npm - @sayknow-cli/coding-agent - Versions diffs - 0.5.2 → 0.5.6 - Mend

@sayknow-cli/coding-agent 0.5.2 → 0.5.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (86) hide show

package/CHANGELOG.md +55 -16
package/dist/types/cli/update-cli.d.ts +8 -1
package/dist/types/config/atomic-yaml-patch.d.ts +20 -1
package/dist/types/config/keybindings.d.ts +10 -0
package/dist/types/config/model-registry.d.ts +1 -1
package/dist/types/config/models-config-schema.d.ts +4 -0
package/dist/types/config/settings-schema.d.ts +9 -0
package/dist/types/dap/client.d.ts +1 -0
package/dist/types/lsp/client.d.ts +5 -0
package/dist/types/modes/components/welcome.d.ts +1 -0
package/dist/types/modes/controllers/selector-controller.d.ts +3 -1
package/dist/types/modes/interactive-mode.d.ts +13 -1
package/dist/types/modes/types.d.ts +7 -1
package/dist/types/runtime-mcp/transports/stdio.d.ts +2 -0
package/dist/types/session/agent-session.d.ts +8 -0
package/dist/types/session/internal/managed-session-scope.d.ts +3 -1
package/dist/types/session/internal/managed-session-storage.d.ts +2 -0
package/dist/types/session/session-manager.d.ts +9 -0
package/dist/types/session/session-storage.d.ts +17 -0
package/dist/types/session-import/claude.d.ts +26 -0
package/dist/types/session-import/codex.d.ts +22 -0
package/dist/types/session-import/command.d.ts +20 -0
package/dist/types/session-import/detect.d.ts +22 -0
package/dist/types/session-import/index.d.ts +7 -0
package/dist/types/session-import/redact.d.ts +23 -0
package/dist/types/session-import/service.d.ts +28 -0
package/dist/types/session-import/types.d.ts +125 -0
package/dist/types/skc-runtime/launch-worktree.d.ts +17 -1
package/dist/types/slash-commands/builtin-registry.d.ts +4 -0
package/dist/types/slash-commands/types.d.ts +5 -0
package/dist/types/tools/ask.d.ts +5 -0
package/package.json +13 -7
package/scripts/generate-sdk-operation-inventory.ts +5 -6
package/src/cli/config-cli.ts +23 -8
package/src/cli/update-cli.ts +265 -21
package/src/config/atomic-yaml-patch.ts +167 -30
package/src/config/keybindings.ts +10 -0
package/src/config/model-profiles.ts +69 -1
package/src/config/model-registry.ts +60 -38
package/src/config/models-config-schema.ts +1 -1
package/src/config/settings-schema.ts +9 -0
package/src/config/settings.ts +13 -2
package/src/dap/client.ts +78 -30
package/src/internal-urls/docs-index.generated.ts +5 -4
package/src/lsp/client.ts +17 -29
package/src/modes/action-registry.ts +2 -0
package/src/modes/components/welcome.ts +5 -0
package/src/modes/controllers/goal-mode-controller.ts +7 -2
package/src/modes/controllers/input-controller.ts +71 -6
package/src/modes/controllers/plan-mode-controller.ts +8 -1
package/src/modes/controllers/runtime-mcp-command-controller.ts +14 -0
package/src/modes/controllers/selector-controller.ts +47 -19
package/src/modes/interactive-mode.ts +54 -4
package/src/modes/types.ts +5 -1
package/src/runtime-mcp/transports/stdio.ts +96 -33
package/src/sdk/broker/lifecycle.ts +6 -5
package/src/sdk/protocol/operation-inventory.generated.json +33 -0
package/src/sdk/session.ts +25 -18
package/src/session/agent-session.ts +89 -14
package/src/session/internal/managed-session-scope.ts +41 -6
package/src/session/internal/managed-session-storage.ts +14 -0
package/src/session/session-manager.ts +113 -11
package/src/session/session-storage.ts +70 -0
package/src/session-import/claude.ts +382 -0
package/src/session-import/codex.ts +458 -0
package/src/session-import/command.ts +61 -0
package/src/session-import/detect.ts +133 -0
package/src/session-import/index.ts +27 -0
package/src/session-import/redact.ts +125 -0
package/src/session-import/service.ts +749 -0
