docs: classify architecture inventory and refresh guidance

tests/LAYOUT_INVENTORY.md

@@ -1,202 +1,152 @@
-# Test Layout Inventory
+# Test layout inventory
+
+> [!NOTE]
+> This document is a completed implementation snapshot for the first low-risk
+> test-directory reorganization. It does not propose additional file moves and
+> is not the canonical definition of the current test taxonomy.
+
+- **Original inventory:** #3712
+- **Parent tracker:** #2523
+- **Implemented by:** #3842
+- **Status:** completed historical snapshot
 
 ## Purpose
 
-Inventory for the first low-risk split of the flat `tests/` directory
-(issue #3712, parent #2523). This document only records *what* should move
-first and *why*; it moves nothing. The actual move is a separate, mechanical
-PR that relocates the listed files verbatim and changes no test content.
+This document preserves the reasoning, scope, and validation contract for the
+first mechanical reorganization of the formerly flat `tests/` directory.
 
-The target layout and category definitions come from
-[`TESTING_STANDARD.md`](./TESTING_STANDARD.md); the collection-time markers
-come from [`_taxonomy.py`](./_taxonomy.py), which classifies by **filename
-tokens only** (paths are ignored, except the `tests/helpers/` rule). A file
-keeps its `area_*`/`sub_*` markers when moved into a subdirectory, and
-`conftest.py` discovers marker names recursively (`rglob`), so a move does not
-disturb marker registration or focused selection.
+The original change moved 28 tests classified as `area_cli` into `tests/cli/`
+without changing their assertions, helpers, taxonomy, or runtime behaviour.
 
-## Current low-risk candidate groups
+Current testing guidance and classification rules are maintained in:
 
-Groups whose tests need no route/app setup and no real DB/session setup:
+- [`README.md`](./README.md)
+- [`TESTING_STANDARD.md`](./TESTING_STANDARD.md)
+- [`_taxonomy.py`](./_taxonomy.py)
 
-1. **CLI / script tests** (`area_cli`, 28 files) - load `scripts/` entry
-   points via `tests.helpers.cli_loader.load_script`; DB access is stubbed
-   with `tests.helpers.db_stubs` (`SessionLocal` is a plain stub attribute).
-   No `TestClient`, no FastAPI app import, no SQLite files.
-2. **Helper self-tests** (`area_helpers`) - e.g. `test_helpers_import_state.py`,
-   `test_db_stubs_helper.py`. Safe but tiny (two files), and they test the
-   shared helpers from the #3685 audit (merged) that the rest of the suite
-   depends on; little payoff as a first slice.
-3. **Pure unit / parsing tests** (`area_unit`) - `*_nonstring.py`,
-   `*_nondict.py`, parsing tests. Large and heterogeneous; some touch
-   provider/session modules, so the boundary is less crisp.
-4. **Static checks** - e.g. `test_readme_ascii_fenced.py`,
-   `test_docs_no_orphan_images.py`. Safe but tiny and `uncategorized` in the
-   taxonomy, so a move buys little and matches no existing marker.
+The current repository and test suite remain authoritative when this snapshot
+and the implementation differ.
 
-Not candidates for the first move (per #3712 guidance): security/owner-scope
-tests, route/API tests, DB/session-heavy tests, auth/session concurrency
-tests, and the taxonomy/runner infrastructure tests that changed recently
-(#3491, #3556, #3659, #3711).
+## Why CLI tests were selected
 
-## Recommended first move
+The CLI and script tests were selected as the first low-risk group because they
+formed a narrow, mechanically identifiable boundary:
 
-**CLI / script tests → `tests/cli/`**
+- script entry points were loaded through shared CLI helpers;
+- database access used controlled stubs rather than persistent sessions;
+- the tests did not require FastAPI application or route setup;
+- the tests did not require a real database;
+- taxonomy classification could be derived consistently from filenames;
+- absolute helper imports remained valid after relocation.
 
-Why this group over the alternatives:
+This reduced the risk relative to route, security, session, provider, and
+heterogeneous unit-test groups.
 
-- Lowest coupling: every file imports only the script under test (via
-  `cli_loader`) plus `tests.helpers` stubs - no app, no routes, no real DB.
-- Crisp, machine-checkable boundary: the set is exactly the files classified
-  `area_cli` by `_taxonomy.py`, so before/after selection counts can be
-  compared mechanically.
-- Already the planned target dir for this category in `TESTING_STANDARD.md`
-  (`tests/cli/`).
-- Absolute imports (`from tests.helpers...`) and unique basenames mean no
-  import-order or module-name collisions after the move.
-- Lower risk than helper self-tests (tiny group, little payoff), unit tests
-  (fuzzy boundary), or anything security/route/session-shaped.
+## Completed implementation
 
-## Files included in the first move
+Repository history records the implementation as:
 
-The 28 files classified `area_cli` (verified against `_taxonomy.py`):
+- `83af3ca test: move area_cli tests into cli directory (#3842)`
 
-Note: this inventory was refreshed against current `dev` after `tests/test_research_cli_status.py` was added to the `area_cli` set.
+The following 28 files were included in that completed move:
 
-- `tests/test_calendar_cli_name.py`
-- `tests/test_contacts_cli_rows.py`
-- `tests/test_cookbook_cli_state.py`
-- `tests/test_docs_cli_content_length.py`
-- `tests/test_gallery_cli_album_count.py`
-- `tests/test_gallery_cli_preview.py`
-- `tests/test_logs_cli_resolve_nonstring.py`
-- `tests/test_mail_cli_read_empty_fetch.py`
-- `tests/test_mail_cli_recipients.py`
-- `tests/test_mcp_cli_env_serialize.py`
-- `tests/test_mcp_cli_json.py`
-- `tests/test_memory_cli_rows.py`
-- `tests/test_notes_cli_items.py`
-- `tests/test_personal_cli_rows.py`
-- `tests/test_preset_cli_invalid_entries.py`
-- `tests/test_preset_cli_set_corrupt_entry.py`
-- `tests/test_preset_cli_store.py`
-- `tests/test_research_cli_preview.py`
-- `tests/test_research_cli_status_filter.py`
-- `tests/test_research_cli_status.py`
-- `tests/test_research_cli_store.py`
-- `tests/test_sessions_cli.py`
-- `tests/test_signature_cli_export.py`
-- `tests/test_skills_cli_preview.py`
-- `tests/test_skills_cli_rows.py`
-- `tests/test_tasks_cli_preview.py`
-- `tests/test_theme_cli_store.py`
-- `tests/test_webhook_cli_mask.py`
+- `tests/cli/test_calendar_cli_name.py`
+- `tests/cli/test_contacts_cli_rows.py`
+- `tests/cli/test_cookbook_cli_state.py`
+- `tests/cli/test_docs_cli_content_length.py`
+- `tests/cli/test_gallery_cli_album_count.py`
+- `tests/cli/test_gallery_cli_preview.py`
+- `tests/cli/test_logs_cli_resolve_nonstring.py`
+- `tests/cli/test_mail_cli_read_empty_fetch.py`
+- `tests/cli/test_mail_cli_recipients.py`
+- `tests/cli/test_mcp_cli_env_serialize.py`
+- `tests/cli/test_mcp_cli_json.py`
+- `tests/cli/test_memory_cli_rows.py`
+- `tests/cli/test_notes_cli_items.py`
+- `tests/cli/test_personal_cli_rows.py`
+- `tests/cli/test_preset_cli_invalid_entries.py`
+- `tests/cli/test_preset_cli_set_corrupt_entry.py`
+- `tests/cli/test_preset_cli_store.py`
+- `tests/cli/test_research_cli_preview.py`
+- `tests/cli/test_research_cli_status.py`
+- `tests/cli/test_research_cli_status_filter.py`
+- `tests/cli/test_research_cli_store.py`
+- `tests/cli/test_sessions_cli.py`
+- `tests/cli/test_signature_cli_export.py`
+- `tests/cli/test_skills_cli_preview.py`
+- `tests/cli/test_skills_cli_rows.py`
+- `tests/cli/test_tasks_cli_preview.py`
+- `tests/cli/test_theme_cli_store.py`
+- `tests/cli/test_webhook_cli_mask.py`
 
