[S3-E.2] algorand: REST template fixed + 2 cli.py contract bugs

S3-E wave-E, chain 2/5. Surface objective: switch single method to
GET /v2/accounts/{address} and add _meta.rest_paths. Real work: while
verifying, discovered TWO latent production bugs in cli.py + tests that
were silently masking REST-chain correctness across all 5 REST chains.

Changes:

1. config/chains/algorand.json
   - rpc_methods.single: 'GET /v2/status' (health probe, no addr)
     -> 'GET /v2/accounts/{address}' (account info with address)
   - Added _meta.rest_paths: 6 entries (5 bench methods + health).
     Note: algorand path templates already use {address} (matches
     RestAdapter's only-substituted placeholder), unlike aptos where
     param_formats keys say {addr} but path values must say {address}.
   - Added _meta.health_probe: GET /v2/status + parse_jq
     '.[\"last-round\"]' (algod 节点 status endpoint).

2. tools/chain_adapters/cli.py — fix env-poisoning contract bug
   All 3 commands (cmd_build_target / cmd_build_targets_batch /
   cmd_health_probe) used os.environ.setdefault(\"BLOCKCHAIN_NODE\",
   args.chain). This is silently wrong: if the parent process had
   BLOCKCHAIN_NODE already set to chain X, then `cli.py --chain Y`
   would set adapter=Y but BLOCKCHAIN_NODE=X, so RestAdapter would
   query chain X's _meta.rest_paths for chain Y's methods. Result:
   either ValueError (method not in X's map) or silent wrong-chain
   target generation. Fixed: always override BLOCKCHAIN_NODE with
   args.chain — explicit user intent must win over inherited env.

3. tests/test_chain_adapters.py — fix env-leak from test_7 → test_10
   test_rest_requires_env_and_path_map() set os.environ['BLOCKCHAIN_NODE']
   = 'aptos' without cleanup. The test_10 subprocess inherited this,
   triggering exactly the cli.py setdefault bug above. Wrapped the test
   body in try/finally to restore the env to its pre-test state.

   This explains why S3-E.1 reported 'aptos healthy': the cli.py
   queries all flowed through aptos's rest_paths, so any chain whose
   single method name happened to also exist in aptos's map looked
   healthy. Real correctness signal had been suppressed.

4. tests/test_chain_adapters.py KNOWN_BROKEN_CLI
   - Removed 'algorand' (now healthy via cli.py).
   - len() assertion: 15 -> 14.

Verification:
- L1 (unit): 10/10 PASS
- L1-CLI gate: healthy 21->22, broken 15->14, set matches
- L3 (real target_generator.sh pipeline):
    exit=0, \"Using single method: GET /v2/accounts/{address}\"
    \"Successfully generated 2 test targets\"
    out file: {\"method\":\"GET\",\"url\":\"http://.../v2/accounts/Q5W\",...}
              {\"method\":\"GET\",\"url\":\"http://.../v2/accounts/TESTADDR2\",...}

Diagnostic credit: L1-CLI invariant ledger caught both bugs immediately.
Without the monotonic-shrink guard, the wrong-chain target generation
would have shipped silently and only surfaced in S4 e2e against live
nodes.

Author: StayHungryStayFoolish

config/chains/algorand.json

@@ -17,7 +17,7 @@
     "tx_batch_size": "ACCOUNT_TX_BATCH_SIZE"
   },
   "rpc_methods": {
-    "single": "GET /v2/status",
+    "single": "GET /v2/accounts/{address}",
     "mixed": "GET /v2/accounts/{address},GET /v2/transactions/{txid},GET /v2/blocks/{round},GET /v2/assets/{asset_id},GET /v2/accounts/{address}/transactions"
   },
   "rpc_url": "LOCAL_RPC_URL",
@@ -55,6 +55,15 @@
     "original_notes": "双节点架构(algod + indexer),每 method 需 node_role 路由;Base32 地址 58 字符;ASA 持仓内嵌于 accounts 响应",
     "adapter_required": true,
     "adapter_family": "rest",
-    "adapter_family_assigned_at": "2026-05-24T05:24:00.591042Z"
+    "adapter_family_assigned_at": "2026-05-24T05:24:00.591042Z",
+    "rest_paths": {
+      "GET /v2/accounts/{address}": {"method": "GET", "path": "/v2/accounts/{address}"},
+      "GET /v2/transactions/{txid}": {"method": "GET", "path": "/v2/transactions/{address}"},
+      "GET /v2/blocks/{round}": {"method": "GET", "path": "/v2/blocks/{address}"},
+      "GET /v2/assets/{asset_id}": {"method": "GET", "path": "/v2/assets/{address}"},
+      "GET /v2/accounts/{address}/transactions": {"method": "GET", "path": "/v2/accounts/{address}/transactions"},
+      "GET /v2/status": {"method": "GET", "path": "/v2/status"}
+    },
+    "health_probe": {"method": "GET", "path": "/v2/status", "parse_jq": ".[\"last-round\"]"}
   }
 }