package/src/session-import/types.ts +163 -0
package/src/skc-runtime/launch-worktree.ts +277 -4
package/src/slash-commands/acp-builtins.ts +5 -1
package/src/slash-commands/builtin-registry.ts +100 -1
package/src/slash-commands/types.ts +5 -0
package/src/tools/ask.ts +5 -0
package/src/export/html/template.css +0 -1060
package/src/export/html/template.html +0 -47
package/src/export/html/template.js +0 -2348
package/vendor/insane-search/engine/tests/test_hardening.py +0 -57
package/vendor/insane-search/engine/tests/test_smoke.py +0 -152
package/vendor/insane-search/engine/tests/test_u1.py +0 -200
package/vendor/insane-search/engine/tests/test_u4.py +0 -131
package/vendor/insane-search/engine/tests/test_u5.py +0 -163
package/vendor/insane-search/engine/tests/test_u7.py +0 -124
package/vendor/insane-search/engine/tests/test_u8.py +0 -216

package/vendor/insane-search/engine/tests/test_hardening.py DELETED Viewed

@@ -1,57 +0,0 @@
-#!/usr/bin/env python3
-from __future__ import annotations
-import os
-import subprocess
-import sys
-import unittest
-HERE = os.path.dirname(os.path.abspath(__file__))
-ROOT = os.path.abspath(os.path.join(HERE, "..", ".."))
-sys.path.insert(0, ROOT)
-from engine.fetch_chain import FetchResult  # noqa: E402
-from engine.transport import SessionPool  # noqa: E402
-class FetchResultJsonContractTest(unittest.TestCase):
-    def test_to_dict_omits_content_by_default_but_reports_length(self):
-        payload = FetchResult(ok=True, content="recovered").to_dict()
-        self.assertNotIn("content", payload)
-        self.assertEqual(payload["content_length"], len("recovered"))
-        self.assertFalse(payload["content_truncated"])
-    def test_to_dict_includes_bounded_content_for_cli_json(self):
-        payload = FetchResult(ok=True, content="abcdef").to_dict(include_content=True, content_limit=3)
-        self.assertEqual(payload["content"], "abc")
-        self.assertEqual(payload["content_length"], 6)
-        self.assertTrue(payload["content_truncated"])
-class RedirectSafetyTest(unittest.TestCase):
-    def test_transport_redirect_to_private_target_is_blocked(self):
-        class Resp:
-            status_code = 302
-            headers = {"Location": "http://127.0.0.1/private"}
-            text = ""
-            url = "https://public.example/redirect"
-        resp, err = SessionPool._fetch_following(lambda _url: Resp(), "https://public.example/redirect", False, 10, None)
-        self.assertIsNone(resp)
-        self.assertTrue(err.startswith("ssrf_redirect_blocked:"), err)
-    def test_playwright_templates_reject_private_initial_url_before_browser_launch(self):
-        template = os.path.join(ROOT, "engine", "templates", "playwright_real_chrome.js")
-        proc = subprocess.run(
-            ["node", template],
-            input='{"url":"http://127.0.0.1/private"}',
-            capture_output=True,
-            text=True,
-            timeout=10,
-        )
-        self.assertNotEqual(proc.returncode, 0)
-        self.assertIn("unsafe_url", proc.stderr)
-if __name__ == "__main__":
-    unittest.main()

package/vendor/insane-search/engine/tests/test_smoke.py DELETED Viewed

@@ -1,152 +0,0 @@
-#!/usr/bin/env python3
-"""Smoke / regression test for the generic fetch chain.
-These tests hit real endpoints — mark as online / integration. They verify
-behaviour patterns, not content. No assertions on specific site brands.
-Run manually:
-    python3 engine/tests/test_smoke.py
-"""
-from __future__ import annotations
-import json
-import os
-import sys
-import time
-# Allow running from anywhere.
-HERE = os.path.dirname(os.path.abspath(__file__))
-ROOT = os.path.abspath(os.path.join(HERE, "..", ".."))
