argo-search 2.9.7 → 2.9.8

package/sub-skills/local-seek/scripts/seek_rank.py

@@ -82,6 +82,7 @@ _TOPIC_PRIOR_WEIGHT = 1.2
 # 量级与一个中频词元命中相当，够翻二元组的歧义、翻不了多词全覆盖行。
 _PHRASE_BONUS = 3.0
 _PHRASE_BONUS_CAP = 6.0
+_NAME_PHRASE_BONUS = 4.0  # 文件名直接命中查询短语时的定位加成
 
 
 def _split_camel(run: str) -> list[str]:
@@ -178,9 +179,12 @@ def rank_rows(rows: list[tuple[str, int, str]], raw_query: str,
                 total += w * qtf * (sat + _DELTA) * idf
         total += _TOPIC_PRIOR_WEIGHT * math.log1p(file_hits[rows[i][0]])
         if phrases:
-            low = (rows[i][2] or "").lower()
-            hits = sum(1 for ph in phrases if ph in low)
-            total += min(hits, 2) * _PHRASE_BONUS
+            low_line = (rows[i][2] or "").lower()
+            fp_low = (rows[i][0] or "").lower()
+            name_low = fp_low.rpartition("/")[2] or fp_low
+            name_hits = sum(1 for ph in phrases if ph in name_low)
+            line_hits = sum(1 for ph in phrases if ph in low_line)
+            total += min(name_hits, 2) * _NAME_PHRASE_BONUS + min(line_hits, 2) * _PHRASE_BONUS
         if boost_fn is not None:
             try:
                 total += boost_fn(rows[i][0])

