectories.inputDirectory || !selectedDirectories.outputDirectory ? 'btn btn-block bg-accent text-white uppercase rounded-lg tooltip' : 'btn btn-block btn-accent text-white uppercase rounded-lg'}`"
               data-tip="Please select input and output directories"
+              :disabled="
+                !selectedDirectories.inputDirectory ||
+                !selectedDirectories.outputDirectory
+              "
               @click="canRedact()"
-              :disabled="!selectedDirectories.inputDirectory || !selectedDirectories.outputDirectory"
             >
               De-phi Images
             </button>
diff --git a/client/src/components/FileBrowser.vue b/client/src/components/FileBrowser.vue
index f7c7bbed..2e909397 100644
--- a/client/src/components/FileBrowser.vue
+++ b/client/src/components/FileBrowser.vue
@@ -69,17 +69,17 @@ onBeforeUnmount(() => {
               class="btn btn-primary float-right text-white uppercase"
               type="button"
               @click="
-                $emit('update-image-list'),
-                  closeModal(),
-                  title !== 'Output Directory'
-                    ? updateTableData({
-                        directory: selectedDirectories.inputDirectory,
-                        rules: selectedDirectories.rulesetDirectory,
-                        limit: 50,
-                        offset: 0,
-                        update: false,
-                      })
-                    : ''
+                ($emit('update-image-list'),
+                closeModal(),
+                title !== 'Output Directory'
+                  ? updateTableData({
+                      directory: selectedDirectories.inputDirectory,
+                      rules: selectedDirectories.rulesetDirectory,
+                      limit: 50,
+                      offset: 0,
+                      update: false,
+                    })
+                  : '')
               "
             >
               Select
@@ -101,8 +101,8 @@ onBeforeUnmount(() => {
                   v-else
                   class="text-blue-700"
                   @click="
-                    updateDirectories(ancestor.path),
-                      updateSelectedDirectories(ancestor.path)
+                    (updateDirectories(ancestor.path),
+                    updateSelectedDirectories(ancestor.path))
                   "
                 >
                   {{ ancestor.name ? ancestor.name : "/" }}
@@ -134,8 +134,8 @@ onBeforeUnmount(() => {
               :key="child.path"
               class="hover:bg-base-300 cursor-default py-0.5"
               @click="
-                updateDirectories(child.path),
-                  updateSelectedDirectories(child.path)
+                (updateDirectories(child.path),
+                updateSelectedDirectories(child.path))
               "
             >
               <i class="ri-folder-3-fill text-neutral"></i>
@@ -179,17 +179,17 @@ onBeforeUnmount(() => {
     <form method="dialog" class="modal-backdrop w-screen h-screen absolute">
       <button
         @click="
-          $emit('update-image-list'),
-            closeModal(),
-            title !== 'Output Directory'
-              ? updateTableData({
-                  directory: selectedDirectories.inputDirectory,
-                  rules: selectedDirectories.rulesetDirectory,
-                  limit: 50,
-                  offset: 0,
-                  update: false,
-                })
-              : ''
+          ($emit('update-image-list'),
+          closeModal(),
+          title !== 'Output Directory'
+            ? updateTableData({
+                directory: selectedDirectories.inputDirectory,
+                rules: selectedDirectories.rulesetDirectory,
+                limit: 50,
+                offset: 0,
+                update: false,
+              })
+            : '')
         "
       >
         close