-## Files intentionally excluded
+## Original exclusions
 
-- `tests/test_backup_cli_security.py` - classifies as `area_security`
-  (security outranks cli in the taxonomy); moving it into `tests/cli/` would
-  make the directory disagree with its marker. It belongs with the security
-  group in a later phase.
-- `tests/test_run_focus.py`, `tests/test_taxonomy.py` - taxonomy/runner
-  infrastructure tests, recently changed (#3556, #3659); they also pin
-  flat-layout paths (e.g. `tests/test_auth_config_lock_concurrency.py` in
-  `test_run_focus.py`), so they stay put.
-- Script-like but `uncategorized` files - `test_pr_blocker_audit.py`,
-  `test_update_database_script.py`, `test_windows_update_script.py`,
-  `test_setup_admin_user.py`, `test_amd_gpu_check_args.py`, `test_hwfit_*.py`.
-  They exercise `scripts/` too, but moving them would make `tests/cli/`
-  diverge from the `area_cli` marker set. Reclassify or move them in a later,
-  separate slice.
-- Everything else (security, routes, services, unit, js, helpers) - out of
-  scope for the first move by design.
+The original inventory deliberately excluded:
 
-## How this was verified
+- `tests/test_backup_cli_security.py`, because its security classification
+  outranked the CLI token in its filename;
+- taxonomy and focused-runner infrastructure, including
+  `tests/test_taxonomy.py` and `tests/test_run_focus.py`;
+- script-oriented tests not classified as `area_cli`;
+- route, service, security, session, JavaScript, helper, and broad unit-test
+  groups.
 
-Read-only checks, run from the repo root on this branch. Note the real API is
-`classify_test_path` (there is no `classify_test_file`).
+These exclusions kept the implementation mechanical and prevented it from
+mixing taxonomy changes, assertion changes, helper extraction, or unrelated
+test-suite restructuring.
+
+## Current repository observation
+
+The current taxonomy classifies 30 files as `area_cli`:
+
+| Location | Files |
+|---|---:|
+| `tests/cli/` | 28 |
+| Flat `tests/` directory | 2 |
+
+The two currently classified CLI tests outside `tests/cli/` are:
+
+- `tests/test_calendar_cli_overlap.py`
+- `tests/test_memory_cli_add_nondict.py`
+
+These files were not part of the original 28-file implementation.
+
+Their presence is recorded solely to keep this snapshot accurate. This
+documentation update does not recommend moving them, changing their taxonomy,
+or opening implementation work. Any future test-layout change requires separate
+maintainer agreement, scope, and validation.
+
+## Validation contract preserved by the original move
+
+The completed implementation was designed to preserve:
+
+- identical `area_cli` selection before and after relocation;
+- successful direct execution of the relocated tests;
+- successful whole-suite collection;
+- unchanged taxonomy and focused-runner behaviour;
+- no stale references to the former flat paths;
+- no production-code changes.
+
+Relevant current verification commands include:
 
 ```bash
-# Compute the area_cli set and confirm test_backup_cli_security.py is
-# area_security. Expected: 28 files, then "security".
-./venv/bin/python - <<'PY'
-from pathlib import Path
-from tests._taxonomy import classify_test_path
-
-cli = [p for p in sorted(Path("tests").glob("test_*.py"))
-       if classify_test_path(p).area == "cli"]
-print(len(cli))
-for p in cli:
-    print(p)
-print(classify_test_path("tests/test_backup_cli_security.py").area)
-PY
-
-# Coupling check across the CLI files. Expected: the only hits are
-# "SessionLocal" as stub attribute names passed to tests.helpers.db_stubs;
-# no TestClient, FastAPI, create_app, sqlite, or dependency_overrides.
-rg -n "TestClient|FastAPI|create_app|SessionLocal|sqlite|dependency_overrides" \
-  tests/test_*cli*.py tests/test_sessions_cli.py
-
-# Hard-coded flat paths to the exact CLI files outside tests/. Expected: no matches.
-./venv/bin/python - <<'PY2' > /tmp/area_cli_paths.txt
-from pathlib import Path
-from tests._taxonomy import classify_test_path
-
-for path in sorted(Path("tests").glob("test_*.py")):
-    if classify_test_path(path).area == "cli":
-        print(path)
-PY2
-
-rg -n -F -f /tmp/area_cli_paths.txt .github scripts docs \
-  tests/README.md tests/TESTING_STANDARD.md pyproject.toml 2>/dev/null || true
+venv/bin/python tests/run_focus.py --dry-run --area cli
+venv/bin/python -m pytest -m area_cli -q
+venv/bin/python -m pytest tests/cli/ -q
+venv/bin/python -m pytest tests/test_taxonomy.py tests/test_run_focus.py -q
+venv/bin/python -m pytest --collect-only -q
 ```
 
-Also checked by reading the code: `tests/conftest.py` registers sub-markers
-from a recursive `rglob` scan, and `tests/_taxonomy.py` classifies by filename
-tokens only (plus the `tests/helpers/` directory rule), so the markers of the
-28 files do not change when they move into `tests/cli/`.
-
-## Validation for the future move PR
-
-Run with the project venv (`./venv/bin/python`); system `python3` may miss
-pinned deps. Before the move, record the baseline; after, compare:
-
-```bash
-# Selection must match the 28 files before and after the move.
-./venv/bin/python tests/run_focus.py --dry-run --area cli
-./venv/bin/python -m pytest -m area_cli -q
-
-# Moved files pass when targeted directly.
-./venv/bin/python -m pytest tests/cli/ -q
-
-# Whole-suite collection still succeeds (catches import/path breakage).
-./venv/bin/python -m pytest --collect-only -q
-
-# Taxonomy/runner infrastructure is unaffected.
-./venv/bin/python -m pytest tests/test_taxonomy.py tests/test_run_focus.py -q
-
-# No stale flat-path references to the moved files. Expected: no matches
-# outside tests/cli/ itself.
-./venv/bin/python - <<'PY2' > /tmp/area_cli_paths.txt
-from pathlib import Path
-from tests._taxonomy import classify_test_path
-
-for path in sorted(Path("tests").glob("test_*.py")):
-    if classify_test_path(path).area == "cli":
-        print(path)
-PY2
-
-rg -n -F -f /tmp/area_cli_paths.txt .github scripts docs \
-  tests/README.md tests/TESTING_STANDARD.md pyproject.toml 2>/dev/null || true
-```
-
-Pass criteria: identical test counts for `-m area_cli` before/after, zero
-collection errors, and no changes outside the moved files.
+These commands describe validation coverage. This snapshot does not claim that
+they were executed as part of the present documentation update.
 
