feat(scripts): 添加 PEP 723 脚本元数据并修复 HTTP/2 伪头过滤问题

- 为 build_studio_urls.py 和 lookup_groups.py 添加 PEP 723 依赖声明
- 修复 HTTP/2 伪头导致 requests 抛 InvalidHeader 的问题
- 添加 CDP 端口连通性预检查及启动指引

tests/test_lookup_groups.py

@@ -53,6 +53,63 @@ class FakeSession:
         return FakeResp(200, {"groupDatas": []})
 
 
+# ---------------------------------------------------------------------------
+# HTTP/2 伪头过滤
+# ---------------------------------------------------------------------------
+class TestPseudoHeaderFilter:
+    def test_regex_matches_pseudo_headers(self, lookup_groups):
+        assert lookup_groups.PSEUDO_HEADER_RE.match(":authority")
+        assert lookup_groups.PSEUDO_HEADER_RE.match(":method")
+        assert not lookup_groups.PSEUDO_HEADER_RE.match("Authorization")
+        assert not lookup_groups.PSEUDO_HEADER_RE.match("X-YouTube-Delegation-Context")
+
+    def test_search_strips_pseudo_headers(self, lookup_groups):
+        """套件里残留伪头时，回放请求不得携带（requests 会抛 InvalidHeader）。"""
+        bundle = {
+            "ownerId": "O1", "ownerDisplay": "一号", "url": "https://example/post",
+            "headers": {
+                "Authorization": "SAPISIDHASH x", "Cookie": "SID=1",
+                ":authority": "studio.youtube.com", ":method": "POST",
+                ":path": "/youtubei/v1/yta_web/search_groups", ":scheme": "https",
+            },
+            "bodyTemplate": {"query": ""},
+        }
+        sess = FakeSession({})
+        sess.routing["::x"] = FakeResp(200, {"groupDatas": [{"displayName": "x", "groupId": "G1"}]})
+        r = lookup_groups.search(bundle, "x", sess)
+        assert r["status"] == "OK"
+        sent = sess.calls[-1][2]
+        assert all(not k.startswith(":") for k in sent)
+        assert sent["Authorization"] == "SAPISIDHASH x"
+
+
+# ---------------------------------------------------------------------------
+# CDP 端口预检
+# ---------------------------------------------------------------------------
+class TestCdpPrecheck:
+    def test_unreachable_port_exits_with_guidance(self, lookup_groups):
+        """端口不通时 SystemExit，输出含可执行的启动指引（含残留进程提示）。"""
+        with pytest.raises(SystemExit) as exc:
+            lookup_groups._assert_cdp_reachable("http://localhost:59999")
+        msg = str(exc.value)
+        assert "remote-debugging-port" in msg
+        assert "残留" in msg
+
+    def test_reachable_port_passes(self, lookup_groups, monkeypatch):
+        class FakeUrlopen:
+            def __enter__(self):
+                return self
+
+            def __exit__(self, *a):
+                return False
+
+        monkeypatch.setattr(
+            "urllib.request.urlopen",
+            lambda url, timeout=3: FakeUrlopen(),
+        )
+        lookup_groups._assert_cdp_reachable("http://localhost:9222")  # 不抛即通过
+
+
 @pytest.fixture()
 def bundle():
     tpl = {"context": {"user": {"delegationContext": {"externalOwnerId": "O1"}}},