diff --git a/client/src/components/StepHeader.vue b/client/src/components/StepHeader.vue
index 3dea6545..58ef596e 100644
--- a/client/src/components/StepHeader.vue
+++ b/client/src/components/StepHeader.vue
@@ -7,21 +7,32 @@ defineProps<{
 </script>
 
 <template>
-  <div class="self-stretch px-4 py-3 bg-white justify-start items-center gap-2.5 inline-flex border-b border-neutral-100">
-    <div class="w-6 h-6 bg-rose-200 rounded-[100px] justify-center items-center flex">
-      <div class="w-6 h-6 text-red-400 text-sm font-semibold flex flex-wrap justify-center content-center">
+  <div
+    class="self-stretch px-4 py-3 bg-white justify-start items-center gap-2.5 inline-flex border-b border-neutral-100"
+  >
+    <div
+      class="w-6 h-6 bg-rose-200 rounded-[100px] justify-center items-center flex"
+    >
+      <div
+        class="w-6 h-6 text-red-400 text-sm font-semibold flex flex-wrap justify-center content-center"
+      >
         {{ stepNumber }}
       </div>
     </div>
     <div class="grow shrink basis-0">
       <div class="grow shrink basis-0 flex flex-col">
-        <span class="text-purple-900 text-sm font-semibold uppercase tracking-widest">
+        <span
+          class="text-purple-900 text-sm font-semibold uppercase tracking-widest"
+        >
           {{ title }}
         </span>
-        <span v-if="helpText" class="text-gray-500 text-xs font-normal tracking-wide">
+        <span
+          v-if="helpText"
+          class="text-gray-500 text-xs font-normal tracking-wide"
+        >
           {{ helpText }}
         </span>
       </div>
     </div>
   </div>
-</template>
\ No newline at end of file
+</template>
diff --git a/client/src/store/imageStore.ts b/client/src/store/imageStore.ts
index 3b6e922f..e4de5e00 100644
--- a/client/src/store/imageStore.ts
+++ b/client/src/store/imageStore.ts
@@ -15,14 +15,17 @@ export const useRedactionPlan = reactive({
   async getThumbnail(imagedict: Record<string, Record<string, string>>) {
     Object.keys(imagedict).forEach(async (image) => {
       const keys = ["thumbnail", "label", "macro"];
-      for (let kidx=0; kidx < keys.length; kidx += 1) {
+      for (let kidx = 0; kidx < keys.length; kidx += 1) {
         const key = keys[kidx];
         const response = await getImages(
           this.currentDirectory + "/" + image,
           key,
         );
         if (response.status >= 400) {
-          this.imageRedactionPlan.data[image][key] = key === "thumbnail" ? "/thumbnailPlaceholder.svg" : "/associatedPlaceholder.svg";
+          this.imageRedactionPlan.data[image][key] =
+            key === "thumbnail"
+              ? "/thumbnailPlaceholder.svg"
+              : "/associatedPlaceholder.svg";
           return;
         }
         if (response.body) {
@@ -36,9 +39,9 @@ export const useRedactionPlan = reactive({
           }
           const blob = new Blob(chunks);
           const url = URL.createObjectURL(blob);
-          this.imageRedactionPlan.data[image][key]= url;
+          this.imageRedactionPlan.data[image][key] = url;
         }
-      };
+      }
     });
   },
 
diff --git a/tests/conftest.py b/tests/conftest.py
index 6dea38d5..c63f8d78 100644
--- a/tests/conftest.py
+++ b/tests/conftest.py
@@ -13,6 +13,15 @@
 }
 
 
+def pytest_addoption(parser: pytest.Parser) -> None:
+    parser.addoption(
+        "--binary",
+        type=Path,
+        default=None,
+        help="Path to a built imagedephi binary; tests in test_binary.py are skipped without it.",
+    )
+
+
 def retrieve_file(file_name: str, output_path: Path) -> Path:
     algo, hash_value = registry[file_name].split(":")
     h = registry[file_name]
diff --git a/tests/test_binary.py b/tests/test_binary.py
new file mode 100644
index 00000000..72855c95
--- /dev/null
+++ b/tests/test_binary.py
@@ -0,0 +1,179 @@
+"""Exercise a built (PyInstaller) imagedephi binary, as distributed to users.
+
+These are skipped unless pytest is given "--binary PATH", e.g. via "tox -e test-binary".