package/scripts/local_engines.py

@@ -1,321 +0,0 @@
-#!/usr/bin/env python3
-"""本地个性化引擎插件 — 不随公开仓库提交。
-
-包含漏洞查询类引擎（OSV.dev + CISA KEV），因启发式杀毒检测
-（HEUR:HackTool/VulnScan）从公开构建器中移出。
-本地文件，不提交 git；删除后对应引擎自动消失，不影响其他功能。
-"""
-
-from __future__ import annotations
-
-import json
-import re
-import time
-import urllib.request
-from typing import Any
-
-from engines_base import safe_search, rank_score, http_open, note_failure
-
-
-# ── OSV.dev 开源漏洞库（免 key，必须 POST）─────────────────────────────────
-
-_OSV_ECOSYSTEM_PREFIX: dict[str, str] = {
-    "pypi": "PyPI", "npm": "npm", "go": "Go", "crates": "crates.io",
-    "cargo": "crates.io", "maven": "Maven", "nuget": "NuGet",
-    "packagist": "Packagist", "composer": "Packagist",
-    "rubygems": "RubyGems", "gem": "RubyGems", "hex": "Hex",
-}
-
-_OSV_NPM_HINTS: frozenset[str] = frozenset({
-    "lodash", "react", "vue", "express", "axios", "next", "webpack",
-    "typescript", "eslint", "vite", "jest", "moment", "jquery", "angular",
-    "svelte", "nuxt", "rollup", "babel", "prettier", "cheerio", "socket.io",
-})
-
-_OSV_GO_HINTS: frozenset[str] = frozenset({
-    "golang.org/x/net", "golang.org/x/crypto", "golang.org/x/text",
-    "github.com/gin-gonic/gin", "github.com/gorilla/websocket",
-})
-
-
-def _osv_resolve_ecosystem(query: str) -> tuple[str, str]:
-    q = (query or "").strip()
-    if ":" in q:
-        head, _, tail = q.partition(":")
-        eco = _OSV_ECOSYSTEM_PREFIX.get(head.strip().lower())
-        if eco and tail.strip():
-            return tail.strip(), eco
-    name = q
-    if name.startswith("@") or "/" in name:
-        if name.startswith("@"):
-            return name, "npm"
-        if name.startswith(("github.com/", "gitlab.com/", "golang.org/")):
-            return name, "Go"
-        return name, "npm"
-    if name.lower() in _OSV_NPM_HINTS:
-        return name, "npm"
-    if name.lower() in _OSV_GO_HINTS:
-        return name, "Go"
-    return name, "PyPI"
-
-
-def _build_osv_engine(spec: dict[str, Any]) -> Any:
-    """OSV.dev 漏洞查询（按包名，POST /v1/query；免 key、免限次）。"""
-    timeout = spec.get("timeout", 15)
-
-    @safe_search
-    def _engine(query: str, n: int = 5, _timeout: float | None = None,
-                **kwargs) -> list[dict[str, Any]]:
-        to = _timeout or timeout
-        q = (query or "").strip()
-        if not q:
-            return []
-        if re.match(r"^CVE-\d{4}-\d{4,}$", q, re.I):
-            return []
-        pkg, eco = _osv_resolve_ecosystem(q)
-        body = json.dumps({"package": {"name": pkg, "ecosystem": eco}}).encode("utf-8")
-        req = urllib.request.Request(
-            "https://api.osv.dev/v1/query", data=body,
-            headers={"Content-Type": "application/json"})
-        eng_name = spec.get("_name") or "osv"
-        try:
-            with http_open(req, timeout=to, engine=eng_name) as resp:
-                data = json.loads(resp.read().decode("utf-8"))
-        except Exception as e:
-            if isinstance(e, (json.JSONDecodeError, UnicodeDecodeError)):
-                note_failure(eng_name, "parse", "json_decode", str(e))
-            import logging
-            logging.getLogger("unified_search.engines").warning(f"OSV 失败: {e}")
-            return []
-        results = []
-        for i, v in enumerate((data.get("vulns") or [])[:n]):
-            vid = str(v.get("id") or "").strip()
-            if not vid:
-                continue
-            summary = str(v.get("summary") or "").strip()
-            affected_bits = []
-            for aff in (v.get("affected") or [])[:2]:
-                if not isinstance(aff, dict):
-                    continue
-                for rng in (aff.get("ranges") or [])[:2]:
-                    if not isinstance(rng, dict):
-                        continue
-                    events = rng.get("events") or []
-                    introduced = next((e.get("introduced") for e in events
-                                       if isinstance(e, dict) and e.get("introduced")), "")
-                    fixed = next((e.get("fixed") for e in events
