@chainlesschain/personal-data-hub 0.4.28 → 0.4.30

package/lib/analysis-skills/overview.js

@@ -39,6 +39,18 @@ class OverviewSkill extends AnalysisSkill {
     if (until != null) q.until = until;
     const events = this.vault.queryEvents(q) || [];
 
+    // Accurate, uncapped app/type/total counts via SQL GROUP BY. queryEvents
+    // hard-caps at 10k rows, so deriving byApp/byType/total from `events`
+    // silently undercounts any app whose data is older than the recent-10k
+    // window — e.g. on a vault where one chat app dominates recent events,
+    // social-douyin showed 10 instead of its true 232. facetCounts honors the
+    // same since/until. (Row-derived spend/contacts/monthly stay sample-based —
+    // they need actual rows.)
+    const facets =
+      typeof this.vault.facetCounts === "function"
+        ? this.vault.facetCounts({ since, until })
+        : null;
+
     const byApp = new Map();
     const byType = new Map();
     const byMonth = new Map();
@@ -81,7 +93,11 @@ class OverviewSkill extends AnalysisSkill {
       if (citations.length < 50) citations.push(e.id);
     }
 
-    const byAppArr = [...byApp.entries()].map(([app, count]) => ({ app, count })).sort((a, b) => b.count - a.count);
+    const byAppArr = (
+      facets
+        ? Object.entries(facets.byAdapter).map(([app, count]) => ({ app, count }))
+        : [...byApp.entries()].map(([app, count]) => ({ app, count }))
+    ).sort((a, b) => b.count - a.count);
     const topContacts = [...contacts.entries()]
       .map(([personId, v]) => ({
         personId,
@@ -93,8 +109,8 @@ class OverviewSkill extends AnalysisSkill {
       .slice(0, topN);
 
     const summary = {
-      totalEvents: events.length,
-      appsActive: byApp.size,
+      totalEvents: facets ? facets.total : events.length,
+      appsActive: facets ? Object.keys(facets.byAdapter).length : byApp.size,
       period: { since: since || null, until: until || null },
       topAppName: byAppArr.length ? byAppArr[0].app : null,
     };
@@ -103,7 +119,11 @@ class OverviewSkill extends AnalysisSkill {
       skill: "analysis.overview",
       summary,
       byApp: byAppArr,
-      byType: [...byType.entries()].map(([type, count]) => ({ type, count })).sort((a, b) => b.count - a.count),
+      byType: (
+        facets
+          ? Object.entries(facets.bySubtype).map(([type, count]) => ({ type, count }))
+          : [...byType.entries()].map(([type, count]) => ({ type, count }))
+      ).sort((a, b) => b.count - a.count),
       monthlyActivity: [...byMonth.entries()].map(([monthKey, count]) => ({ monthKey, count })).sort((a, b) => a.monthKey.localeCompare(b.monthKey)),
       topContacts,
       spending: {

package/lib/analysis-skills/spending.js

@@ -30,6 +30,13 @@ const { AnalysisSkill } = require("./base");
 
 const SUPPORTED_DIMENSIONS = new Set(["merchant", "category", "counterparty", "month"]);
 
+// Event subtypes that carry content.amount (shared by the row fetch + the
+// accurate SQL-sum path). Phase 7 shopping adapters emit "order".
+const PAYMENT_SUBTYPES = [
+  "payment", "transfer", "refund", "utility",
+  "redenvelope", "investment", "income", "order",
+];
+
 class SpendingSkill extends AnalysisSkill {
   constructor(opts) {
     super({ ...opts, name: "analysis.spending" });
@@ -48,6 +55,19 @@ class SpendingSkill extends AnalysisSkill {
     const filtered = this._applyFilters(events, options);
 