-sys.path.insert(0, ROOT)
-from engine import fetch  # noqa: E402
-from engine.validators import validate, Verdict  # noqa: E402
-from engine.waf_detector import detect, _load_profiles  # noqa: E402
-from engine.url_transforms import iter_transformed  # noqa: E402
-# --- unit-level -------------------------------------------------------------
-def t_validator_tiny_body_is_challenge():
-    class R:
-        status_code = 200
-        text = "<html>short</html>"
-        headers = {}
-        cookies = type("C", (), {"jar": iter(())})()
-    vr = validate(R())
-    assert vr.verdict == Verdict.CHALLENGE, vr.verdict
-    assert any("tiny_body" in r for r in vr.reasons)
-    print("  ✓ tiny body → challenge")
-def t_validator_marker_is_challenge():
-    class R:
-        status_code = 200
-        text = "<html>" + ("x" * 5000) + " sec-if-cpt-container found </html>"
-        headers = {}
-        cookies = type("C", (), {"jar": iter(())})()
-    vr = validate(R())
-    assert vr.verdict == Verdict.CHALLENGE, vr.verdict
-    print("  ✓ challenge marker → challenge")
-def t_validator_weak_ok_without_selectors():
-    class R:
-        status_code = 200
-        text = "<html>" + ("x" * 5000) + "</html>"
-        headers = {}
-        cookies = type("C", (), {"jar": iter(())})()
-    vr = validate(R())
-    assert vr.verdict == Verdict.WEAK_OK, vr.verdict
-    print("  ✓ clean body w/o selectors → weak_ok")
-def t_validator_strong_ok_with_selectors():
-    class R:
-        status_code = 200
-        text = "<html><body>" + ("x" * 5000) + "<article>hello</article></body></html>"
-        headers = {}
-        cookies = type("C", (), {"jar": iter(())})()
-    vr = validate(R(), success_selectors=["article"])
-    assert vr.verdict == Verdict.STRONG_OK, vr.verdict
-    assert "article" in vr.matched_selectors
-    print("  ✓ selectors matched → strong_ok")
-def t_profiles_load():
-    p = _load_profiles()
-    for required in ("akamai_bot_manager", "cloudflare_turnstile", "unknown_challenge"):
-        assert required in p, f"missing profile: {required}"
-    print(f"  ✓ profiles loaded ({len(p)} keys)")
-def t_url_transforms():
-    # www → m
-    out = iter_transformed("https://www.example.com/a", ["original", "mobile_subdomain"])
-    urls = [u for _, u in out]
-    assert "https://www.example.com/a" in urls
-    assert "https://m.example.com/a" in urls, urls
-    # apex with am_prefix
-    out2 = iter_transformed("https://example.com/", ["original", "am_prefix"])
-    urls2 = [u for _, u in out2]
-    assert "https://m.example.com/" in urls2, urls2
-    print(f"  ✓ url_transforms produce expected forms")
-# --- online (network) -------------------------------------------------------
-def t_online_benign_site():
-    """A simple, usually-open site should pass probe directly when selectors provided."""
-    # example.com serves ~1.2KB content — below tiny_body threshold — but with
-    # success_selectors we trust caller's "content exists" definition.
-    r = fetch(
-        "https://example.com/",
-        success_selectors=["h1", "p"],
-        timeout=15,
-        max_attempts=3,
-        enable_playwright=False,
-    )
-    assert r.ok, f"{r.summary} | trace: {[a.verdict for a in r.trace]}"
-    assert r.verdict in ("strong_ok", "weak_ok"), r.verdict
-    print(f"  ✓ benign site → verdict={r.verdict} size={len(r.content)}")
-def t_online_trace_shape():
-    """Even on failure, trace should be populated and well-formed."""
