feat: Test script pill in the Phone simulator (v3.5.11)

- Phone simulator tab: a fourth pill **Test script** - script list
  (localStorage `simple_tests`) with New/Clone/Delete/Export/Import, a
  form-based step editor (modal) and a run panel.
- Actions: ENVELOPE (Event Download), Menu Selection, UPDATE/READ file by
  path, raw APDU, SCP80 (C-APDU or a pre-built packet, per-step TAR/SPI1/
  SPI2 overrides; the preset is matched by the equipped card's ICCID and
  the final counter is written back) and STATUS with an optional poll.
  Every action has SW/data checks (exact or ?-mask) and a PoR check for
  SCP80, with an error (stops) / warning (continues) fail level.
- Expectations: FETCH the command announced by the previous step, verify
  type/qualifier/text/item/raw and answer with the scripted TERMINAL
  RESPONSE (result, item id, text, extra TLVs); templates for STK menu
  browsing and an applet via SCP80.
- Run panel: progress banner (plus a marker on the pill), per-step
  OK/Warning/Error badges with expected vs actual values, sent/received
  hex, decoded commands and the SCP80 counter; 500 ms polling while a run
  is active, and a running script disables other card controls
  (data-needs gate; the server answers 409 to other card endpoints).
- Help EN/RU (8.9 Test script), AGENTS; version 3.5.11; sw simple-v264.

579 frontend / 467 Python green.