     const summary = this._summarize(filtered, since, until);
+    // The row fetch caps at 5000 events PER subtype — a heavy alipay/wechat-pay
+    // user with >5000 payments would have their TOTAL silently undercounted.
+    // When no row-only filter is active (merchant text / personId / direction),
+    // recompute the headline totals from the uncapped SQL SUM. Breakdown / trend
+    // / citations stay row-sampled (they need actual rows).
+    const accurate = this._accurateTotals({ since, until }, options);
+    if (accurate) {
+      summary.totalSpend = accurate.totalSpend;
+      summary.totalIncome = accurate.totalIncome;
+      summary.netFlow = accurate.netFlow;
+      summary.eventCount = accurate.eventCount;
+      if (accurate.currency) summary.currency = accurate.currency;
+    }
     const breakdown = this._breakdown(filtered, dimension, topN);
     const trend = this._monthlyTrend(filtered);
     const citations = filtered.slice(0, 50).map((e) => e.id);
@@ -72,8 +92,7 @@ class SpendingSkill extends AnalysisSkill {
     // Phase 7 shopping adapters emit subtype="order" — must include so
     // spending aggregates cover Taobao/JD/Meituan along with Alipay
     // (payment/transfer) + Email (refund) etc.
-    const subtypes = ["payment", "transfer", "refund", "utility", "redenvelope", "investment", "income", "order"];
-    for (const subtype of subtypes) {
+    for (const subtype of PAYMENT_SUBTYPES) {
       const q = { subtype, limit: 5000 };
       if (since != null) q.since = since;
       if (until != null) q.until = until;
@@ -88,6 +107,48 @@ class SpendingSkill extends AnalysisSkill {
     return events;
   }
 
+  /**
+   * Accurate (uncapped) headline totals via vault.sumEventAmount — used only
+   * when the query has no filter SQL can't express. merchantFilter (text match
+   * on title/counterparty) and personId (participant expansion) need rows, and
+   * a direction filter changes which total/count is meaningful, so any of them
+   * → return null and fall back to the row-sampled summary. Returns null when
+   * the vault lacks sumEventAmount (older vault → original behavior).
+   */
+  _accurateTotals({ since, until }, options) {
+    if (
+      (typeof options.merchantFilter === "string" && options.merchantFilter.length > 0) ||
+      (typeof options.personId === "string" && options.personId.length > 0) ||
+      options.direction === "out" ||
+      options.direction === "in"
+    ) {
+      return null;
+    }
+    if (typeof this.vault.sumEventAmount !== "function") return null;
+    let totalSpend = 0;
+    let totalIncome = 0;
+    let eventCount = 0;
+    let currency = null;
+    for (const subtype of PAYMENT_SUBTYPES) {
+      const q = { subtype };
+      if (since != null) q.since = since;
+      if (until != null) q.until = until;
+      const r = this.vault.sumEventAmount(q);
+      if (!r) continue;
+      totalSpend += (r.byDirection && r.byDirection.out) || 0;
+      totalIncome += (r.byDirection && r.byDirection.in) || 0;
+      eventCount += r.count || 0;
+      if (!currency && r.count > 0 && r.currency) currency = r.currency;
+    }
+    return {
+      totalSpend: Math.round(totalSpend * 100) / 100,
+      totalIncome: Math.round(totalIncome * 100) / 100,
+      netFlow: Math.round((totalIncome - totalSpend) * 100) / 100,
+      eventCount,
+      currency,
+    };
+  }
+
   _applyFilters(events, options) {
     let out = events;
     if (typeof options.merchantFilter === "string" && options.merchantFilter.length > 0) {

