last30days: lazy-load vendored Bird cookie support

tests/test_bird_x.py

@@ -1,3 +1,7 @@
+import json
+import os
+import shutil
+import subprocess
 import sys
 import unittest
 from pathlib import Path
@@ -7,6 +11,10 @@ sys.path.insert(0, str(Path(__file__).resolve().parents[1] / "scripts"))
 from lib.bird_x import parse_bird_response
 
 
+REPO_ROOT = Path(__file__).resolve().parents[1]
+VENDORED_BIRD = REPO_ROOT / "scripts" / "lib" / "vendor" / "bird-search" / "bird-search.mjs"
+
+
 class TestBirdXEngagementZero(unittest.TestCase):
     def test_zero_likes_preserved(self):
         tweets = [
@@ -22,6 +30,49 @@ class TestBirdXEngagementZero(unittest.TestCase):
         self.assertEqual(0, items[0]["engagement"]["likes"])
         self.assertEqual(5, items[0]["engagement"]["reposts"])
 
+
+@unittest.skipUnless(shutil.which("node"), "node is required for vendored Bird tests")
+class TestVendoredBirdRuntime(unittest.TestCase):
+    def test_check_uses_env_credentials_without_browser_cookie_dependency(self):
+        env = os.environ.copy()
+        env["AUTH_TOKEN"] = "dummy-auth"
+        env["CT0"] = "dummy-ct0"
+
+        result = subprocess.run(
+            ["node", str(VENDORED_BIRD), "--check"],
+            cwd=REPO_ROOT,
+            env=env,
+            capture_output=True,
+            text=True,
+            check=False,
+        )
+
+        self.assertEqual(0, result.returncode, result.stderr)
+        payload = json.loads(result.stdout)
+        self.assertTrue(payload["authenticated"])
+        self.assertEqual("env AUTH_TOKEN", payload["source"])
+
+    def test_check_with_browser_lookup_disabled_returns_json_warnings(self):
+        env = os.environ.copy()
+        env.pop("AUTH_TOKEN", None)
+        env.pop("CT0", None)
+        env["BIRD_DISABLE_BROWSER_COOKIES"] = "1"
+
+        result = subprocess.run(
+            ["node", str(VENDORED_BIRD), "--check"],
+            cwd=REPO_ROOT,
+            env=env,
+            capture_output=True,
+            text=True,
+            check=False,
+        )
+
+        self.assertEqual(1, result.returncode, result.stderr)
+        payload = json.loads(result.stdout)
+        self.assertFalse(payload["authenticated"])
+        self.assertTrue(payload["warnings"])
+        self.assertIn("Missing auth_token", " ".join(payload["warnings"]))
+
     def test_none_likes_when_missing(self):
         tweets = [
             {