tests/test_chain_adapters.py

@@ -214,22 +214,32 @@ def test_bitcoin_auth():
 # ─────────────────────────────────────────────────────────────────────────────
 def test_rest_requires_env_and_path_map():
     print("\n[7] RestAdapter requires BLOCKCHAIN_NODE + _meta.rest_paths")
-    os.environ.pop("BLOCKCHAIN_NODE", None)
-    a = get_adapter("aptos")
-    try:
-        a.build_vegeta_target("GET_ACCOUNT", "0xabc", "http://localhost:8080", "")
-        _fail("expected RuntimeError without BLOCKCHAIN_NODE")
-    except RuntimeError as e:
-        _ok(f"RuntimeError correctly raised: {e}")
-
-    # With env set but no rest_paths in template, expect ValueError
-    os.environ["BLOCKCHAIN_NODE"] = "aptos"
+    # Save original to restore at end — otherwise leaks into test_10's
+    # subprocess env and silently hijacks RestAdapter chain resolution.
+    _saved_env = os.environ.get("BLOCKCHAIN_NODE")
     try:
+        os.environ.pop("BLOCKCHAIN_NODE", None)
         a = get_adapter("aptos")
-        a.build_vegeta_target("nonexistent_method", "0xabc", "http://localhost:8080", "")
-        _fail("expected ValueError for unknown method")
-    except ValueError as e:
-        _ok(f"ValueError correctly raised for unknown method: {e}")
+        try:
+            a.build_vegeta_target("GET_ACCOUNT", "0xabc", "http://localhost:8080", "")
+            _fail("expected RuntimeError without BLOCKCHAIN_NODE")
+        except RuntimeError as e:
+            _ok(f"RuntimeError correctly raised: {e}")
+
+        # With env set but no rest_paths in template, expect ValueError
+        os.environ["BLOCKCHAIN_NODE"] = "aptos"
+        try:
+            a = get_adapter("aptos")
+            a.build_vegeta_target("nonexistent_method", "0xabc", "http://localhost:8080", "")
+            _fail("expected ValueError for unknown method")
+        except ValueError as e:
+            _ok(f"ValueError correctly raised for unknown method: {e}")
+    finally:
+        # Restore original env state (or remove if it wasn't set)
+        if _saved_env is None:
+            os.environ.pop("BLOCKCHAIN_NODE", None)
+        else:
+            os.environ["BLOCKCHAIN_NODE"] = _saved_env
 
 
 # ─────────────────────────────────────────────────────────────────────────────
@@ -333,7 +343,6 @@ def test_evm_compat_5chains_standard_enum():
     # F1: rpc_methods.single picked a health-probe (no address) instead of
     #     a real benchmark method. Fix = pick a method from param_formats
     #     that takes an address. Pure chain-template edit, no adapter work.
-    "algorand":  ("F1", "S3-E", "single='GET /v2/status' is health-probe; use 'GET /v2/accounts/{address}'"),
     "hedera":    ("F1", "S3-E", "single='mirror_account_query' is logical name, no real path; use 'mirror_balance_query' or 'eth_getBalance'"),
     "tezos":     ("F1", "S3-E", "single='GET /chains/main/blocks/head/header' has no address; use '/contracts/{addr}/balance'"),
     "ton":       ("F1", "S3-E", "single='getMasterchainInfo' is health-probe; use 'getAddressBalance'"),
@@ -359,7 +368,7 @@ def test_evm_compat_5chains_standard_enum():
     "acala":     ("F3", "S3-C", "family=substrate; single='system_chain' has no address; pick eth_getBalance from param_formats"),
 }
 
-assert len(KNOWN_BROKEN_CLI) == 15, f"KNOWN_BROKEN_CLI must have exactly 15 entries (commit 436e1d0 baseline minus aptos fixed in S3-E.1), got {len(KNOWN_BROKEN_CLI)}"
+assert len(KNOWN_BROKEN_CLI) == 14, f"KNOWN_BROKEN_CLI must have exactly 14 entries (baseline 16 minus aptos S3-E.1 minus algorand S3-E.2), got {len(KNOWN_BROKEN_CLI)}"
 
 
 def _sample_address_for(family: str) -> str:

tools/chain_adapters/cli.py

@@ -44,7 +44,13 @@ def _get_param_format(chain: str, method: str) -> str:
 def cmd_build_target(args):
     adapter = get_adapter(args.chain)
     # Honor BLOCKCHAIN_NODE so RestAdapter can resolve _meta.rest_paths
-    os.environ.setdefault("BLOCKCHAIN_NODE", args.chain)
+    # --chain is the explicit user intent; ALWAYS override any inherited
+    # BLOCKCHAIN_NODE env var (setdefault is wrong here: it lets a stale
+    # parent-process value silently hijack the call and route RestAdapter
+    # to the wrong chain template — caught in S3-E.2 when test_7 leaked
+    # BLOCKCHAIN_NODE=aptos into the test_10 subprocess and all algorand
+    # CLI calls then queried aptos's rest_paths).
+    os.environ["BLOCKCHAIN_NODE"] = args.chain
     param_format = args.param_format or _get_param_format(args.chain, args.method)
     target = adapter.build_vegeta_target(
         method=args.method,
@@ -64,7 +70,7 @@ def cmd_build_targets_batch(args):
     amortizes across all targets in one process).
     """
     adapter = get_adapter(args.chain)
-    os.environ.setdefault("BLOCKCHAIN_NODE", args.chain)
+    os.environ["BLOCKCHAIN_NODE"] = args.chain  # always override; see cmd_build_target
     # Pre-cache param_format per method
     pf_cache: dict[str, str] = {}
     out = sys.stdout
@@ -92,7 +98,7 @@ def cmd_build_targets_batch(args):
 
 def cmd_health_probe(args):
     adapter = get_adapter(args.chain)
-    os.environ.setdefault("BLOCKCHAIN_NODE", args.chain)
+    os.environ["BLOCKCHAIN_NODE"] = args.chain  # always override; see cmd_build_target
     req = adapter.health_check_request(args.rpc_url)
     print(json.dumps(req, separators=(",", ":")))