package/lib/analysis-skills/timeline.js

@@ -63,12 +63,17 @@ class TimelineSkill extends AnalysisSkill {
   }
 
   _fetchEvents({ since, until }, limit) {
-    // Exclude inventory-snapshot events (installed-app roster + contact
-    // roster from system-data-android). They carry a synthetic
-    // collection-time occurredAt — tens of thousands of them cluster at one
-    // recent timestamp and would otherwise crowd out real activity from this
-    // chronological narrative. They remain in the vault for facet counts.
-    const q = { limit, excludeExtraKinds: ["app-snapshot", "contact-snapshot"] };
+    // Exclude inventory-snapshot + aggregate-baseline events. The snapshots
+    // (installed-app / contact roster from system-data-android) carry a
+    // synthetic collection-time occurredAt — tens of thousands cluster at one
+    // recent timestamp and would crowd out real activity. `app-usage-profile`
+    // is a single rolling aggregate (e.g. douyin "24天/108h" baseline), not a
+    // discrete activity, so it doesn't belong in a chronological narrative.
+    // All remain in the vault for facet counts / overview.
+    const q = {
+      limit,
+      excludeExtraKinds: ["app-snapshot", "contact-snapshot", "app-usage-profile"],
+    };
     if (since != null) q.since = since;
     if (until != null) q.until = until;
     const events = this.vault.queryEvents(q) || [];

package/lib/prompt-builder.js

@@ -48,11 +48,25 @@ const CROSS_APP_HEADER = "CROSS_APP_OVERVIEW (跨 app 汇聚画像 — 各 app
  * Trim an event down to the fields the LLM actually needs. Saves tokens +
  * reduces prompt injection surface (no raw `extra` blob).
  */
+// Local-time "YYYY-MM-DD HH:mm" for the LLM. Passing the raw epoch-ms integer
+// (e.g. 1781706182375) made the model unreliable on "when did I…" questions —
+// it can't dependably convert epoch ms to a date. buildPrompt runs on the
+// user's own machine (cc hub / desktop), so local getters are the user's TZ.
+function fmtLocalDateTime(ms) {
+  const d = new Date(ms);
+  if (!Number.isFinite(d.getTime())) return null;
+  const p = (n) => String(n).padStart(2, "0");
+  return (
+    `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())} ` +
+    `${p(d.getHours())}:${p(d.getMinutes())}`
+  );
+}
+
 function summarizeEvent(e) {
   const out = {
     id: e.id,
     type: e.subtype,
-    at: e.occurredAt,
+    at: fmtLocalDateTime(e.occurredAt) || e.occurredAt,
     source: e.source && e.source.adapter,
   };
   if (e.actor) out.actor = e.actor;

package/lib/query-parser.js

@@ -127,8 +127,16 @@ function parseTimeWindow(text, now = Date.now()) {
   if (m) {
     const n = parseInt(m[1], 10);
     if (Number.isFinite(n) && n > 0) {
+      // Safe month subtraction. Naive `setMonth(getMonth()-n)` overflows on a
+      // month-end day into a shorter month (e.g. Mar 31 −1mo → "Feb 31" → Mar 3),
+      // which silently DROPS the whole previous month from the window. Pin to
+      // day 1 first, then clamp the day to the target month's length.
       const target = new Date(now);
+      const day = target.getDate();
+      target.setDate(1);
       target.setMonth(target.getMonth() - n);
+      const lastDay = new Date(target.getFullYear(), target.getMonth() + 1, 0).getDate();
+      target.setDate(Math.min(day, lastDay));
       return { since: target.getTime(), until: now };
     }
   }
@@ -152,7 +160,10 @@ const SUBTYPE_KEYWORDS = [
   { subtype: "order", patterns: [/(订单|下单|买了|购买|下了几单|下了多少单|order)/i] },
   { subtype: "payment", patterns: [/(支付|付款|花了|花费|消费|开销|payment|spent|spend)/i] },
   { subtype: "transfer", patterns: [/(转账|转给|转钱|transfer)/i] },
-  { subtype: "income", patterns: [/(收入|工资|进账|收到|income)/i] },
+  // NOTE: bare 收到 ("receive") is deliberately NOT here — you 收到 messages /
+  // packages / 红包 too, so it stole "收到多少消息" → income (income is checked
+  // before message). 收到转账 still classifies as transfer (checked earlier).
+  { subtype: "income", patterns: [/(收入|工资|进账|入账|income)/i] },
   { subtype: "message", patterns: [/(聊天|消息|聊了|对话|message|chat)/i] },
   { subtype: "post", patterns: [/(朋友圈|发了|动态|moment|post)/i] },
   { subtype: "visit", patterns: [/(去过|到过|visited|去了|来到)/i] },
@@ -201,20 +212,39 @@ function parseFilters(text) {
 