-    r = fetch("https://httpbin.org/status/403", timeout=10, max_attempts=3, enable_playwright=False)
-    assert isinstance(r.trace, list) and len(r.trace) >= 1
-    for att in r.trace:
-        d = att.to_dict()
-        assert "phase" in d and "executor" in d and "verdict" in d
-    print(f"  ✓ httpbin 403 → trace_len={len(r.trace)} final={r.verdict}")
-ALL_TESTS = [
-    ("validator_tiny_body_is_challenge", t_validator_tiny_body_is_challenge),
-    ("validator_marker_is_challenge", t_validator_marker_is_challenge),
-    ("validator_weak_ok_without_selectors", t_validator_weak_ok_without_selectors),
-    ("validator_strong_ok_with_selectors", t_validator_strong_ok_with_selectors),
-    ("profiles_load", t_profiles_load),
-    ("url_transforms", t_url_transforms),
-    ("online_benign_site", t_online_benign_site),
-    ("online_trace_shape", t_online_trace_shape),
-]
-def main() -> int:
-    passed, failed = 0, 0
-    for name, fn in ALL_TESTS:
-        try:
-            print(f"[{name}]")
-            fn()
-            passed += 1
-        except AssertionError as e:
-            failed += 1
-            print(f"  ✗ FAIL: {e}")
-        except Exception as e:
-            failed += 1
-            print(f"  ✗ ERROR: {type(e).__name__}: {e}")
-    print(f"\n{passed} passed, {failed} failed")
-    return 0 if failed == 0 else 1
-if __name__ == "__main__":
-    sys.exit(main())

package/vendor/insane-search/engine/tests/test_u1.py DELETED Viewed

@@ -1,200 +0,0 @@
-#!/usr/bin/env python3
-"""U1 regression tests — validator v2 + diversity scheduler.
-Deterministic, network-free. Locks in the multi-AI-review fixes:
-  * grid diversity under a small cap (all TLS families + both transforms)
-  * avoid targets deprioritized, NOT deleted
-  * validator: small JSON ok, _abck-unresolved non-terminal, soft-marker
-    overridden by selector, status semantics.
-Run:  python3 engine/tests/test_u1.py
-"""
-from __future__ import annotations
-import os
-import sys
-HERE = os.path.dirname(os.path.abspath(__file__))
-ROOT = os.path.abspath(os.path.join(HERE, "..", ".."))
-sys.path.insert(0, ROOT)
-from engine.validators import validate, Verdict  # noqa: E402
-from engine.waf_detector import _load_profiles  # noqa: E402
-from engine.fetch_chain import _build_plan, _family  # noqa: E402
-class _Ck:
-    def __init__(self, name, value):
-        self.name, self.value = name, value
-class _Jar:
-    def __init__(self, d):
-        self.jar = [_Ck(k, v) for k, v in d.items()]
-class _Resp:
-    def __init__(self, status=200, text="", headers=None, cookies=None):
-        self.status_code = status
-        self.text = text
-        self.headers = headers or {}
-        self.cookies = _Jar(cookies or {})
-class _Hit:
-    def __init__(self, pid):
-        self.profile_id = pid
-        self.confidence = 0.9
-        self.signals = []
-# ---------- scheduler ----------
-def t_scheduler_diversity_under_cap():
-    profiles = _load_profiles()
-    plan = _build_plan("https://www.example.com/p", [_Hit("akamai_bot_manager")],
-                       profiles, "auto", "safari", "self_root")
-    budget = 11  # max_attempts 12 - probe
-    head = plan[:budget]
-    fams = set(_family(c.impersonate) for c in head)
-    transforms = set(c.transform for c in head)
-    assert fams == {"safari", "safari_ios", "chrome", "chrome_android", "edge"}, fams
-    assert transforms == {"original", "mobile_subdomain"}, transforms
-    print(f"  ✓ first {budget} cover all families {sorted(fams)} + transforms {sorted(transforms)}")
-def t_scheduler_avoid_deprioritized_not_deleted():
-    profiles = _load_profiles()
-    plan = _build_plan("https://www.example.com/p", [_Hit("akamai_bot_manager")],
-                       profiles, "auto", "safari", "self_root")
-    imps = [c.impersonate for c in plan]
-    # chrome145/146 are in avoid; must still be present (exhaustive) but late.
-    assert "chrome145" in imps and "chrome146" in imps, "avoid targets were deleted!"