-                                  if isinstance(e, dict) and e.get("fixed")), "")
-                    if introduced or fixed:
-                        affected_bits.append(
-                            f"{introduced or '?'} ≤ 受影响 < {fixed or '未修复'}")
-            aliases = [a for a in (v.get("aliases") or []) if a][:3]
-            snippet = " · ".join(p for p in (
-                summary, f"生态 {eco}",
-                affected_bits[0] if affected_bits else "",
-                " ".join(aliases),
-            ) if p)[:300]
-            results.append({
-                "title": f"{vid} [{eco}] {summary}"[:500] or vid,
-                "url": f"https://osv.dev/vulnerability/{vid}",
-                "snippet": snippet,
-                "source": "osv",
-                "published_at": str(v.get("published") or "")[:10],
-                "score": rank_score(0.85, i),
-            })
-        return results
-    return _engine
-
-
-# ── CISA KEV 已知在野利用漏洞（免 key，全量文件 + 本地过滤）──────────────
-
-_KEV_CACHE: dict[str, Any] = {"at": 0.0, "items": None}
-_KEV_TTL_S = 6 * 3600
-
-
-def _kev_disk_path():
-    try:
-        from argo_paths import state_path
-        return state_path("cisa_kev_cache.json")
-    except Exception:
-        return None
-
-
-def _kev_load(timeout: float) -> list[dict[str, Any]]:
-    now = time.time()
-    cached = _KEV_CACHE.get("items")
-    if cached and (now - float(_KEV_CACHE.get("at") or 0)) < _KEV_TTL_S:
-        return cached
-    disk_p = _kev_disk_path()
-    if disk_p is not None and disk_p.exists():
-        try:
-            st = disk_p.stat()
-            if (now - st.st_mtime) < _KEV_TTL_S:
-                disk_items = json.loads(disk_p.read_text(encoding="utf-8"))
-                if isinstance(disk_items, list) and disk_items:
-                    _KEV_CACHE["items"] = disk_items
-                    _KEV_CACHE["at"] = st.st_mtime
-                    return disk_items
-        except Exception:
-            pass
-    req = urllib.request.Request(
-        "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
-        headers={"User-Agent": "argo-search/1.0 (+cisa-kev)", "Accept": "application/json"})
-    try:
-        with http_open(req, timeout=timeout, engine="cisa_kev") as resp:
-            data = json.loads(resp.read().decode("utf-8", "replace"))
-    except Exception as e:
-        if isinstance(e, (json.JSONDecodeError, UnicodeDecodeError)):
-            note_failure("cisa_kev", "parse", "json_decode", str(e))
-        import logging
-        logging.getLogger("unified_search.engines").warning(f"CISA KEV 失败: {e}")
-        return cached or []
-    items = data.get("vulnerabilities") or []
-    if not isinstance(items, list):
-        return cached or []
-    _KEV_CACHE["items"] = items
-    _KEV_CACHE["at"] = now
-    if disk_p is not None and items:
-        try:
-            from argo_paths import atomic_write_json
-            atomic_write_json(disk_p, items)
-        except Exception:
-            pass
-    return items
-
-
-def _build_cisa_kev_engine(spec: dict[str, Any]) -> Any:
-    """CISA KEV 在野利用漏洞目录（本地过滤全量目录）。"""
-    timeout = spec.get("timeout", 30)
-
-    @safe_search
-    def _engine(query: str, n: int = 5, _timeout: float | None = None,
-                **kwargs) -> list[dict[str, Any]]:
-        to = _timeout or timeout
-        q = (query or "").strip()
-        if not q:
-            return []
-        items = _kev_load(to)
-        if not items:
-            return []
-        cve_q = q.upper() if re.match(r"^CVE-\d{4}-\d{4,}$", q.strip(), re.I) else ""
-        matched = []
-        for v in items:
-            if not isinstance(v, dict):
-                continue
-            if cve_q:
-                if str(v.get("cveID") or "").strip().upper() == cve_q:
-                    matched.append(v)
-                continue
-            terms = [t for t in re.split(r"[\s,]+", q.lower()) if t]
-            hay = " ".join(str(v.get(k) or "") for k in (
-                "cveID", "vendorProject", "product", "vulnerabilityName",