 // ─── Intent detection (sum / count / list / latest / ...) ────────────────
 
+// Amount/money words — BOTH the spend side (花/消费/开销/spent/金额) and the
+// income side (收入/进账/到账/赚/挣). A question carrying one of these plus a
+// "多少/how much" wants a SUM (sumEventAmount), not a row list.
+const AMOUNT_HINT =
+  /(花|花了|花费|消费|开销|spent|金额|多少钱|amount|收入|进账|到账|入账|赚|挣)/;
+// Count quantifier: "多少X" or "几X" for a measure word. 钱 is deliberately
+// EXCLUDED so "多少钱" routes to sum-amount, not count. Symmetric 多少/几 (the
+// old pattern had 几条/几单 but not 多少条/多少单, and 多少部 but not 几部).
+const COUNT_QUANTIFIER =
+  /(多少|几)(次|条|单|个|家|人|张|部|篇|集|本|件|笔|顿|杯)|how\s+many|count\s+of/i;
+const HOW_MUCH = /(多少钱|多少|how\s+much)/i;
+
 function parseIntent(text) {
   if (typeof text !== "string") return "list";
   if (/(总共|共多少|加起来|sum|total|合计)/.test(text)) {
-    // Distinguish amount vs count by presence of currency words.
-    if (/(花|花了|花费|消费|开销|spent|金额|多少钱|amount)/.test(text)) return "sum-amount";
+    // Distinguish amount vs count by presence of amount words (incl. income,
+    // so "总共收入多少" is sum-amount, not count).
+    if (AMOUNT_HINT.test(text)) return "sum-amount";
     return "count";
   }
-  // Count intents: 几次/条/单/个 / 多少个/家/人/张/部 / how many / count of
-  // 2026-05-21: extended "几个 X" / "多少个 X" — needed for "几个联系人"
-  // and "几个 app" which prior pattern missed (returned "list" → LLM had no
-  // hint to read authoritative TOTALS instead of the FACTS sample length).
-  if (/(多少次|几次|几条|几单|几个|多少个|多少家|多少人|多少张|多少部|how\s+many|count\s+of)/i.test(text)) {
+  // Count: 多少X / 几X for a measure word ("多少条朋友圈" / "下了几单" /
+  // "几个联系人"). Runs BEFORE the bare-sum rule so "消费了多少次" → count.
+  if (COUNT_QUANTIFIER.test(text)) {
     return "count";
   }
+  // Spend/income question without an explicit 总共/合计 — "(这个月)花了多少钱" /
+  // "在淘宝花了多少" / "这个月收入多少" / "赚了多少". The amount word + a
+  // "多少/how much" ⇒ a TOTAL. Without this these common phrasings fell through
+  // to intent=list and the engine returned a row sample, not the authoritative
+  // sumEventAmount total.
+  if (AMOUNT_HINT.test(text) && HOW_MUCH.test(text)) {
+    return "sum-amount";
+  }
   if (/(最近|最新|latest|recent)/i.test(text)) return "latest";
   return "list";
 }

package/package.json

@@ -1,9 +1,12 @@
 {
   "name": "@chainlesschain/personal-data-hub",
-  "version": "0.4.28",
+  "version": "0.4.30",
   "description": "Personal Data Hub — UnifiedSchema + validators + KG ingest helpers for the data-back-to-the-individual middleware",
   "type": "commonjs",
   "main": "lib/index.js",
+  "files": [
+    "lib/"
+  ],
   "exports": {
     ".": "./lib/index.js",
     "./constants": "./lib/constants.js",