-    pos145 = min(i for i, x in enumerate(imps) if x == "chrome145")
-    early = imps[: len(imps) // 2]
-    assert "chrome145" not in early, "avoid target not deprioritized"
-    print(f"  ✓ avoid targets retained but late (chrome145 idx={pos145}/{len(imps)})")
-def t_scheduler_desktop_drops_mobile_transform():
-    profiles = _load_profiles()
-    plan = _build_plan("https://www.example.com/p", [_Hit("akamai_bot_manager")],
-                       profiles, "desktop", "safari", "self_root")
-    transforms = set(c.transform for c in plan)
-    fams = set(_family(c.impersonate) for c in plan)
-    assert "mobile_subdomain" not in transforms, transforms
-    assert "safari_ios" not in fams and "chrome_android" not in fams, fams
-    print(f"  ✓ desktop drops mobile transform & mobile TLS (transforms={sorted(transforms)})")
-# ---------- validator v2 ----------
-def t_validator_small_json_ok():
-    r = _Resp(200, '{"items":[{"id":1}],"total":1}', headers={"Content-Type": "application/json"})
-    v = validate(r)
-    assert v.verdict == Verdict.WEAK_OK, v.verdict
-    assert not (v.verdict == Verdict.CHALLENGE)
-    print(f"  ✓ small JSON → {v.verdict.value} (was challenge)")
-def t_validator_abck_unresolved_is_non_terminal():
-    r = _Resp(200, "<html>" + "x" * 5000 + "</html>", cookies={"_abck": "AA~-1~bb"})
-    v = validate(r)
-    assert v.verdict == Verdict.SUSPECT_OK, v.verdict
-    assert v.ok is False, "SUSPECT_OK must not count as terminal success"
-    print(f"  ✓ _abck unresolved → {v.verdict.value}, ok={v.ok} (was weak_ok/ok=True)")
-def t_validator_soft_marker_overridden_by_selector():
-    html = "<html><script>var s='captcha';</script><body>" + "x" * 5000 + "<main id='c'>real</main></body></html>"
-    v = validate(_Resp(200, html), success_selectors=["#c"])
-    assert v.verdict == Verdict.STRONG_OK, v.verdict
-    print(f"  ✓ 'captcha' word + matching selector → {v.verdict.value} (was challenge)")
-def t_validator_hard_marker_still_challenge():
-    v = validate(_Resp(200, "<html>" + "x" * 5000 + " sec-if-cpt-container </html>"))
-    assert v.verdict == Verdict.CHALLENGE, v.verdict
-    print(f"  ✓ hard marker still → {v.verdict.value}")
-def t_validator_status_semantics():
-    assert validate(_Resp(429, "slow down")).verdict == Verdict.RATE_LIMITED
-    assert validate(_Resp(401, "nope")).verdict == Verdict.AUTH_REQUIRED
-    assert validate(_Resp(404, "gone")).verdict == Verdict.NOT_FOUND
-    assert validate(_Resp(503, "later")).verdict == Verdict.BLOCKED
-    print("  ✓ status semantics 429/401/404/503 differentiated")
-def t_validator_byte_size_not_char_count():
-    # 1500 Korean chars = 1500 chars but 4500 bytes (>threshold) → not tiny.
-    body = "가" * 1500
-    v = validate(_Resp(200, body, headers={"Content-Type": "text/html"}))
-    # 4500 bytes ≥ 3000 → not tiny_body; no markers/selectors → weak_ok
-    assert v.body_size >= 3000, v.body_size
-    assert v.verdict == Verdict.WEAK_OK, (v.verdict, v.body_size)
-    print(f"  ✓ byte size counts UTF-8 bytes ({v.body_size}B from 1500 chars) → {v.verdict.value}")
-def t_validator_small_complete_page_is_weak_ok():
-    # example.com is a complete ~600B HTML document with real text — a small but
-    # genuine page must NOT be mislabelled a challenge stub (regression guard).
-    body = ('<!doctype html><html lang="en"><head><title>Example Domain</title>'
-            '</head><body><div><h1>Example Domain</h1><p>This domain is for use in '
-            'documentation examples without needing permission.</p>'
-            '<p><a href="https://iana.org/domains/example">Learn more</a></p>'
-            '</div></body></html>')
-    v = validate(_Resp(200, body, headers={"Content-Type": "text/html"}))
-    assert v.body_size < 3000, v.body_size
-    assert v.verdict == Verdict.WEAK_OK, (v.verdict, v.reasons)
-    print(f"  ✓ small complete page → {v.verdict.value} ({v.reasons})")
-def t_validator_small_script_stub_still_challenge():
-    # Script-only tiny body (no visible text) is still a suspicious stub.