-                "shortDescription", "requiredAction", "cwes")).lower()
-            if all(t in hay for t in terms):
-                matched.append(v)
-        matched.sort(key=lambda x: str(x.get("dateAdded") or ""), reverse=True)
-        results = []
-        for i, v in enumerate(matched[:n]):
-            cve = str(v.get("cveID") or "").strip()
-            if not cve:
-                continue
-            vendor = str(v.get("vendorProject") or "").strip()
-            product = str(v.get("product") or "").strip()
-            name = str(v.get("vulnerabilityName") or "").strip()
-            desc = str(v.get("shortDescription") or "").strip()
-            due = str(v.get("dueDate") or "").strip()
-            ransom = str(v.get("knownRansomwareCampaignUse") or "").strip()
-            bits = [b for b in (
-                f"{vendor} {product}".strip(),
-                f"修复期限 {due}" if due else "",
-                "已知勒索软件利用" if ransom.lower() == "known" else "",
-                desc,
-            ) if b]
-            results.append({
-                "title": f"{cve} — {name or product or vendor}"[:500],
-                "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
-                "snippet": " · ".join(bits)[:300],
-                "source": "cisa_kev",
-                "published_at": str(v.get("dateAdded") or "")[:10],
-                "score": rank_score(0.9, i),
-            })
-        return results
-    return _engine
-
-
-# ── 引擎声明（本地个性化配置，不提交公开仓库）────────────────────────────────
-#
-# 字段与原 engines/specs/osv.yaml、engines/specs/cisa_kev.yaml 逐项对齐——
-# 那两个声明已加 _ 前缀改名停用（公开仓每次启动刷两行「未知引擎类型」warning），
-# 元数据随之并入本文件，本机路由行为（explicit_only / family / priority / qps
-# 等）与改名前完全一致。
-
-_LOCAL_ENGINE_SPECS: dict[str, dict[str, Any]] = {
-    "osv": {
-        "type": "osv",
-        "enabled": True,
-        "explicit_only": True,
-        "cost_tier": "free",
-        "label": "OSV 开源漏洞库",
-        "family": "security",
-        "priority": 44,
-        "qps": 2,
-        "period": "second",
-        "cost_per_call": 0.0,
-        "cost_unit": "free",
-        "method": "POST",
-        "url": "https://api.osv.dev/v1/query",
-        "timeout": 15,
-        "canary_query": "requests",
-        "desc": "OSV.dev 开源软件漏洞库（按包查已知漏洞与影响版本区间，免 key；生态 PyPI/npm/Go/crates 等）",
-        "description": "OSV.dev 开源漏洞查询（按包名）",
-        "coverage": ["security", "package"],
-        "recommended": False,
-        "latency_ms": 1500,
-        "headers": {"Content-Type": "application/json"},
-        "quality_queries": [
-            {"query": "requests"},
-            {"query": "lodash"},
-            {"query": "log4j-core"},
-        ],
-    },
-    "cisa_kev": {
-        "type": "cisa_kev",
-        "enabled": True,
-        "explicit_only": True,
-        "cost_tier": "free",
-        "label": "CISA KEV 在野利用漏洞",
-        "family": "security",
-        "priority": 47,
-        "qps": 1,
-        "period": "second",
-        "cost_per_call": 0.0,
-        "cost_unit": "free",
-        "timeout": 30,
-        "canary_query": "chrome",
-        "desc": "CISA 已知被在野利用漏洞目录（官方确认已被实际攻击利用的 CVE；全量 1.35MB 本地过滤）",
-        "description": "CISA KEV 在野利用漏洞目录",
-        "coverage": ["security"],
-        "recommended": False,
-        "latency_ms": 4000,
-        "quality_queries": [
-            {"query": "chrome"},
-            {"query": "CVE-2021-44228"},
-        ],
-    },
-}
-
-
-def register(builders: dict[str, Any], engine_specs: dict[str, Any]) -> None:
-    """将本地引擎注册到全局 builders 和 engine_specs 中。
-
-    在 engines.py 的 _load_registry() 中、构建 registry 之前调用。
-    文件不存在时 engines.py 跳过 import，不影响公开仓库。
-    外置 spec（engines/specs/*.yaml）已有的字段保留，不抹除 explicit_only/family 等元数据。
-    """
-    builders["osv"] = _build_osv_engine
-    builders["cisa_kev"] = _build_cisa_kev_engine
-    for name, spec in _LOCAL_ENGINE_SPECS.items():
-        base = dict(engine_specs.get(name) or {})
-        for k, v in spec.items():
-            base.setdefault(k, v)
-        engine_specs[name] = base