 ## Non-goals
 
-- No file moves, renames, or deletions in this PR.
-- No changes to `conftest.py`, `_taxonomy.py`, `run_focus.py`, helpers,
-  markers, CI workflows, or production code.
-- No recommendation to split the whole suite at once; later groups get their
-  own inventory-then-move slices.
+This document does not:
+
+- propose moving or renaming tests;
+- redefine taxonomy classifications;
+- change test behaviour or assertions;
+- prescribe the next test-suite refactor;
+- replace the testing standard;
+- create implementation work from the two current residual files.

tests/OVERSIZED_TEST_SPLIT_PLAN.md

@@ -1,5 +1,9 @@
 # Oversized Test File Split Plan
 
+> [!NOTE]
+> This is generated planning material based on the current test tree.
+> It does not define runtime behaviour or approve any test-file split.
+
 ## Purpose
 
 This document plans future oversized test-file splits using current repo data.
@@ -26,8 +30,8 @@ Future split PRs must still inspect each file manually before editing.
 
 ## Current summary
 
-- test files scanned: 583
-- collected pytest items counted: 3586
+- test files scanned: 746
+- collected pytest items counted: 4764
 - large-file threshold: 300 lines
 - large-collected threshold: 20 collected items
 
@@ -35,123 +39,123 @@ Area distribution:
 
 | Value | Files |
 |---|---:|
-| cli | 28 |
+| cli | 30 |
 | helpers | 1 |
-| js | 39 |
-| routes | 23 |
-| security | 77 |
-| services | 144 |
-| uncategorized | 234 |
-| unit | 37 |
+| js | 49 |
+| routes | 35 |
+| security | 88 |
+| services | 197 |
+| uncategorized | 306 |
+| unit | 40 |
 
 Sub-area distribution:
 
 | Value | Files |
 |---|---:|
-| api | 6 |
+| api | 8 |
 | atomic | 3 |
-| auth | 9 |
-| calendar | 10 |
-| cli | 28 |
-| confinement | 7 |
-| cookbook | 13 |
-| document | 11 |
-| email | 12 |
-| embedding | 3 |
-| gallery | 5 |
+| auth | 11 |
+| calendar | 12 |
+| cli | 30 |
+| confinement | 8 |
+| cookbook | 20 |
+| document | 13 |
+| email | 23 |
+| embedding | 6 |
+| gallery | 6 |
 | history | 3 |
-| js | 39 |
-| llm | 16 |
-| mcp | 8 |
-| memory | 15 |
+| js | 49 |
+| llm | 21 |
+| mcp | 12 |
+| memory | 17 |
 | nondict | 7 |
-| nonstring | 22 |
-| owner | 14 |
-| owner_scope | 23 |
-| parse | 4 |
-| provider | 6 |
-| research | 16 |
+| nonstring | 23 |
+| owner | 15 |
+| owner_scope | 27 |
+| parse | 5 |
+| provider | 16 |
+| research | 17 |
 | route | 6 |
-| routes | 9 |
-| scheduler | 3 |
+| routes | 19 |
+| scheduler | 4 |
 | scope | 5 |
 | security | 9 |
-| session | 16 |
-| ssrf | 3 |
-| webhook | 3 |
+| session | 18 |
+| ssrf | 6 |
+| webhook | 4 |
 | xss | 5 |
 
-Values below 2 files: 244 values covering 244 files.
+Values below 2 files: 318 values covering 318 files.
 