-    body = '<html><head></head><body><script src="/cdn-cgi/challenge.js"></script></body></html>'
-    v = validate(_Resp(200, body, headers={"Content-Type": "text/html"}))
-    assert v.verdict == Verdict.CHALLENGE, (v.verdict, v.reasons)
-    print(f"  ✓ script-only tiny body → {v.verdict.value}")
-def t_validator_small_fragment_still_challenge():
-    # Incomplete fragment (no closing </html>/</body>) stays suspicious.
-    v = validate(_Resp(200, "<div>loading", headers={"Content-Type": "text/html"}))
-    assert v.verdict == Verdict.CHALLENGE, (v.verdict, v.reasons)
-    print(f"  ✓ incomplete fragment → {v.verdict.value}")
-ALL = [
-    ("scheduler_diversity_under_cap", t_scheduler_diversity_under_cap),
-    ("scheduler_avoid_deprioritized_not_deleted", t_scheduler_avoid_deprioritized_not_deleted),
-    ("scheduler_desktop_drops_mobile_transform", t_scheduler_desktop_drops_mobile_transform),
-    ("validator_small_json_ok", t_validator_small_json_ok),
-    ("validator_abck_unresolved_is_non_terminal", t_validator_abck_unresolved_is_non_terminal),
-    ("validator_soft_marker_overridden_by_selector", t_validator_soft_marker_overridden_by_selector),
-    ("validator_hard_marker_still_challenge", t_validator_hard_marker_still_challenge),
-    ("validator_status_semantics", t_validator_status_semantics),
-    ("validator_byte_size_not_char_count", t_validator_byte_size_not_char_count),
-    ("validator_small_complete_page_is_weak_ok", t_validator_small_complete_page_is_weak_ok),
-    ("validator_small_script_stub_still_challenge", t_validator_small_script_stub_still_challenge),
-    ("validator_small_fragment_still_challenge", t_validator_small_fragment_still_challenge),
-]
-def main() -> int:
-    p = f = 0
-    for name, fn in ALL:
-        try:
-            print(f"[{name}]")
-            fn()
-            p += 1
-        except AssertionError as e:
-            f += 1
-            print(f"  ✗ FAIL: {e}")
-        except Exception as e:
-            f += 1
-            print(f"  ✗ ERROR: {type(e).__name__}: {e}")
-    print(f"\n{p} passed, {f} failed")
-    return 0 if f == 0 else 1
-if __name__ == "__main__":
-    sys.exit(main())

package/vendor/insane-search/engine/tests/test_u4.py DELETED Viewed

@@ -1,131 +0,0 @@
-#!/usr/bin/env python3
-"""U4 tests — SessionPool, root warmup, browser→curl cookie bridge.
-Offline unit tests + a couple of benign online checks (example.com). Run:
-    python3 engine/tests/test_u4.py
-"""
-from __future__ import annotations
-import os
-import sys
-HERE = os.path.dirname(os.path.abspath(__file__))
-ROOT = os.path.abspath(os.path.join(HERE, "..", ""))
-sys.path.insert(0, os.path.abspath(os.path.join(HERE, "..", "..")))