package/__tests__/adapter-guide.test.js

@@ -1,47 +0,0 @@
-"use strict";
-
-import { describe, it, expect } from "vitest";
-
-const { getAdapterGuide, ADAPTER_OVERRIDES } = require("../lib/adapter-guide");
-
-describe("adapter-guide", () => {
-  it("wechat-pc guide reflects the 4.0 one-click reality (no manual PyWxDump as primary)", () => {
-    const g = getAdapterGuide("wechat-pc", "device");
-    // primary method is the automatic one-click, not manual decryption
-    const primary = g.methods[0];
-    expect(primary.recommended).toBe(true);
-    expect(primary.label).toMatch(/一键|自动/);
-    expect(primary.steps.join(" ")).toMatch(/一键采集|自动/);
-    // summary mentions the full coverage we now capture
-    expect(g.summary).toMatch(/公众号/);
-    expect(g.summary).toMatch(/朋友圈/);
-    expect(g.summary).toMatch(/收藏/);
-    // manual 3.x path is still offered as a fallback
-    expect(g.methods.some((m) => /3\.x|PyWxDump|手动/.test(m.label + m.steps.join(" ")))).toBe(true);
-  });
-
-  it("the 6 social platforms all have a tailored one-click ADB guide", () => {
-    for (const name of [
-      "social-bilibili",
-      "social-weibo",
-      "social-douyin",
-      "social-xiaohongshu",
-      "social-toutiao",
-      "social-kuaishou",
-    ]) {
-      expect(ADAPTER_OVERRIDES[name]).toBeTruthy();
-      const g = getAdapterGuide(name, "device");
-      const primary = g.methods[0];
-      expect(primary.recommended).toBe(true);
-      // recommended path is root-phone + one-click, not "go log in on the web"
-      expect(primary.label + primary.steps.join(" ")).toMatch(/一键|ADB|USB|root/i);
-    }
-  });
-
-  it("unknown adapter falls back to a category guide without throwing", () => {
-    const g = getAdapterGuide("totally-unknown", "snapshot");
-    expect(g.category).toBe("snapshot");
-    expect(Array.isArray(g.methods)).toBe(true);
-    expect(g.methods.length).toBeGreaterThan(0);
-  });
-});