+"""
+
+import asyncio
+from io import BytesIO
+from pathlib import Path
+import re
+import shutil
+import subprocess
+import sys
+
+from PIL import Image
+import httpx
+import pytest
+
+from imagedephi.utils.network import wait_for_port
+
+# One-file binaries unpack themselves on every launch, which is slow on some platforms
+STARTUP_TIMEOUT = 120
+
+
+@pytest.fixture
+def binary(request: pytest.FixtureRequest) -> Path:
+    path: Path | None = request.config.getoption("--binary")
+    if path is None:
+        pytest.skip("No --binary given")
+    if not path.exists() and sys.platform == "win32":
+        path = path.with_suffix(".exe")
+    assert path.is_file(), f"Binary not found: {path}"
+    return path.resolve()
+
+
+@pytest.fixture
+def input_dir(
+    tmp_path: Path, test_image_tiff: Path, test_image_svs: Path, test_image_dcm: list[Path]
+) -> Path:
+    input_dir = tmp_path / "input"
+    input_dir.mkdir()
+    for image in [test_image_tiff, test_image_svs, *test_image_dcm]:
+        shutil.copy(image, input_dir)
+    return input_dir
+
+
+def run_binary(binary: Path, *args: str | Path) -> subprocess.CompletedProcess[str]:
+    result = subprocess.run(
+        [binary, *args],
+        capture_output=True,
+        text=True,
+        encoding="utf-8",
+        errors="replace",
+        timeout=STARTUP_TIMEOUT * 2,
+    )
+    assert result.returncode == 0, f"stdout:\n{result.stdout}\nstderr:\n{result.stderr}"
+    return result
+
+
+def single_match(directory: Path, pattern: str) -> Path:
+    matches = list(directory.glob(pattern))
+    assert len(matches) == 1, f"Expected one {pattern} in {directory}, found {matches}"
+    return matches[0]
+
+
+def assert_redacted(redacted_dir: Path) -> None:
+    tiff_bytes = single_match(redacted_dir, "*.tif").read_bytes()
+    assert b"large_image_converter" not in tiff_bytes
+    svs_bytes = single_match(redacted_dir, "*.svs").read_bytes()
+    assert b"Aperio" in svs_bytes
+    assert b"ScanScope ID" not in svs_bytes
+    dcm_bytes = single_match(redacted_dir, "*.dcm").read_bytes()
+    assert b"DICM" in dcm_bytes
+    assert b"Sample" not in dcm_bytes
+
+
+def test_binary_help(binary: Path) -> None:
+    result = run_binary(binary, "--help")
+
+    assert "Usage:" in result.stdout
+
+
+def test_binary_version(binary: Path) -> None:
+    result = run_binary(binary, "--version")
+
+    assert "ImageDePHI, version" in result.stdout
+
+
+def test_binary_plan(binary: Path, input_dir: Path) -> None:
+    result = run_binary(binary, "plan", input_dir)
+
+    for image in input_dir.iterdir():
+        assert f"Redaction plan for {image.name}" in result.stdout
+
+
+def test_binary_run(binary: Path, input_dir: Path, rules_dir: Path, tmp_path: Path) -> None:
+    output_dir = tmp_path / "output"
+    output_dir.mkdir()
+
+    run_binary(
+        binary,
+        "run",
+        input_dir,
+        "--output-dir",
+        output_dir,
+        "-R",
+        rules_dir / "example_user_rules.yaml",
+        "--export-associated",
+    )
+
+    redacted_dir = single_match(output_dir, "Redacted_*[0-9]")
+    assert_redacted(redacted_dir)
+    # Added by the override rules
+    assert b"Redacted by ImageDePHI" in single_match(redacted_dir, "*.tif").read_bytes()
+    single_match(output_dir, "Redacted_*_manifest.csv")
+    associated_images = list(single_match(output_dir, "Associated_*").rglob("*.jpg"))
+    assert associated_images
+    for associated_image in associated_images:
+        with Image.open(associated_image) as image:
+            image.verify()
+
+
+async def wait_for_server(process: subprocess.Popen, port: int) -> None:
+    """Wait for the server to listen on port, failing early if it exits first."""