-from engine.transport import SessionPool, _host_of, _root_of  # noqa: E402
-from engine.executor import _parse_envelope  # noqa: E402
-def t_host_and_root_helpers():
-    assert _host_of("https://www.x.com/a/b?q=1") == "www.x.com"
-    assert _root_of("https://www.x.com/a/b?q=1") == "https://www.x.com/"
-    print("  ✓ host/root helpers")
-def t_session_reuse_same_key():
-    p = SessionPool()
-    e1 = p.get("www.x.com", "safari")
-    e2 = p.get("www.x.com", "safari")
-    e3 = p.get("www.x.com", "chrome")
-    if e1 is None:
-        print("  ⚠ curl_cffi unavailable — skipped reuse check")
-        return
-    assert e1 is e2, "same (host,impersonate) must reuse entry"
-    assert e1 is not e3, "different impersonate must be separate session"
-    assert p.stats()["sessions"] == 2, p.stats()
-    print(f"  ✓ session reuse (same key→same, diff impersonate→new): {p.stats()}")
-def t_inject_cookies_then_present():
-    p = SessionPool()
-    ok = p.inject_cookies("www.x.com", "chrome",
-                          [{"name": "cf_clearance", "value": "abc", "domain": "www.x.com"}],
-                          user_agent="UA/1.0")
-    ent = p.get("www.x.com", "chrome")
-    if ent is None:
-        print("  ⚠ curl_cffi unavailable — skipped cookie inject check")
-        return
-    assert ok, "inject should report success"
-    assert ent.injected_ua == "UA/1.0"
-    names = {c.name for c in ent.session.cookies.jar}
-    assert "cf_clearance" in names, names
-    print(f"  ✓ injected cookies present on session: {sorted(names)}")
-def t_parse_envelope_json():
-    env = '{"html":"<h1>hi</h1>","finalUrl":"https://x/p","status":200,' \
-          '"cookies":[{"name":"a","value":"b"}],"userAgent":"UA"}'
-    html, final, status, cookies, ua, automation = _parse_envelope(env, "https://x/q")
-    assert html == "<h1>hi</h1>" and final == "https://x/p" and status == 200
-    assert cookies and cookies[0]["name"] == "a" and ua == "UA"
-    print("  ✓ envelope JSON parsed")
-def t_parse_envelope_raw_html_fallback():
-    html, final, status, cookies, ua, automation = _parse_envelope("<html>raw</html>", "https://x/q")
-    assert html == "<html>raw</html>" and final == "https://x/q" and status == 200
-    assert cookies == [] and ua is None
-    print("  ✓ raw-HTML fallback (non-JSON stdout)")
-def t_warmup_once_guard_online():
-    p = SessionPool()
-    first = p.warmup("example.com", "safari", "https://example.com/", timeout=15)
-    second = p.warmup("example.com", "safari", "https://example.com/", timeout=15)
-    ent = p.get("example.com", "safari")
-    if ent is None:
-        print("  ⚠ curl_cffi unavailable — skipped warmup check")
-        return
-    # first may be True (network) or False (offline); second must be False (guard).
-    assert second is False, "warmup must be idempotent"
-    assert ent.warmed is True
-    print(f"  ✓ warmup once-guard (first={first}, second={second})")
-def t_fetch_many_reuses_pool_online():
-    from engine import transport
-    from engine.fetch_chain import fetch_many
-    transport.POOL.reset()
-    results = fetch_many(
-        ["https://example.com/", "https://example.com/index.html"],
-        success_selectors=["h1", "p"], timeout=15, max_attempts=2, enable_playwright=False,
-    )
-    st = transport.POOL.stats()
-    assert len(results) == 2
-    # Same host → should not spawn a separate session per URL per identity.
-    assert st["sessions"] <= 2, st
-    oks = sum(1 for r in results if r.ok)
-    print(f"  ✓ fetch_many reused pool: stats={st}, ok={oks}/2")
-ALL = [
-    ("host_and_root_helpers", t_host_and_root_helpers),
-    ("session_reuse_same_key", t_session_reuse_same_key),
-    ("inject_cookies_then_present", t_inject_cookies_then_present),
-    ("parse_envelope_json", t_parse_envelope_json),
-    ("parse_envelope_raw_html_fallback", t_parse_envelope_raw_html_fallback),
-    ("warmup_once_guard_online", t_warmup_once_guard_online),
-    ("fetch_many_reuses_pool_online", t_fetch_many_reuses_pool_online),
-]
-def main() -> int:
-    p = f = 0
-    for name, fn in ALL:
-        try:
-            print(f"[{name}]")
-            fn()
-            p += 1
-        except AssertionError as e:
-            f += 1
-            print(f"  ✗ FAIL: {e}")
-        except Exception as e:
-            f += 1
-            print(f"  ✗ ERROR: {type(e).__name__}: {e}")
-    print(f"\n{p} passed, {f} failed")
-    return 0 if f == 0 else 1
-if __name__ == "__main__":
-    sys.exit(main())