package/__tests__/adapter-spec.test.js

@@ -1,78 +0,0 @@
-"use strict";
-
-import { describe, it, expect } from "vitest";
-
-const { assertAdapter, SENSITIVITY_LEVELS } = require("../lib/adapter-spec");
-const { MockAdapter } = require("../lib/mock-adapter");
-
-describe("assertAdapter", () => {
-  it("accepts a fully-valid adapter (MockAdapter)", () => {
-    const r = assertAdapter(new MockAdapter());
-    expect(r.ok).toBe(true);
-  });
-
-  it("rejects non-object input", () => {
-    expect(assertAdapter(null).ok).toBe(false);
-    expect(assertAdapter(undefined).ok).toBe(false);
-    expect(assertAdapter("oops").ok).toBe(false);
-  });
-
-  it("rejects missing required fields (collects all errors, no throw)", () => {
-    const r = assertAdapter({});
-    expect(r.ok).toBe(false);
-    // Many fields missing — at least name + version + capabilities + dataDisclosure + methods.
-    expect(r.errors.length).toBeGreaterThan(4);
-    expect(r.errors.some((e) => e.includes("name"))).toBe(true);
-    expect(r.errors.some((e) => e.includes("version"))).toBe(true);
-    expect(r.errors.some((e) => e.includes("authenticate"))).toBe(true);
-    expect(r.errors.some((e) => e.includes("sync"))).toBe(true);
-  });
-
-  it("rejects invalid sensitivity", () => {
-    const a = new MockAdapter();
-    a.dataDisclosure = { ...a.dataDisclosure, sensitivity: "extreme" };
-    const r = assertAdapter(a);
-    expect(r.ok).toBe(false);
-    expect(r.errors.some((e) => e.includes("sensitivity"))).toBe(true);
-  });
-
-  it("rejects non-boolean legalGate", () => {
-    const a = new MockAdapter();
-    a.dataDisclosure = { ...a.dataDisclosure, legalGate: "yes" };
-    const r = assertAdapter(a);
-    expect(r.ok).toBe(false);
-  });
-
-  it("rejects non-array capabilities", () => {
-    const a = new MockAdapter();
-    a.capabilities = "sync";
-    const r = assertAdapter(a);
-    expect(r.ok).toBe(false);
-  });
-
-  it("rejects rateLimits with negative value", () => {
-    const a = new MockAdapter();
-    a.rateLimits = { perMinute: -1 };
-    expect(assertAdapter(a).ok).toBe(false);
-  });
-
-  it("accepts adapter without rateLimits (optional field)", () => {
-    const a = new MockAdapter();
-    delete a.rateLimits;
-    expect(assertAdapter(a).ok).toBe(true);
-  });
-
-  it("rejects non-function authenticate / sync / normalize / healthCheck", () => {
-    const a = new MockAdapter();
-    a.authenticate = "not a function";
-    expect(assertAdapter(a).ok).toBe(false);
-
-    const b = new MockAdapter();
-    b.normalize = 42;
-    expect(assertAdapter(b).ok).toBe(false);
-  });
-
-  it("SENSITIVITY_LEVELS lists low/medium/high", () => {
-    expect(SENSITIVITY_LEVELS).toEqual(["low", "medium", "high"]);
-  });
-});