 ## Top files by collected pytest items
 
 | File | Lines | Collected tests | Test defs | Test classes | Area | Sub-area | Signals |
 |---|---:|---:|---:|---:|---|---|---|
-| `tests/test_model_routes.py` | 1778 | 139 | 116 | 10 | routes | routes | route/api, db/session, import-state, async/threading |
-| `tests/test_security_regressions.py` | 1224 | 92 | 68 | 0 | security | security | route/api, db/session, import-state, security, filesystem, async/threading, ui/static |
-| `tests/test_provider_classification.py` | 188 | 67 | 21 | 4 | services | provider | - |
-| `tests/test_cookbook_helpers.py` | 912 | 65 | 65 | 0 | services | cookbook | route/api, filesystem, subprocess/script, async/threading, ui/static |
-| `tests/test_shell_routes.py` | 481 | 63 | 48 | 8 | routes | routes | route/api, import-state, filesystem |
+| `tests/test_model_routes.py` | 2099 | 163 | 134 | 10 | routes | routes | route/api, db/session, import-state, async/threading |
+| `tests/test_security_regressions.py` | 1515 | 98 | 74 | 0 | security | security | route/api, db/session, import-state, security, filesystem, async/threading, ui/static |
+| `tests/test_cookbook_helpers.py` | 958 | 69 | 69 | 0 | services | cookbook | route/api, filesystem, subprocess/script, async/threading, ui/static |
+| `tests/test_shell_routes.py` | 538 | 69 | 53 | 9 | routes | routes | route/api, import-state, filesystem |
+| `tests/test_endpoint_probing.py` | 497 | 61 | 36 | 7 | uncategorized | endpoint_probing | route/api, db/session, import-state |
 | `tests/test_pr_blocker_audit.py` | 964 | 58 | 58 | 0 | uncategorized | pr_blocker_audit | import-state, security, filesystem |
-| `tests/test_provider_endpoints.py` | 241 | 58 | 18 | 1 | services | provider | subprocess/script |
-| `tests/test_agent_loop.py` | 469 | 52 | 52 | 5 | uncategorized | agent_loop | db/session, import-state |
-| `tests/test_service_health.py` | 472 | 47 | 42 | 0 | uncategorized | service_health | async/threading |
-| `tests/test_run_focus.py` | 399 | 47 | 44 | 0 | uncategorized | run_focus | security, filesystem, subprocess/script, ui/static |
-| `tests/test_llm_core_temperature.py` | 196 | 41 | 17 | 0 | services | llm | - |
-| `tests/test_endpoint_probing.py` | 411 | 34 | 30 | 6 | uncategorized | endpoint_probing | route/api, db/session, import-state |
+| `tests/test_research_routes_path_confinement.py` | 565 | 58 | 26 | 0 | security | confinement | route/api, security, filesystem, async/threading |
+| `tests/test_run_focus.py` | 492 | 55 | 52 | 0 | uncategorized | run_focus | security, filesystem, subprocess/script, ui/static |
+| `tests/test_agent_loop.py` | 500 | 54 | 54 | 5 | uncategorized | agent_loop | db/session, import-state |
+| `tests/test_manage_mcp_command_allowlist.py` | 168 | 45 | 10 | 0 | services | mcp | db/session, subprocess/script, async/threading, ui/static |
+| `tests/test_provider_classification.py` | 115 | 42 | 9 | 2 | services | provider | - |
+| `tests/test_review_regressions.py` | 1429 | 41 | 41 | 0 | uncategorized | review_regressions | route/api, db/session, import-state, filesystem, async/threading |
+| `tests/test_chat_helpers.py` | 582 | 37 | 24 | 0 | uncategorized | chat_helpers | route/api, filesystem, async/threading |
+| `tests/test_model_context.py` | 314 | 36 | 34 | 4 | uncategorized | model_context | db/session, import-state |
+| `tests/test_email_oauth.py` | 798 | 34 | 29 | 0 | services | email | route/api, db/session, security, async/threading |
 | `tests/test_llm_core_anthropic_temp_omit.py` | 94 | 32 | 6 | 0 | services | llm | db/session |
-| `tests/test_chat_helpers.py` | 264 | 31 | 18 | 0 | uncategorized | chat_helpers | route/api |
-| `tests/test_provider_detection.py` | 148 | 31 | 31 | 5 | services | provider | - |
-| `tests/test_model_context.py` | 251 | 30 | 30 | 4 | uncategorized | model_context | db/session, import-state |
-| `tests/test_endpoint_resolver.py` | 148 | 30 | 30 | 6 | uncategorized | endpoint_resolver | - |
-| `tests/test_embedding_lanes.py` | 1104 | 29 | 29 | 0 | services | embedding | filesystem |
+| `tests/test_redos_verdict_continuation.py` | 80 | 30 | 5 | 0 | uncategorized | redos_verdict_continuation | route/api |
 | `tests/test_upload_limits_centralized.py` | 110 | 29 | 5 | 0 | uncategorized | upload_limits_centralized | import-state, filesystem |
-| `tests/test_email_oauth.py` | 580 | 28 | 25 | 0 | services | email | route/api, db/session, security, async/threading |
-| `tests/test_review_regressions.py` | 930 | 26 | 26 | 0 | uncategorized | review_regressions | route/api, db/session, import-state, filesystem, async/threading |
-| `tests/test_rename_user_owner_sync.py` | 686 | 26 | 26 | 0 | security | owner | route/api, db/session, import-state, filesystem, async/threading |
+| `tests/test_cookbook_docker_access.py` | 339 | 28 | 13 | 0 | services | cookbook | route/api, filesystem, async/threading |
+| `tests/test_rename_user_owner_sync.py` | 740 | 27 | 27 | 0 | security | owner | route/api, db/session, import-state, filesystem, async/threading |
+| `tests/test_taxonomy.py` | 151 | 27 | 17 | 0 | uncategorized | taxonomy | security, ui/static |
+| `tests/test_endpoint_resolver_urls.py` | 95 | 27 | 23 | 3 | uncategorized | endpoint_resolver_urls | - |
 | `tests/test_helpers_import_state.py` | 426 | 26 | 26 | 0 | helpers | helpers | route/api, db/session, import-state |
-| `tests/test_taxonomy.py` | 145 | 26 | 16 | 0 | uncategorized | taxonomy | security, ui/static |
-| `tests/test_tool_path_confinement.py` | 282 | 24 | 24 | 0 | security | confinement | import-state, filesystem, async/threading |
-| `tests/test_copilot.py` | 170 | 23 | 16 | 0 | uncategorized | copilot | - |
-| `tests/test_research_utils.py` | 97 | 23 | 23 | 2 | services | research | - |
-| `tests/test_api_chat_security.py` | 401 | 22 | 8 | 0 | security | security | route/api, db/session, import-state, filesystem, async/threading |
-| `tests/test_tool_support_heuristic.py` | 166 | 22 | 22 | 3 | uncategorized | tool_support_heuristic | - |
-| `tests/test_platform_compat.py` | 318 | 21 | 21 | 0 | uncategorized | platform_compat | import-state, filesystem, subprocess/script |
+| `tests/test_workspace_confine.py` | 527 | 25 | 25 | 0 | uncategorized | workspace_confine | route/api, filesystem, subprocess/script, async/threading |
+| `tests/test_chat_route_tool_policy.py` | 344 | 25 | 23 | 0 | routes | route | filesystem, ui/static |
+| `tests/test_tool_path_confinement.py` | 303 | 25 | 25 | 0 | security | confinement | import-state, filesystem, async/threading |
+| `tests/test_copilot.py` | 182 | 25 | 18 | 0 | uncategorized | copilot | - |
+| `tests/test_llm_core_temperature_reasoning.py` | 133 | 25 | 9 | 0 | services | llm | - |
+| `tests/test_provider_endpoints_url_building.py` | 86 | 25 | 3 | 0 | services | provider | - |
+| `tests/test_bg_job_tools.py` | 174 | 23 | 16 | 0 | uncategorized | bg_job_tools | filesystem, async/threading |
 