frontend/tests/testscripts.test.js

@@ -0,0 +1,130 @@
+const { test } = require('node:test');
+const assert = require('node:assert');
+const fs = require('node:fs');
+const path = require('node:path');
+
+const html = fs.readFileSync(path.join(__dirname, '..', 'index.html'), 'utf8');
+
+function extractBlock(startMarker, endMarker) {
+	const start = html.indexOf(startMarker);
+	const end = html.indexOf(endMarker, start);
+	if (start < 0 || end < 0) throw new Error('block not found: ' + startMarker);
+	return html.slice(start, end);
+}
+
+function extractFunc(src, name, asyncFn) {
+	const re = new RegExp('function\\s+' + name + '\\s*\\([^)]*\\)\\s*\\{');
+	const m = re.exec(src);
+	if (!m) throw new Error('function ' + name + ' not found');
+	let i = m.index + m[0].length - 1;
+	let depth = 0;
+	for (; i < src.length; i++) {
+		if (src[i] === '{') depth++;
+		else if (src[i] === '}') {
+			depth--;
+			if (depth === 0) break;
+		}
+	}
+	return (asyncFn ? 'async ' : '') + src.slice(m.index, i + 1);
+}
+
+eval(extractBlock('const CMD_NAMES = {', 'function cmdQualifierShort').replace(/^const /gm, 'var '));
+eval(extractBlock('const TEST_ACTION_KINDS = [', 'let _testScripts').replace(/^const /gm, 'var '));
+eval(extractFunc(html, 'testTemplate'));
+eval(extractFunc(html, 'testScriptProblem'));
+eval(extractFunc(html, 'testCheckSummary'));
+eval(extractFunc(html, 'testStepSummary'));
+eval(extractFunc(html, 'testCommandOptions'));
+globalThis.t = s => s;
+
+test('the templates contain usable steps', () => {
+	const menu = testTemplate('menu');
+	assert.strictEqual(menu.steps.length, 3);
+	assert.strictEqual(menu.steps[0].kind, 'menu-select');
+	assert.deepStrictEqual(menu.steps[0].check.sw, { mode: 'mask', value: '91??' });
+	assert.strictEqual(menu.steps[1].command, 'SELECT ITEM');
+	assert.strictEqual(menu.steps[1].checks[0].kind, 'item');
+	assert.strictEqual(menu.steps[2].command, 'DISPLAY TEXT');
+	const scp80 = testTemplate('scp80');
+	assert.strictEqual(scp80.steps[0].kind, 'scp80');
+	assert.strictEqual(scp80.steps[0].check.por, 'none');
+	assert.ok(scp80.steps[0].params.tar);
+	assert.strictEqual(testTemplate('empty').steps.length, 0);
+});
+
+test('testScriptProblem accepts good scripts and names bad ones', () => {
+	assert.strictEqual(testScriptProblem(testTemplate('menu')), '');
+	assert.strictEqual(testScriptProblem(testTemplate('scp80')), '');
+	assert.match(testScriptProblem(null), /object/);
+	assert.match(testScriptProblem({ steps: [] }), /no steps/);
+	assert.match(testScriptProblem({ steps: [{ type: 'nope' }] }), /action or an expectation/);
+	assert.match(testScriptProblem({ steps: [{ type: 'action', kind: 'nope' }] }), /unknown action kind/);
+	assert.match(testScriptProblem({ steps: [{ type: 'action', kind: 'apdu', params: {} }] }), /APDU is empty/);
+	assert.match(testScriptProblem({
+		steps: [{ type: 'action', kind: 'scp80', params: { apdu: '' } }] }), /SCP80/);
+	assert.match(testScriptProblem({
+		steps: [{ type: 'action', kind: 'menu-select', params: { item_id: 0 } }] }), /item id/);
+	assert.match(testScriptProblem({
+		steps: [{ type: 'action', kind: 'file-read', params: {} }] }), /file path/);
+	assert.match(testScriptProblem({ steps: [{ type: 'expect' }] }), /command is required/);
+});
+
+test('testStepSummary renders actions', () => {
+	assert.strictEqual(
+		testStepSummary({ type: 'action', kind: 'menu-select', params: { item_id: 3 },
+			check: { sw: { mode: 'mask', value: '91??' } } }),
+		'ENVELOPE(Menu Selection) item=3 · SW ~91??');
+	assert.strictEqual(
+		testStepSummary({ type: 'action', kind: 'apdu', params: { apdu: '00A4' } }),
+		'APDU 00A4');
+	assert.strictEqual(
+		testStepSummary({ type: 'action', kind: 'scp80', params: { apdu: '80E2', tar: 'B00000' },
+			check: { sw: { mode: 'mask', value: '91??' }, por: 'none' } }),
+		'SCP80 80E2 TAR=B00000 · SW ~91??, PoR none');
+	assert.strictEqual(
+		testStepSummary({ type: 'action', kind: 'status', params: { attempts: 5 } }),
+		'STATUS x5 (poll)');
+	assert.strictEqual(
+		testStepSummary({ type: 'action', kind: 'file-read', params: { path: 'MF/2FE2' } }),
+		'READ MF/2FE2');
+	assert.ok(testStepSummary({ type: 'action', kind: 'status', params: {},
+		check: { sw: { mode: 'exact', value: '9000' } }, on_fail: 'warning' }).includes('⚠'));
+});
+
+test('testStepSummary renders expectations with checks and the response', () => {
+	assert.strictEqual(
+		testStepSummary({ type: 'expect', command: 'SELECT ITEM',
+			checks: [{ kind: 'item', id: 1, text: 'test', mode: 'contains' }],
+			respond: { result: 'ok', item_id: 1 } }),
+		'EXPECT SELECT ITEM · item #1 ~"test" · TR item=1');
+	assert.strictEqual(
+		testStepSummary({ type: 'expect', command: 'DISPLAY TEXT',
+			checks: [{ kind: 'text', mode: 'contains', value: 'hello' }], respond: { result: 'ok' } }),
+		'EXPECT DISPLAY TEXT · text ~"hello" · TR ok');
+	assert.ok(testStepSummary({ type: 'expect', command: 'DISPLAY TEXT',
+		checks: [{ kind: 'text', value: 'x' }], respond: { result: 'cancel' } }).includes('TR cancel'));
+	assert.ok(testStepSummary({ type: 'expect', command: 'GET INPUT', respond: { result: 'ok', text: 'hi' } })
+		.includes('text="hi"'));
+	assert.strictEqual(testCheckSummary({ kind: 'raw', mode: 'mask', value: 'AA??' }), 'raw ~AA??');
+});
+
+test('testCommandOptions covers the proactive names and keeps custom values', () => {
+	const opts = testCommandOptions('DISPLAY TEXT');
+	assert.ok(opts.some(o => o.v === 'ANY'));
+	assert.ok(opts.some(o => o.v === 'DISPLAY TEXT'));
+	assert.ok(opts.some(o => o.v === 'SELECT ITEM'));
+	const custom = testCommandOptions('0x74');
+	assert.ok(custom.some(o => o.v === '0x74'));
+});
+
+test('the Phone simulator hosts the Test script pill and its wiring', () => {
+	assert.match(html, /data-phone-sub="test"[^>]*data-l10n="Test script"/);
+	assert.match(html, /id="phone-sub-test"/);
+	assert.match(html, /\['phone', 'tr', 'esim', 'test'\]/);
+	assert.match(html, /else if \(name === 'test'\) \{\s*testInit\(\);/);
+	assert.match(html, /test: 'test-script'/);
+	assert.match(html, /testRunActive\(\) && el\.closest && !el\.closest\('#phone-sub-test'\)/);
+	assert.match(html, /\/api\/test\/run/);
+	assert.match(html, /\/api\/test\/status/);
+	assert.match(html, /id="test-step-modal"/);
+});