test(browser): cover cookies --url path and empty-scope envelope

Only forward the truthy scope option so getCookies receives the same shape internal callers already use.

Author: Benjamin-eecs

src/cli.test.ts

@@ -2227,15 +2227,38 @@ describe('browser cookies command', () => {
 
     await program.parseAsync(['node', 'opencli', 'browser', '--session', 'test', 'cookies', '--domain', 'example.com']);
 
-    expect(browserState.page!.getCookies).toHaveBeenCalledWith({ domain: 'example.com', url: undefined });
+    expect(browserState.page!.getCookies).toHaveBeenCalledWith({ domain: 'example.com' });
     const out = lastJsonLog();
-    expect(out.count).toBe(2);
+    expect(out).toMatchObject({
+      session: 'test',
+      count: 2,
+      captured_at: expect.any(String),
+    });
     expect(out.cookies).toEqual(expect.arrayContaining([
       expect.objectContaining({ name: 'session', httpOnly: true }),
       expect.objectContaining({ name: 'theme', httpOnly: false }),
     ]));
   });
 
+  it('passes --url through to getCookies without sending an unset --domain', async () => {
+    const program = createProgram('', '');
+
+    await program.parseAsync(['node', 'opencli', 'browser', '--session', 'test', 'cookies', '--url', 'https://example.com/login']);
+
+    expect(browserState.page!.getCookies).toHaveBeenCalledWith({ url: 'https://example.com/login' });
+  });
+
+  it('emits an empty cookies envelope with count 0 when the scope matches nothing', async () => {
+    (browserState.page!.getCookies as ReturnType<typeof vi.fn>).mockResolvedValueOnce([]);
+    const program = createProgram('', '');
+
+    await program.parseAsync(['node', 'opencli', 'browser', '--session', 'test', 'cookies', '--domain', 'nothing.example']);
+
+    const out = lastJsonLog();
+    expect(out.count).toBe(0);
+    expect(out.cookies).toEqual([]);
+  });
+
   it('errors with missing_scope when neither --domain nor --url is provided', async () => {
     const program = createProgram('', '');
 

src/cli.ts

@@ -1270,15 +1270,18 @@ Examples:
 
   addBrowserTabOption(browser.command('cookies'))
     .option('--domain <domain>', 'Cookie domain scope (e.g. example.com)')
-    .option('--url <url>', 'URL scope (use domain or url, not both)')
+    .option('--url <url>', 'URL scope (may be combined with --domain to narrow)')
     .description('Read scoped cookies (includes HttpOnly)')
     .action(browserAction(async (page, opts) => {
       if (!opts.domain && !opts.url) {
         console.log(JSON.stringify({ error: { code: 'missing_scope', message: 'Provide --domain or --url to scope the cookie read' } }, null, 2));
         process.exitCode = EXIT_CODES.USAGE_ERROR;
         return;
       }
-      const cookies = await page.getCookies({ domain: opts.domain, url: opts.url });
+      const cookies = await page.getCookies({
+        ...(opts.domain ? { domain: opts.domain } : {}),
+        ...(opts.url ? { url: opts.url } : {}),
+      });
       console.log(JSON.stringify({
         session: getPageSession(page),
         captured_at: new Date().toISOString(),