 ## Top files by physical line count
 
 | File | Lines | Collected tests | Test defs | Test classes | Area | Sub-area | Signals |
 |---|---:|---:|---:|---:|---|---|---|
-| `tests/test_model_routes.py` | 1778 | 139 | 116 | 10 | routes | routes | route/api, db/session, import-state, async/threading |
-| `tests/test_security_regressions.py` | 1224 | 92 | 68 | 0 | security | security | route/api, db/session, import-state, security, filesystem, async/threading, ui/static |
-| `tests/test_embedding_lanes.py` | 1104 | 29 | 29 | 0 | services | embedding | filesystem |
+| `tests/test_model_routes.py` | 2099 | 163 | 134 | 10 | routes | routes | route/api, db/session, import-state, async/threading |
+| `tests/test_security_regressions.py` | 1515 | 98 | 74 | 0 | security | security | route/api, db/session, import-state, security, filesystem, async/threading, ui/static |
+| `tests/test_review_regressions.py` | 1429 | 41 | 41 | 0 | uncategorized | review_regressions | route/api, db/session, import-state, filesystem, async/threading |
 | `tests/test_pr_blocker_audit.py` | 964 | 58 | 58 | 0 | uncategorized | pr_blocker_audit | import-state, security, filesystem |
-| `tests/test_review_regressions.py` | 930 | 26 | 26 | 0 | uncategorized | review_regressions | route/api, db/session, import-state, filesystem, async/threading |
-| `tests/test_cookbook_helpers.py` | 912 | 65 | 65 | 0 | services | cookbook | route/api, filesystem, subprocess/script, async/threading, ui/static |
-| `tests/test_rename_user_owner_sync.py` | 686 | 26 | 26 | 0 | security | owner | route/api, db/session, import-state, filesystem, async/threading |
-| `tests/test_email_oauth.py` | 580 | 28 | 25 | 0 | services | email | route/api, db/session, security, async/threading |
+| `tests/test_cookbook_helpers.py` | 958 | 69 | 69 | 0 | services | cookbook | route/api, filesystem, subprocess/script, async/threading, ui/static |
+| `tests/test_upload_handler_cleanup.py` | 831 | 13 | 13 | 0 | uncategorized | upload_handler_cleanup | route/api, db/session, filesystem, async/threading |
+| `tests/test_email_oauth.py` | 798 | 34 | 29 | 0 | services | email | route/api, db/session, security, async/threading |
+| `tests/test_rename_user_owner_sync.py` | 740 | 27 | 27 | 0 | security | owner | route/api, db/session, import-state, filesystem, async/threading |
+| `tests/test_email_owner_scope.py` | 656 | 13 | 13 | 0 | security | owner_scope | route/api, db/session, filesystem, async/threading |
+| `tests/test_model_capability_readers.py` | 646 | 20 | 20 | 0 | uncategorized | model_capability_readers | - |
+| `tests/test_chat_helpers.py` | 582 | 37 | 24 | 0 | uncategorized | chat_helpers | route/api, filesystem, async/threading |
 | `tests/test_api_token_routes.py` | 578 | 17 | 17 | 0 | routes | api_routes | route/api, db/session, import-state, async/threading |
-| `tests/test_shell_routes.py` | 481 | 63 | 48 | 8 | routes | routes | route/api, import-state, filesystem |
-| `tests/test_email_owner_scope.py` | 474 | 9 | 9 | 0 | security | owner_scope | route/api, db/session, filesystem, async/threading |
-| `tests/test_service_health.py` | 472 | 47 | 42 | 0 | uncategorized | service_health | async/threading |
-| `tests/test_agent_loop.py` | 469 | 52 | 52 | 5 | uncategorized | agent_loop | db/session, import-state |
+| `tests/test_research_routes_path_confinement.py` | 565 | 58 | 26 | 0 | security | confinement | route/api, security, filesystem, async/threading |
+| `tests/test_shell_routes.py` | 538 | 69 | 53 | 9 | routes | routes | route/api, import-state, filesystem |
+| `tests/test_workspace_confine.py` | 527 | 25 | 25 | 0 | uncategorized | workspace_confine | route/api, filesystem, subprocess/script, async/threading |
+| `tests/test_agent_loop.py` | 500 | 54 | 54 | 5 | uncategorized | agent_loop | db/session, import-state |
+| `tests/test_endpoint_probing.py` | 497 | 61 | 36 | 7 | uncategorized | endpoint_probing | route/api, db/session, import-state |
+| `tests/test_run_focus.py` | 492 | 55 | 52 | 0 | uncategorized | run_focus | security, filesystem, subprocess/script, ui/static |
+| `tests/test_tool_policy.py` | 475 | 18 | 18 | 0 | uncategorized | tool_policy | import-state, async/threading |
 | `tests/test_kv_cache_invalidation_2927.py` | 463 | 8 | 8 | 0 | uncategorized | kv_cache_invalidation_2927 | route/api, db/session, import-state, async/threading |
+| `tests/test_email_test_connection_oauth.py` | 436 | 9 | 7 | 0 | services | email | route/api, db/session, async/threading |
 | `tests/test_helpers_import_state.py` | 426 | 26 | 26 | 0 | helpers | helpers | route/api, db/session, import-state |
 | `tests/test_endpoint_owner_scope_followup.py` | 414 | 11 | 11 | 0 | security | owner_scope | route/api, db/session, filesystem |
-| `tests/test_endpoint_probing.py` | 411 | 34 | 30 | 6 | uncategorized | endpoint_probing | route/api, db/session, import-state |
+| `tests/test_api_chat_security.py` | 404 | 22 | 8 | 0 | security | security | route/api, db/session, import-state, filesystem, async/threading |
 | `tests/test_imap_leak_fixes.py` | 404 | 15 | 15 | 0 | uncategorized | imap_leak_fixes | route/api, db/session, security, filesystem |
 | `tests/test_companion_readonly.py` | 402 | 17 | 17 | 0 | uncategorized | companion_readonly | db/session, import-state |
-| `tests/test_api_chat_security.py` | 401 | 22 | 8 | 0 | security | security | route/api, db/session, import-state, filesystem, async/threading |
 | `tests/test_upload_handler_atomicity.py` | 401 | 9 | 9 | 0 | uncategorized | upload_handler_atomicity | filesystem, async/threading |
-| `tests/test_run_focus.py` | 399 | 47 | 44 | 0 | uncategorized | run_focus | security, filesystem, subprocess/script, ui/static |
-| `tests/test_auth_regressions.py` | 375 | 15 | 15 | 0 | security | auth | route/api, db/session, import-state, async/threading |
-| `tests/test_calendar_owner_scope.py` | 345 | 7 | 7 | 0 | security | owner_scope | route/api, db/session, import-state, filesystem, async/threading, ui/static |
-| `tests/test_null_owner_gates.py` | 342 | 20 | 20 | 0 | security | owner | route/api, db/session, import-state |
-| `tests/test_agent_migration_manifest.py` | 340 | 15 | 15 | 0 | uncategorized | agent_migration_manifest | import-state, filesystem |
-| `tests/test_calendar_recurrence.py` | 338 | 19 | 19 | 0 | services | calendar | - |
-| `tests/test_tool_policy.py` | 330 | 13 | 13 | 0 | uncategorized | tool_policy | import-state, async/threading |
-| `tests/test_workspace_confine.py` | 328 | 18 | 18 | 0 | uncategorized | workspace_confine | route/api, filesystem, subprocess/script, async/threading |
-| `tests/test_diffusion_server_security.py` | 325 | 14 | 14 | 0 | security | security | route/api, import-state, security, filesystem, async/threading, ui/static |
+| `tests/test_auth_regressions.py` | 370 | 15 | 15 | 0 | security | auth | route/api, db/session, import-state, async/threading |
+| `tests/test_calendar_recurrence.py` | 356 | 20 | 20 | 0 | services | calendar | - |
+| `tests/test_task_cookbook_admin_gate.py` | 350 | 10 | 10 | 0 | services | cookbook | route/api, db/session, import-state, filesystem, async/threading |
 
 ## Split planning candidates
 
@@ -165,53 +169,69 @@ These are planning candidates only. A later split PR still needs a focused manua
 