package/__tests__/adapters/ai-chat-cookie-capture-spec.test.js

@@ -1,211 +0,0 @@
-"use strict";
-
-import { describe, it, expect } from "vitest";
-
-const {
-  COOKIE_SPEC_VERSION,
-  KNOWN_VENDORS,
-  COOKIE_CAPTURE_SPECS,
-  getSpec,
-  listVendors,
-  classifyProbedCookies,
-  validateCookieCaptureSpec,
-  _internal,
-} = require("../../lib/adapters/ai-chat-history/cookie-capture-spec");
-
-describe("cookie-capture-spec — Phase 10.3.1 matrix", () => {
-  it("exposes a positive integer COOKIE_SPEC_VERSION", () => {
-    expect(Number.isInteger(COOKIE_SPEC_VERSION)).toBe(true);
-    expect(COOKIE_SPEC_VERSION).toBeGreaterThanOrEqual(1);
-  });
-
-  it("KNOWN_VENDORS contains exactly the 9 wired vendors", () => {
-    expect(KNOWN_VENDORS).toEqual([
-      "deepseek",
-      "kimi",
-      "tongyi",
-      "zhipu",
-      "hunyuan",
-      "qianfan",
-      "coze",
-      "dreamina",
-      "doubao",
-    ]);
-    // Defensive — frozen so contributors don't accidentally mutate at runtime.
-    expect(Object.isFrozen(KNOWN_VENDORS)).toBe(true);
-  });
-
-  it("ships 9 specs, one per KNOWN_VENDORS entry, no duplicates", () => {
-    expect(COOKIE_CAPTURE_SPECS.length).toBe(KNOWN_VENDORS.length);
-    const seen = new Set();
-    for (const s of COOKIE_CAPTURE_SPECS) {
-      expect(KNOWN_VENDORS).toContain(s.vendor);
-      expect(seen.has(s.vendor)).toBe(false);
-      seen.add(s.vendor);
-    }
-  });
-
-  it("validates the shipped spec set without errors", () => {
-    const r = validateCookieCaptureSpec(undefined, { throwOnError: false });
-    expect(r.errors).toEqual([]);
-    expect(r.ok).toBe(true);
-  });
-
-  it("each loginUrl host matches at least one cookieDomains entry", () => {
-    for (const s of COOKIE_CAPTURE_SPECS) {
-      const host = new URL(s.loginUrl).host;
-      const matched = s.cookieDomains.some((d) =>
-        d.startsWith(".") ? host.endsWith(d.slice(1)) : host === d,
-      );
-      expect({ vendor: s.vendor, host, matched }).toEqual({ vendor: s.vendor, host, matched: true });
-    }
-  });
-
-  it("each spec has non-empty requiredCookies + postLoginPathHints + positive maxAge", () => {
-    for (const s of COOKIE_CAPTURE_SPECS) {
-      expect(Array.isArray(s.requiredCookies)).toBe(true);
-      expect(s.requiredCookies.length).toBeGreaterThan(0);
-      expect(Array.isArray(s.postLoginPathHints)).toBe(true);
-      expect(s.postLoginPathHints.length).toBeGreaterThan(0);
-      expect(Number.isInteger(s.cookieMaxAgeHintDays)).toBe(true);
-      expect(s.cookieMaxAgeHintDays).toBeGreaterThan(0);
-      expect(typeof s.notes).toBe("string");
-      expect(s.notes.length).toBeGreaterThan(0);
-    }
-  });
-
-  it("getSpec returns the right spec for a known vendor and null for unknown", () => {
-    const ds = getSpec("deepseek");
-    expect(ds).toBeTruthy();
-    expect(ds.vendor).toBe("deepseek");
-    expect(getSpec("notarealvendor")).toBeNull();
-    expect(getSpec("")).toBeNull();
-    expect(getSpec(undefined)).toBeNull();
-    expect(getSpec(null)).toBeNull();
-  });
-
-  it("listVendors returns a copy (mutation does not affect KNOWN_VENDORS)", () => {
-    const arr = listVendors();
-    expect(arr).toEqual([...KNOWN_VENDORS]);
-    arr.push("hacked");
-    expect(KNOWN_VENDORS.includes("hacked")).toBe(false);
-  });
-});
-
-describe("classifyProbedCookies — required vs optional vs missing", () => {
-  it("returns ok=true when all required cookies present (object input)", () => {
-    const r = classifyProbedCookies("deepseek", {
-      userToken: "abc",
-      "intercom-session-deepseek": "xyz",
-    });
-    expect(r.ok).toBe(true);
-    expect(r.foundRequired).toEqual(["userToken"]);
-    expect(r.missingRequired).toEqual([]);
-    expect(r.foundOptional).toEqual(["intercom-session-deepseek"]);
-  });
-
-  it("returns ok=false when a required cookie is missing", () => {
-    const r = classifyProbedCookies("kimi", { refresh_token: "rt", session_id: "sid" });
-    expect(r.ok).toBe(false);
-    expect(r.missingRequired).toEqual(["access_token"]);