package/sub-skills/ego-search/references/browser-runtime.md

@@ -1,43 +0,0 @@
-# ego-search 浏览器运行时参考（低频：复杂交互才需要）
-
-
-## 直接浏览器操作
-
-复杂交互路径用浏览器运行时命令 `ego-browser nodejs` heredoc 直接编排（本子技能继承完整
-运行时）。核心纪律：
-
-```bash
-ego-browser nodejs <<'EOF'
-// 同名任务空间跨轮次复用；同一用户目标不新建空间
-const task = await useOrCreateTaskSpace('竞品调研')
-await openOrReuseTab('https://example.com', { wait: true, timeout: 20 })
-cliLog(await snapshotText())   // 语义快照，带 [ref=N, loc=..., url=...]
-EOF
-```
-
-**Helpers 速查**：
-
-- 任务空间：`useOrCreateTaskSpace` / `listTaskSpaces` / `claimTaskSpace` / `handOffTaskSpace` / `takeOverTaskSpace` / `completeTaskSpace`
-- 导航：`openOrReuseTab` / `gotoAndWait` / `pageInfo` / `listTabs` / `switchTab`
-- 观察：`snapshotText` / `captureScreenshot` / `drainEvents`
-- 动作：`click` / `fillInput` / `typeText` / `pressKey` / `scrollToBottomUntil` / `hover` / `uploadFile`
-- 等待：`wait` / `waitForElement` / `waitForNetworkIdle`
-- 提取：`js`（页面内 JS）/ `cdp`（浏览器协议）
-- 输出：`cliLog`（唯一输出通道；`-e` 模式下输出到 stderr）
-
-**关键纪律**：
-
-1. **任务空间隔离 + 登录态继承**：Agent 在独立空间操作，不抢用户标签页；登录态默认继承，可访问已登录站点。
-2. **跨轮次复用**：Node 运行时每次 heredoc 退出即释放，后续轮次用 `useOrCreateTaskSpace(同名)` 或
-   `takeOverTaskSpace`（用户确认继续后）恢复。
-3. **归属权**：用户接管空间时（"user is controlling"）是硬停——问用户并等待，不重试不抢回；
-   `handOffTaskSpace` 交还用户后，只有用户明确确认（Ask 的 Continue）才 `takeOverTaskSpace`。
-4. **收尾**：任务完成必须 `completeTaskSpace(name, { keep: false })` 关掉空间；
-   仅当用户明确要求保留页面/需人工操作/结果无法用 URL 交付时才 `{ keep: true }`。
-5. **`js()` 用法**：页面内逻辑包成单个 IIFE 一次返回；`js()` 返回求值结果而非 JSON 字符串，
-   不要包 `JSON.parse`；模板字符串里正则反斜杠要双写或 `String.raw`。
-6. **输出通道**：heredoc 模式 `cliLog` 输出到 stdout；`ego-browser nodejs -e "..."` 模式输出到 **stderr**。
-
-**三种工作流**：普通 DOM 页用语义流（`snapshotText` + `@N`/`loc=` 引用）；canvas/富编辑器
-（Google Docs/Notion/Figma 等）用视觉流（截图 + 坐标 + 键盘）；需要浏览器态/紧凑数据提取用
-直接 DOM/CDP 流（`js`/`cdp`）。

package/sub-skills/ego-search/references/install.md

@@ -1,67 +0,0 @@
-# Install ego lite
-
-Read this file only when ego lite isn't installed yet, or when the user asks to install ego lite. For day-to-day browser work, go back to `SKILL.md`.
-
-The ego-browser skill depends on the ego lite browser: the `ego-browser` command is provided by the ego lite app. Once ego lite is installed and you've gone through onboarding once, the environment is ready and there are no further environment issues.
-
-ego lite website: https://lite.ego.app/
-
-## Install steps (macOS only)
-
-The install script lives at `scripts/install.sh` in this skill and supports macOS only. It will:
-
-- Download the ego lite installer (a DMG) for your CPU architecture (arm64 / x64).
-- Install `ego lite.app` to `/Applications` (falling back to `~/Applications` when needed).
-- Strip the quarantine attribute to keep Gatekeeper from blocking the first launch.
-- After installing, launch the `ego lite` app.
-
-Run the script (use the script's actual path under this skill's directory):
-
-```bash
-sh skills/ego-browser/scripts/install.sh
-```
-
-After installing, the script opens the ego lite app directly. If ego lite is already installed, the script skips the download and opens the app directly.
-
-After the script opens the ego lite app, the user completes the first-run onboarding in the app:
-
-- Choose to import data from Chrome or another browser as needed.
-- Onboarding registers the `ego-browser` command on the PATH (usually under `~/.local/bin`).
-
-Onboarding is a step the user completes in the GUI. After the script opens ego lite, wait for the user to confirm they've finished onboarding before continuing.
-
-## After installing: confirm `ego-browser` is available
-
-Once the user has finished onboarding, confirm the command is ready:
-
-```bash
-command -v ego-browser
-```
-
-If it reports that the command isn't found, `~/.local/bin` is most likely not on the current PATH. Fix it temporarily and retry:
-
-```bash
-export PATH="$HOME/.local/bin:$PATH"
-command -v ego-browser
-```
-
-Once the command exists, verify the runtime with a minimal heredoc:
-
-```bash
-ego-browser nodejs <<'EOF'
-cliLog('ego-browser ready')
-EOF
-```
-
-Printing `ego-browser ready` means the environment is ready.
-
-## After that, return to the original task
-
-Once the environment is ready, return to the user's original task and continue with the task space flow in `SKILL.md` — start from `useOrCreateTaskSpace(name)` and proceed as usual.
-
-## Troubleshooting
-
-- **Not macOS**: the script supports macOS only (`uname -s` is `Darwin`). On other platforms, have the user download and install from the ego lite website at https://lite.ego.app/.
-- **Download failed**: the script retries 3 times automatically; if it still fails, it's usually a network issue — have the user check their network and retry.
-- **Gatekeeper still blocks it**: the script already tries to strip quarantine; if the first launch is still blocked, have the user allow ego lite manually under System Settings → Privacy & Security.
-- **Command still unavailable after onboarding**: confirm `~/.local/bin` is on the PATH (see above); or have the user reopen ego lite, finish onboarding, and retry.