 | File | Why included | Setup/risk signals | Suggested handling |
 |---|---|---|---|
-| `tests/test_model_routes.py` | 1778 lines, 139 collected tests | route/api, db/session, import-state, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_security_regressions.py` | 1224 lines, 92 collected tests | route/api, db/session, import-state, security, filesystem, async/threading, ui/static | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_provider_classification.py` | 67 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
-| `tests/test_cookbook_helpers.py` | 912 lines, 65 collected tests | route/api, filesystem, subprocess/script, async/threading, ui/static | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_shell_routes.py` | 481 lines, 63 collected tests | route/api, import-state, filesystem | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_model_routes.py` | 2099 lines, 163 collected tests | route/api, db/session, import-state, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_security_regressions.py` | 1515 lines, 98 collected tests | route/api, db/session, import-state, security, filesystem, async/threading, ui/static | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_cookbook_helpers.py` | 958 lines, 69 collected tests | route/api, filesystem, subprocess/script, async/threading, ui/static | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_shell_routes.py` | 538 lines, 69 collected tests | route/api, import-state, filesystem | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_endpoint_probing.py` | 497 lines, 61 collected tests | route/api, db/session, import-state | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_pr_blocker_audit.py` | 964 lines, 58 collected tests | import-state, security, filesystem | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_provider_endpoints.py` | 58 collected tests | subprocess/script | Good first manual-review candidate if test themes are cohesive. |
-| `tests/test_agent_loop.py` | 469 lines, 52 collected tests | db/session, import-state | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_service_health.py` | 472 lines, 47 collected tests | async/threading | Good first manual-review candidate if test themes are cohesive. |
-| `tests/test_run_focus.py` | 399 lines, 47 collected tests | security, filesystem, subprocess/script, ui/static | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_llm_core_temperature.py` | 41 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
-| `tests/test_endpoint_probing.py` | 411 lines, 34 collected tests | route/api, db/session, import-state | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_research_routes_path_confinement.py` | 565 lines, 58 collected tests | route/api, security, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_run_focus.py` | 492 lines, 55 collected tests | security, filesystem, subprocess/script, ui/static | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_agent_loop.py` | 500 lines, 54 collected tests | db/session, import-state | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_manage_mcp_command_allowlist.py` | 45 collected tests | db/session, subprocess/script, async/threading, ui/static | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_provider_classification.py` | 42 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
+| `tests/test_review_regressions.py` | 1429 lines, 41 collected tests | route/api, db/session, import-state, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_chat_helpers.py` | 582 lines, 37 collected tests | route/api, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_model_context.py` | 314 lines, 36 collected tests | db/session, import-state | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_email_oauth.py` | 798 lines, 34 collected tests | route/api, db/session, security, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_llm_core_anthropic_temp_omit.py` | 32 collected tests | db/session | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_chat_helpers.py` | 31 collected tests | route/api | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_provider_detection.py` | 31 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
-| `tests/test_model_context.py` | 30 collected tests | db/session, import-state | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_endpoint_resolver.py` | 30 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
-| `tests/test_embedding_lanes.py` | 1104 lines, 29 collected tests | filesystem | Good first manual-review candidate if test themes are cohesive. |
+| `tests/test_redos_verdict_continuation.py` | 30 collected tests | route/api | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_upload_limits_centralized.py` | 29 collected tests | import-state, filesystem | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_email_oauth.py` | 580 lines, 28 collected tests | route/api, db/session, security, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_review_regressions.py` | 930 lines, 26 collected tests | route/api, db/session, import-state, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_rename_user_owner_sync.py` | 686 lines, 26 collected tests | route/api, db/session, import-state, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_cookbook_docker_access.py` | 339 lines, 28 collected tests | route/api, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_rename_user_owner_sync.py` | 740 lines, 27 collected tests | route/api, db/session, import-state, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_taxonomy.py` | 27 collected tests | security, ui/static | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_endpoint_resolver_urls.py` | 27 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
 | `tests/test_helpers_import_state.py` | 426 lines, 26 collected tests | route/api, db/session, import-state | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_taxonomy.py` | 26 collected tests | security, ui/static | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_tool_path_confinement.py` | 24 collected tests | import-state, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_copilot.py` | 23 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
+| `tests/test_workspace_confine.py` | 527 lines, 25 collected tests | route/api, filesystem, subprocess/script, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_chat_route_tool_policy.py` | 344 lines, 25 collected tests | filesystem, ui/static | Good first manual-review candidate if test themes are cohesive. |
+| `tests/test_tool_path_confinement.py` | 303 lines, 25 collected tests | import-state, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_copilot.py` | 25 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
+| `tests/test_llm_core_temperature_reasoning.py` | 25 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
+| `tests/test_provider_endpoints_url_building.py` | 25 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
+| `tests/test_bg_job_tools.py` | 23 collected tests | filesystem, async/threading | Good first manual-review candidate if test themes are cohesive. |
 | `tests/test_research_utils.py` | 23 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
-| `tests/test_api_chat_security.py` | 401 lines, 22 collected tests | route/api, db/session, import-state, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_api_chat_security.py` | 404 lines, 22 collected tests | route/api, db/session, import-state, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_tool_support_heuristic.py` | 22 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
-| `tests/test_platform_compat.py` | 318 lines, 21 collected tests | import-state, filesystem, subprocess/script | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_platform_compat.py` | 322 lines, 21 collected tests | import-state, filesystem, subprocess/script | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_context_compactor.py` | 21 collected tests | db/session, import-state, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_prompt_security.py` | 21 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
-| `tests/test_null_owner_gates.py` | 342 lines, 20 collected tests | route/api, db/session, import-state | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_fenced_inline_args.py` | 21 collected tests | db/session, import-state | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_cache_affinity_local_only.py` | 21 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
+| `tests/test_model_capability_readers.py` | 646 lines, 20 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
+| `tests/test_calendar_recurrence.py` | 356 lines, 20 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
+| `tests/test_null_owner_gates.py` | 332 lines, 20 collected tests | route/api, db/session, import-state | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_gallery_endpoint_hardening.py` | 326 lines, 20 collected tests | route/api, security, filesystem, ui/static | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_redos_llm_parsers.py` | 20 collected tests | No obvious setup signals from static scan. | Good first manual-review candidate if test themes are cohesive. |
+| `tests/test_code_nav_tools.py` | 20 collected tests | db/session, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_youtube_handler_consolidation.py` | 20 collected tests | route/api, import-state | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_calendar_recurrence.py` | 338 lines | No obvious setup signals from static scan. | Plan split boundaries before editing. |
-| `tests/test_workspace_confine.py` | 328 lines | route/api, filesystem, subprocess/script, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_tool_policy.py` | 475 lines | import-state, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_fenced_example_not_executed_for_native_models.py` | 345 lines | async/threading | Plan split boundaries before editing. |
 | `tests/test_api_token_routes.py` | 578 lines | route/api, db/session, import-state, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_companion_readonly.py` | 402 lines | db/session, import-state | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_set_admin.py` | 317 lines | route/api, import-state, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_llm_core_ollama.py` | 324 lines | async/threading | Plan split boundaries before editing. |
 | `tests/test_imap_leak_fixes.py` | 404 lines | route/api, db/session, security, filesystem | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_auth_regressions.py` | 375 lines | route/api, db/session, import-state, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_auth_regressions.py` | 370 lines | route/api, db/session, import-state, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_agent_migration_manifest.py` | 340 lines | import-state, filesystem | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_mcp_email_decode_header_spaces.py` | 327 lines | route/api, db/session, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_diffusion_server_security.py` | 325 lines | route/api, import-state, security, filesystem, async/threading, ui/static | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_tool_policy.py` | 330 lines | import-state, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_upload_handler_cleanup.py` | 831 lines | route/api, db/session, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_email_owner_scope.py` | 656 lines | route/api, db/session, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_upload_routes_owner_scope.py` | 344 lines | route/api, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_endpoint_owner_scope_followup.py` | 414 lines | route/api, db/session, filesystem | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_upload_routes_owner_scope.py` | 315 lines | route/api, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
-| `tests/test_email_owner_scope.py` | 474 lines | route/api, db/session, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_composer_arrow_up_recall_js.py` | 308 lines | filesystem, subprocess/script, ui/static | Plan split boundaries before editing. |
+| `tests/test_task_cookbook_admin_gate.py` | 350 lines | route/api, db/session, import-state, filesystem, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
+| `tests/test_email_test_connection_oauth.py` | 436 lines | route/api, db/session, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_upload_handler_atomicity.py` | 401 lines | filesystem, async/threading | Plan split boundaries before editing. |
 | `tests/test_kv_cache_invalidation_2927.py` | 463 lines | route/api, db/session, import-state, async/threading | Defer mechanical split until setup/risk boundaries are mapped. |
 | `tests/test_calendar_owner_scope.py` | 345 lines | route/api, db/session, import-state, filesystem, async/threading, ui/static | Defer mechanical split until setup/risk boundaries are mapped. |
@@ -226,28 +246,35 @@ Before using any of these files as a split target, first decide whether the taxo
 