-    expect(r.foundOptional.sort()).toEqual(["refresh_token", "session_id"]);
-  });
-
-  it("accepts Electron Cookie[] shape (array of { name, value })", () => {
-    const r = classifyProbedCookies("zhipu", [
-      { name: "chatglm_token", value: "tok" },
-      { name: "cgsessionid", value: "sid" },
-      { name: "unrelated", value: "x" },
-    ]);
-    expect(r.ok).toBe(true);
-    expect(r.foundRequired).toEqual(["chatglm_token"]);
-    expect(r.foundOptional).toContain("cgsessionid");
-  });
-
-  it("accepts raw 'k=v; k=v' string (web-shell paste fallback)", () => {
-    const raw = "sessionid=abc; sid_guard=xyz; passport_csrf_token=csrf;  ;junk";
-    const r = classifyProbedCookies("doubao", raw);
-    expect(r.ok).toBe(true);
-    expect(r.foundRequired).toEqual(["sessionid"]);
-    expect(r.foundOptional.sort()).toEqual(["passport_csrf_token", "sid_guard"]);
-  });
-
-  it("string parser tolerates values containing '=' (e.g. base64)", () => {
-    // sessionid is base64 with '=' padding; only the FIRST '=' is the delimiter.
-    const raw = "sessionid=YWJjZGVmZ2g=; sid_guard=v1=";
-    const r = classifyProbedCookies("coze", raw);
-    expect(r.ok).toBe(true);
-    expect(r.foundRequired).toEqual(["sessionid"]);
-    // raw cookie value must be preserved verbatim including the trailing '='
-    const jar = _internal._normalizeCookieJar(raw);
-    expect(jar.sessionid).toBe("YWJjZGVmZ2g=");
-  });
-
-  it("empty string / null / undefined / wrong type all produce ok=false", () => {
-    for (const input of ["", null, undefined, 42, true]) {
-      const r = classifyProbedCookies("doubao", input);
-      expect(r.ok).toBe(false);
-      expect(r.missingRequired).toEqual(["sessionid"]);
-    }
-  });
-
-  it("returns UNKNOWN_VENDOR reason for an unregistered vendor name", () => {
-    const r = classifyProbedCookies("notarealvendor", { anything: "x" });
-    expect(r.ok).toBe(false);
-    expect(r.reason).toBe("UNKNOWN_VENDOR");
-  });
-
-  it("treats empty-string cookie value as missing (not present)", () => {
-    const r = classifyProbedCookies("deepseek", { userToken: "" });
-    expect(r.ok).toBe(false);
-    expect(r.foundRequired).toEqual([]);
-    expect(r.missingRequired).toEqual(["userToken"]);
-  });
-});
-
-describe("validateCookieCaptureSpec — defensive guard catches malformed specs", () => {
-  it("flags unknown vendor", () => {
-    const { ok, errors } = validateCookieCaptureSpec(
-      [{ ...COOKIE_CAPTURE_SPECS[0], vendor: "ghostvendor" }],
-      { throwOnError: false },
-    );
-    expect(ok).toBe(false);
-    expect(errors.join(" ")).toMatch(/unknown vendor/);
-  });
-
-  it("flags loginUrl host not matching any cookieDomain", () => {
-    const broken = {
-      ...COOKIE_CAPTURE_SPECS[0],
-      loginUrl: "https://malicious.example.com/",
-    };
-    const { ok, errors } = validateCookieCaptureSpec([broken], { throwOnError: false });
-    expect(ok).toBe(false);
-    expect(errors.join(" ")).toMatch(/does not match any cookieDomain/);
-  });
-
-  it("flags empty requiredCookies / postLoginPathHints / invalid maxAge", () => {
-    const broken = {
-      ...COOKIE_CAPTURE_SPECS[0],
-      requiredCookies: [],
-      postLoginPathHints: [],
-      cookieMaxAgeHintDays: 0,
-    };
-    const { ok, errors } = validateCookieCaptureSpec([broken], { throwOnError: false });
-    expect(ok).toBe(false);
-    const joined = errors.join(" ");
-    expect(joined).toMatch(/requiredCookies/);
-    expect(joined).toMatch(/postLoginPathHints/);
-    expect(joined).toMatch(/cookieMaxAgeHintDays/);
-  });
-
-  it("flags duplicate vendor entries", () => {
-    const dup = [COOKIE_CAPTURE_SPECS[0], { ...COOKIE_CAPTURE_SPECS[0] }];
-    const { ok, errors } = validateCookieCaptureSpec(dup, { throwOnError: false });
-    expect(ok).toBe(false);
-    expect(errors.join(" ")).toMatch(/duplicate vendor/);
-  });
-
-  it("throws by default when malformed (no opts)", () => {
-    expect(() => validateCookieCaptureSpec([{ vendor: "ghost" }])).toThrow(/Invalid cookie capture spec/);
-  });
-});