GET /api/config → suppliers list load

/api/{supplier} → fetch_pod_market → upsert_pod_products — search string may vary per supplier

GET /api/user/usage

/api/auth/magic-link (dry-run) → send_magic_link() → verifies no real email is sent

/api/billing/checkout-info (read-only) — webhook/checkout handshake not covered, see notes

Real flow trace: keyword_cache → get_source_mapping → search_keywords_by_text → usage/log

Real flow trace: run_semantic_search → log_search

Real flow trace: get_source_mapping → search_keywords_by_text (404 on empty is expected pass)

db.get_user_deep_search_usage()

trending_events.get_countries → get_events_for_country

keyword_db_sync.py trend period + available months + archive

Real token-mint handshake: rate-limit → anomaly checks → IP checks → chunk load/encrypt

Real token handshake → scraper_save() → cleanup of probe rows

scraper_listing_detail() — bogus listing id, 4xx is expected pass

get_cached_shop_listings() — live-scrape fallback intentionally not triggered

Real handshake → submit_ai_job → queue_position → get_ai_job

get_admin_stats() → keyword_cache.get_stats()

Bogus keyword_id — 404 on delete/edit/restore is expected pass; browse is real read

Real upsert → lookup → delete of a __diagnostic_probe__ chip

keyword_cache.get_stats() / get_all_meta() — clear/warm intentionally not triggered

Block→unblock cycle on 192.0.2.1 (RFC 5737 test address, always safe)

admin_users() → admin_user_logins() using the calling admin's own user_id

sync_manager.py — reports which module (bulk_supplier.py vs bulk_supplier2.py) is active per supplier

trend_buzz_worker.py — in-memory last-run outcome + due-check

keyword_refresh_service.py (systemd) — status/history + staleness check