 | File | Lines | Collected tests | Sub-area | Signals | Suggested follow-up |
 |---|---:|---:|---|---|---|
+| `tests/test_endpoint_probing.py` | 497 | 61 | endpoint_probing | route/api, db/session, import-state | Review taxonomy and setup/risk boundaries before any split. |
 | `tests/test_pr_blocker_audit.py` | 964 | 58 | pr_blocker_audit | import-state, security, filesystem | Review taxonomy and setup/risk boundaries before any split. |
-| `tests/test_agent_loop.py` | 469 | 52 | agent_loop | db/session, import-state | Review taxonomy and setup/risk boundaries before any split. |
-| `tests/test_service_health.py` | 472 | 47 | service_health | async/threading | Review taxonomy mapping before using as a split target. |
-| `tests/test_run_focus.py` | 399 | 47 | run_focus | security, filesystem, subprocess/script, ui/static | Review taxonomy and setup/risk boundaries before any split. |
-| `tests/test_endpoint_probing.py` | 411 | 34 | endpoint_probing | route/api, db/session, import-state | Review taxonomy and setup/risk boundaries before any split. |
-| `tests/test_chat_helpers.py` | 264 | 31 | chat_helpers | route/api | Review taxonomy and setup/risk boundaries before any split. |
-| `tests/test_model_context.py` | 251 | 30 | model_context | db/session, import-state | Review taxonomy and setup/risk boundaries before any split. |
-| `tests/test_endpoint_resolver.py` | 148 | 30 | endpoint_resolver | - | Review taxonomy mapping before using as a split target. |
+| `tests/test_run_focus.py` | 492 | 55 | run_focus | security, filesystem, subprocess/script, ui/static | Review taxonomy and setup/risk boundaries before any split. |
+| `tests/test_agent_loop.py` | 500 | 54 | agent_loop | db/session, import-state | Review taxonomy and setup/risk boundaries before any split. |
+| `tests/test_review_regressions.py` | 1429 | 41 | review_regressions | route/api, db/session, import-state, filesystem, async/threading | Review taxonomy and setup/risk boundaries before any split. |
+| `tests/test_chat_helpers.py` | 582 | 37 | chat_helpers | route/api, filesystem, async/threading | Review taxonomy and setup/risk boundaries before any split. |
+| `tests/test_model_context.py` | 314 | 36 | model_context | db/session, import-state | Review taxonomy and setup/risk boundaries before any split. |
+| `tests/test_redos_verdict_continuation.py` | 80 | 30 | redos_verdict_continuation | route/api | Review taxonomy and setup/risk boundaries before any split. |
 | `tests/test_upload_limits_centralized.py` | 110 | 29 | upload_limits_centralized | import-state, filesystem | Review taxonomy and setup/risk boundaries before any split. |
-| `tests/test_review_regressions.py` | 930 | 26 | review_regressions | route/api, db/session, import-state, filesystem, async/threading | Review taxonomy and setup/risk boundaries before any split. |
-| `tests/test_taxonomy.py` | 145 | 26 | taxonomy | security, ui/static | Review taxonomy and setup/risk boundaries before any split. |
-| `tests/test_copilot.py` | 170 | 23 | copilot | - | Review taxonomy mapping before using as a split target. |
+| `tests/test_taxonomy.py` | 151 | 27 | taxonomy | security, ui/static | Review taxonomy and setup/risk boundaries before any split. |
+| `tests/test_endpoint_resolver_urls.py` | 95 | 27 | endpoint_resolver_urls | - | Review taxonomy mapping before using as a split target. |
+| `tests/test_workspace_confine.py` | 527 | 25 | workspace_confine | route/api, filesystem, subprocess/script, async/threading | Review taxonomy and setup/risk boundaries before any split. |
+| `tests/test_copilot.py` | 182 | 25 | copilot | - | Review taxonomy mapping before using as a split target. |
+| `tests/test_bg_job_tools.py` | 174 | 23 | bg_job_tools | filesystem, async/threading | Review taxonomy mapping before using as a split target. |
 | `tests/test_tool_support_heuristic.py` | 166 | 22 | tool_support_heuristic | - | Review taxonomy mapping before using as a split target. |
-| `tests/test_platform_compat.py` | 318 | 21 | platform_compat | import-state, filesystem, subprocess/script | Review taxonomy and setup/risk boundaries before any split. |
+| `tests/test_platform_compat.py` | 322 | 21 | platform_compat | import-state, filesystem, subprocess/script | Review taxonomy and setup/risk boundaries before any split. |
 | `tests/test_context_compactor.py` | 233 | 21 | context_compactor | db/session, import-state, async/threading | Review taxonomy and setup/risk boundaries before any split. |
+| `tests/test_fenced_inline_args.py` | 186 | 21 | fenced_inline_args | db/session, import-state | Review taxonomy and setup/risk boundaries before any split. |
+| `tests/test_cache_affinity_local_only.py` | 104 | 21 | cache_affinity_local_only | - | Review taxonomy mapping before using as a split target. |
+| `tests/test_model_capability_readers.py` | 646 | 20 | model_capability_readers | - | Review taxonomy mapping before using as a split target. |
+| `tests/test_code_nav_tools.py` | 198 | 20 | code_nav_tools | db/session, filesystem, async/threading | Review taxonomy and setup/risk boundaries before any split. |
 | `tests/test_youtube_handler_consolidation.py` | 104 | 20 | youtube_handler_consolidation | route/api, import-state | Review taxonomy and setup/risk boundaries before any split. |
-| `tests/test_workspace_confine.py` | 328 | 18 | workspace_confine | route/api, filesystem, subprocess/script, async/threading | Review taxonomy and setup/risk boundaries before any split. |
+| `tests/test_tool_policy.py` | 475 | 18 | tool_policy | import-state, async/threading | Review taxonomy and setup/risk boundaries before any split. |
+| `tests/test_fenced_example_not_executed_for_native_models.py` | 345 | 18 | fenced_example_not_executed_for_native_models | async/threading | Review taxonomy mapping before using as a split target. |
 | `tests/test_companion_readonly.py` | 402 | 17 | companion_readonly | db/session, import-state | Review taxonomy and setup/risk boundaries before any split. |
 | `tests/test_set_admin.py` | 317 | 17 | set_admin | route/api, import-state, filesystem, async/threading | Review taxonomy and setup/risk boundaries before any split. |
 | `tests/test_imap_leak_fixes.py` | 404 | 15 | imap_leak_fixes | route/api, db/session, security, filesystem | Review taxonomy and setup/risk boundaries before any split. |
 | `tests/test_agent_migration_manifest.py` | 340 | 15 | agent_migration_manifest | import-state, filesystem | Review taxonomy and setup/risk boundaries before any split. |
-| `tests/test_tool_policy.py` | 330 | 13 | tool_policy | import-state, async/threading | Review taxonomy and setup/risk boundaries before any split. |
+| `tests/test_upload_handler_cleanup.py` | 831 | 13 | upload_handler_cleanup | route/api, db/session, filesystem, async/threading | Review taxonomy and setup/risk boundaries before any split. |
 | `tests/test_upload_handler_atomicity.py` | 401 | 9 | upload_handler_atomicity | filesystem, async/threading | Review taxonomy mapping before using as a split target. |
 | `tests/test_kv_cache_invalidation_2927.py` | 463 | 8 | kv_cache_invalidation_2927 | route/api, db/session, import-state, async/threading | Review taxonomy and setup/risk boundaries before any split. |
 