+    port_task = asyncio.create_task(wait_for_port(port))
+    loop = asyncio.get_running_loop()
+    deadline = loop.time() + STARTUP_TIMEOUT
+    while not port_task.done():
+        assert process.poll() is None, f"Server exited with code {process.returncode}"
+        assert loop.time() < deadline, "Timed out waiting for server to start"
+        await asyncio.wait([port_task], timeout=0.5)
+    port_task.result()
+
+
+def test_binary_gui(binary: Path, input_dir: Path, unused_tcp_port: int, tmp_path: Path) -> None:
+    port = unused_tcp_port
+    base_url = f"http://127.0.0.1:{port}"
+    output_dir = tmp_path / "output"
+    output_dir.mkdir()
+
+    gui = subprocess.Popen([binary, "gui", "--port", str(port), "--no-browser"])
+    try:
+        asyncio.run(wait_for_server(gui, port))
+
+        with httpx.Client(base_url=base_url, timeout=STARTUP_TIMEOUT) as client:
+            # The bundled web client and its assets are served
+            index = client.get("/")
+            assert index.status_code == 200
+            assets = re.findall(r'(?:src|href)="(/assets/[^"]+)"', index.text)
+            assert assets
+            for asset in assets:
+                assert client.get(asset).status_code == 200
+
+            directory = client.get("/directory/", params={"directory": str(input_dir)})
+            assert directory.status_code == 200
+
+            thumbnail = client.get(
+                "/image/",
+                params={
+                    "file_name": str(input_dir / "test_svs_image_blank.svs"),
+                    "image_key": "thumbnail",
+                },
+            )
+            assert thumbnail.status_code == 200
+            assert thumbnail.headers["content-type"] == "image/jpeg"
+            with Image.open(BytesIO(thumbnail.content)) as image:
+                image.verify()
+
+            redact = client.post(
+                "/redact/",
+                params={"input_directory": str(input_dir), "output_directory": str(output_dir)},
+            )
+            assert redact.status_code == 200
+
+        assert gui.poll() is None
+    finally:
+        gui.terminate()
+        gui.wait(timeout=30)
+
+    assert_redacted(single_match(output_dir, "Redacted_*[0-9]"))
diff --git a/tests/test_e2e.py b/tests/test_e2e.py
index 8e7c0636..7040eea7 100644
--- a/tests/test_e2e.py
+++ b/tests/test_e2e.py
@@ -88,7 +88,7 @@ def test_e2e_gui(
         [sys.executable, "-m", "imagedephi", "gui", "--port", str(port), "--no-browser"],
     )
 
-    asyncio.run(asyncio.wait_for(wait_for_port(port), timeout=2))
+    asyncio.run(asyncio.wait_for(wait_for_port(port), timeout=30))
 
     # Check that the GUI is running
     assert gui.poll() is None
diff --git a/tox.ini b/tox.ini
index 39a5fafe..da91714b 100644
--- a/tox.ini
+++ b/tox.ini
@@ -61,6 +61,19 @@ deps =
 commands =
     python -m pytest tests {posargs} --cov=imagedephi --cov-report=xml:{toxinidir}/.tox/coverage.xml
 
+[testenv:test-binary]
+# Tests the binary built by "tox -e binary"; set IMAGEDEPHI_BINARY to test another one
+pass_env =
+    IMAGEDEPHI_BINARY
+deps =
+    httpx
+    pytest
+    pytest-asyncio
+    pytest-timeout
+    pooch
+commands =
+    python -m pytest tests/test_binary.py --binary={env:IMAGEDEPHI_BINARY:{toxinidir}{/}dist{/}imagedephi} {posargs}
+
 [testenv:binary]
 deps =
     pyinstaller