package/sub-skills/ego-search/references/original-ego-upgrade.md

@@ -1,51 +0,0 @@
-# 原版 ego 技能升级要点（与本子技能配套）
-
-原版 `ego-browser` skill 仍是**通用浏览器自动化**真源；本文件只补「与登录态专业搜索完全态」对齐的用法，不替换原版 SKILL 正文。
-
-## 与 ego-search 分工
-
-| 场景 | 用谁 |
-|------|------|
-| 搜 SERP / 抓正文 / 已知 API / 登录墙取证 | **ego-search**（双运行时 auto） |
-| 复杂点选、填表、多步、截图工作流 | **原版 ego-browser** heredoc |
-| 无 ego App、只有用户 Chrome | **ego-search --runtime webbridge** |
-
-## 建议启用但常被忽略的能力
-
-在 `ego-browser nodejs` 中（打开目标站后）：
-
-```js
-// 站点经验包（若该站有 learnings）
-const ctx = await learnContext()
-cliLog(JSON.stringify(ctx))
-// 例如 google 搜索抽取（以实际 manifest 为准）
-// await runSiteTool('google', 'search_and_extract', { query: '...' })
-```
-
-站点包通常在应用内 `learnings/`（google / x-com / github 等）。
-
-## 输出建议（与隔离/融合对齐）
-
-原版 heredoc 若产出可并入分析的结果，请在 `cliLog` 的 JSON 中尽量带：
-
-```json
-{
-  "login_state_used": true,
-  "auth_partition": "login",
-  "cache_eligible": false,
-  "search_partition": "login",
-  "merge_with_public_ok": true,
-  "runtime": "ego",
-  "source": "ego-browser"
-}
-```
-
-勿把登录态 body 写入 argo 公共 `SearchCache`。
-
-## 探测
-
-```bash
-python3 sub-skills/ego-search/scripts/ego_search.py status
-```
-
-`runtimes.preferred` / `login_search_ready` 表示登录态专业搜索是否可跑。

