agent: add adapter for Takealot

[alectimison-maker]

Summary

• add a Takealot site adapter to Chrome and Firefox
• guide the agent through marketplace seller identity, South African delivery/collection, special product types, and checkout-only truth
• test strict matching, spoof rejection, key prompt contracts, and browser parity

Motivation

Takealot is listed as a high-priority African site in CONTRIBUTING.md. Its checkout has several easy failure modes for a browser agent: third-party products use the normal ordering flow, delivery dates and fees depend on checkout choices, pre-orders cannot be mixed with other products, digital products cannot be cancelled, and an optional donation can appear before the final order summary.

The behavior is based on Takealot's current official Help Centre pages for products and marketplace sellers, delivery and collection, pre-orders, placing orders, and cancellations.

Design

The adapter strictly matches the apex and www.takealot.com hosts. Six dated bullets focus on stable visible labels and transaction states rather than selectors. The implementation is mirrored exactly across both browser builds.

This is site-specific instead of reusing Amazon guidance because Pickup Points, isolated pre-orders, the R5 donation step, and Takealot's delivery rules are different.

Testing

• focused production-module contract check for trusted URLs, spoofed URLs, and Chrome/Firefox parity — passed
• node test/security/injection-corpus.mjs — 60/60 passed
• node test/run.js — the new Takealot test passed; the command still exits 1 on the upstream baseline's existing package/changelog mismatch (26.0.1 versus 26.0.0)

Compatibility and risks

This is additive prompt guidance only: no API, config, storage, permission, or format changes. The main residual risk is future UI terminology drift, so the notes are dated 2026-08 and avoid selectors. No live account, payment, or extension trace was used in this environment.

Scope

This PR intentionally covers only Takealot. Other African marketplaces remain separate adapter contributions.

[vercel]

@alectimison-maker is attempting to deploy a commit to the esokullu's projects Team on Vercel.

A member of the Team first needs to authorize it.