@@ -259,14 +286,16 @@ Files still in the `uncategorized` taxonomy area are listed separately below so
 
 | File | Lines | Collected tests | Area | Sub-area | Signals | Why this is a candidate |
 |---|---:|---:|---|---|---|---|
-| `tests/test_provider_classification.py` | 188 | 67 | services | provider | - | 67 collected tests |
-| `tests/test_provider_endpoints.py` | 241 | 58 | services | provider | subprocess/script | 58 collected tests |
-| `tests/test_llm_core_temperature.py` | 196 | 41 | services | llm | - | 41 collected tests |
-| `tests/test_provider_detection.py` | 148 | 31 | services | provider | - | 31 collected tests |
-| `tests/test_embedding_lanes.py` | 1104 | 29 | services | embedding | filesystem | 1104 lines, 29 collected tests |
+| `tests/test_provider_classification.py` | 115 | 42 | services | provider | - | 42 collected tests |
+| `tests/test_chat_route_tool_policy.py` | 344 | 25 | routes | route | filesystem, ui/static | 344 lines, 25 collected tests |
+| `tests/test_llm_core_temperature_reasoning.py` | 133 | 25 | services | llm | - | 25 collected tests |
+| `tests/test_provider_endpoints_url_building.py` | 86 | 25 | services | provider | - | 25 collected tests |
 | `tests/test_research_utils.py` | 97 | 23 | services | research | - | 23 collected tests |
 | `tests/test_prompt_security.py` | 203 | 21 | security | security | - | 21 collected tests |
-| `tests/test_calendar_recurrence.py` | 338 | 19 | services | calendar | - | 338 lines |
+| `tests/test_calendar_recurrence.py` | 356 | 20 | services | calendar | - | 356 lines, 20 collected tests |
+| `tests/test_redos_llm_parsers.py` | 201 | 20 | services | llm | - | 20 collected tests |
+| `tests/test_llm_core_ollama.py` | 324 | 16 | services | llm | async/threading | 324 lines |
+| `tests/test_composer_arrow_up_recall_js.py` | 308 | 11 | js | js | filesystem, subprocess/script, ui/static | 308 lines |
 
 ## High-risk candidates to defer first
 
@@ -274,21 +303,21 @@ These files may still be split later, but not as the first implementation slice
 
 | File | Lines | Collected tests | High-risk signals |
 |---|---:|---:|---|
-| `tests/test_model_routes.py` | 1778 | 139 | db/session, import-state, route/api |
-| `tests/test_security_regressions.py` | 1224 | 92 | db/session, import-state, route/api, security |
-| `tests/test_cookbook_helpers.py` | 912 | 65 | route/api |
-| `tests/test_shell_routes.py` | 481 | 63 | import-state, route/api |
+| `tests/test_model_routes.py` | 2099 | 163 | db/session, import-state, route/api |
+| `tests/test_security_regressions.py` | 1515 | 98 | db/session, import-state, route/api, security |
+| `tests/test_cookbook_helpers.py` | 958 | 69 | route/api |
+| `tests/test_shell_routes.py` | 538 | 69 | import-state, route/api |
+| `tests/test_endpoint_probing.py` | 497 | 61 | db/session, import-state, route/api |
 | `tests/test_pr_blocker_audit.py` | 964 | 58 | import-state, security |
-| `tests/test_agent_loop.py` | 469 | 52 | db/session, import-state |
-| `tests/test_run_focus.py` | 399 | 47 | security |
-| `tests/test_endpoint_probing.py` | 411 | 34 | db/session, import-state, route/api |
+| `tests/test_research_routes_path_confinement.py` | 565 | 58 | route/api, security |
+| `tests/test_run_focus.py` | 492 | 55 | security |
+| `tests/test_agent_loop.py` | 500 | 54 | db/session, import-state |
+| `tests/test_manage_mcp_command_allowlist.py` | 168 | 45 | db/session |
+| `tests/test_review_regressions.py` | 1429 | 41 | db/session, import-state, route/api |
+| `tests/test_chat_helpers.py` | 582 | 37 | route/api |
+| `tests/test_model_context.py` | 314 | 36 | db/session, import-state |
+| `tests/test_email_oauth.py` | 798 | 34 | db/session, route/api, security |
 | `tests/test_llm_core_anthropic_temp_omit.py` | 94 | 32 | db/session |
-| `tests/test_chat_helpers.py` | 264 | 31 | route/api |
-| `tests/test_model_context.py` | 251 | 30 | db/session, import-state |
-| `tests/test_upload_limits_centralized.py` | 110 | 29 | import-state |
-| `tests/test_email_oauth.py` | 580 | 28 | db/session, route/api, security |
-| `tests/test_review_regressions.py` | 930 | 26 | db/session, import-state, route/api |
-| `tests/test_rename_user_owner_sync.py` | 686 | 26 | db/session, import-state, route/api |
 
 ## Rules for future split PRs
 
@@ -313,7 +342,7 @@ Do not start a split PR from this planning issue alone if the file's boundaries
 This document was generated with:
 
 ```bash
-.venv/bin/python tests/tools/build_oversized_test_split_plan.py
+venv/bin/python tests/tools/build_oversized_test_split_plan.py
 ```
 
 ## Freshness check
@@ -321,6 +350,6 @@ This document was generated with:
 After editing the builder or rebasing the branch, regenerate the plan and confirm no unexpected plan drift:
 
 ```bash
-.venv/bin/python tests/tools/build_oversized_test_split_plan.py
+venv/bin/python tests/tools/build_oversized_test_split_plan.py
 git diff --exit-code -- tests/OVERSIZED_TEST_SPLIT_PLAN.md
 ```

tests/tools/build_oversized_test_split_plan.py

@@ -441,6 +441,10 @@ def write_report(metrics: list[FileMetric], node_count_total: int) -> None:
     lines = [
         "# Oversized Test File Split Plan",
         "",
+        "> [!NOTE]",
+        "> This is generated planning material based on the current test tree.",
+        "> It does not define runtime behaviour or approve any test-file split.",
+        "",
         "## Purpose",
         "",
         "This document plans future oversized test-file splits using current repo data.",
@@ -508,7 +512,7 @@ def write_report(metrics: list[FileMetric], node_count_total: int) -> None:
         "This document was generated with:",
         "",
         "```bash",
-        ".venv/bin/python tests/tools/build_oversized_test_split_plan.py",
+        "venv/bin/python tests/tools/build_oversized_test_split_plan.py",
         "```",
         "",
         "## Freshness check",
@@ -516,7 +520,7 @@ def write_report(metrics: list[FileMetric], node_count_total: int) -> None:
         "After editing the builder or rebasing the branch, regenerate the plan and confirm no unexpected plan drift:",
         "",
         "```bash",
-        ".venv/bin/python tests/tools/build_oversized_test_split_plan.py",
+        "venv/bin/python tests/tools/build_oversized_test_split_plan.py",
         "git diff --exit-code -- tests/OVERSIZED_TEST_SPLIT_PLAN.md",
         "```",
         "",