package/sub-skills/ego-search/tests/test_query_normalize.py

@@ -1,68 +0,0 @@
-#!/usr/bin/env python3
-"""ego-search query 归一化前处理单测（保持一致 argo 核心 query_enhance）
-
-设计约束：
-  - 只做词形规范化（全角→半角、拆斜杠、压空格）
-  - 必须保留平台结构化语法（from:/site:/filter: …）——ego 是站内通道，剥语法会丢能力
-  - 核心 query_enhance 不可用时降级为原 query（不破坏）
-
-运行：
-  cd ~/.agents/skills/argo
-  python3 -m pytest sub-skills/ego-search/tests/test_query_normalize.py -q
-"""
-
-from __future__ import annotations
-
-import sys
-import unittest
-from pathlib import Path
-
-SCRIPTS = Path(__file__).resolve().parent.parent / "scripts"
-sys.path.insert(0, str(SCRIPTS))
-
-import ego_search as es  # noqa: E402
-
-
-class TestQueryNormalize(unittest.TestCase):
-    def test_full_width_to_half(self):
-        self.assertEqual(es._normalized_query("“GPT-5”，价格"), '"GPT-5",价格')
-
-    def test_slash_split(self):
-        self.assertEqual(es._normalized_query("LongCat-2.0/1.6 万亿"), "LongCat-2.0 1.6 万亿")
-
-    def test_keep_platform_syntax(self):
-        self.assertEqual(
-            es._normalized_query('from:OpenAI "GPT-5" filter:images'),
-            'from:OpenAI "GPT-5" filter:images',
-        )
-
-    def test_plain_unchanged(self):
-        self.assertEqual(es._normalized_query("openai api"), "openai api")
-
-    def test_plain_slash_not_split(self):
-        # 核心规则：只拆「点号版本」斜杠（LongCat-2.0/1.6），普通斜杠可能是
-        # 路径/日期/分数，必须原样保留。本测试曾检查 "a/b c" → "a b c"，
-        # 是旧实现（全斜杠拆分）的遗留，与核心 normalize_query 矛盾，
-        # 且子技能测试不在主检查收集范围，红了一年没人看见。
-        self.assertEqual(es._normalized_query("a/b c"), "a/b c")
-
-    def test_import_fallback(self):
-        # normalize_query 缺失时应回退原 query（真正模拟核心不可用）
-        orig = es.normalize_query
-        try:
-            es.normalize_query = None
-            self.assertEqual(es._normalized_query("a/b c"), "a/b c")
-            self.assertEqual(es._normalized_query("LongCat-2.0/1.6"), "LongCat-2.0/1.6")
-        finally:
-            es.normalize_query = orig
-
-    def test_core_scripts_path_is_argo_root(self):
-        # 回归锚：相对路径必须指向 argo 根/scripts（parents[3]）。
-        # 曾用 parents[2] 指向 sub-skills/scripts（不存在）→ normalize_query
-        # 静默降级为 None，子技能归一化整条失效。
-        self.assertTrue(es._CORE_SCRIPTS.exists(), es._CORE_SCRIPTS)
-        self.assertEqual(es._CORE_SCRIPTS.name, "scripts")
-
-
-if __name__ == "__main__":
-    unittest.main()

package/sub-skills/js-run/tests/fixtures/challenge_like.js

@@ -1,27 +0,0 @@
-// challenge_like.js — 金标考卷 #1：挑战页形态的 JS（离线可复跑）
-// 形态参照真实反爬挑战脚本的三段式：环境探测 → 字符串运算 → 发通行证。
-// 只用 v0 垫片保证过的面：navigator/screen/btoa/document.cookie/定时器。
-(function () {
-  var probe = [
-    navigator.userAgent.length,
-    navigator.platform,
-    navigator.language,
-    screen.width * screen.height,
-    navigator.hardwareConcurrency,
-    Number(!navigator.webdriver),
-  ].join("|");
-
-  // 字符串运算（模拟混淆层的算子链）
-  var salt = "";
-  for (var i = 0; i < probe.length; i += 7) salt += String.fromCharCode(probe.charCodeAt(i) ^ 0x1f);
-  var token = btoa(salt + "|" + probe.length);
-
-  // 定时器：真浏览器里等 3 秒才发 cookie；逻辑时间下瞬间完成
-  var issued = false;
-  setTimeout(function () {
-    document.cookie = "__jsl_clearance=" + token + "; path=/";
-    issued = true;
-  }, 3000);
-
-  return { probe: probe, token: token, issued: issued };
-})();