agent-messenger 2.10.1 → 2.10.2

package/src/shared/chromium/browsers.test.ts

@@ -1,4 +1,4 @@
-import { afterEach, describe, expect, test } from 'bun:test'
+import { afterEach, describe, expect, it } from 'bun:test'
 import { existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
@@ -26,34 +26,34 @@ describe('browsers', () => {
   })
 
   describe('CHROMIUM_BROWSERS', () => {
-    test('has 7 browsers', () => {
+    it('has 7 browsers', () => {
       expect(CHROMIUM_BROWSERS).toHaveLength(7)
     })
 
-    test('includes major supported browsers', () => {
+    it('includes major supported browsers', () => {
       const browserNames = CHROMIUM_BROWSERS.map((browser) => browser.name)
 
       expect(browserNames).toEqual(expect.arrayContaining(['Chrome', 'Edge', 'Arc', 'Brave', 'Vivaldi', 'Chromium']))
     })
 
-    test('Arc has empty linux path', () => {
+    it('Arc has empty linux path', () => {
       expect(CHROMIUM_BROWSERS.find((browser) => browser.name === 'Arc')?.linux).toBe('')
     })
   })
 
   describe('BROWSER_KEYCHAIN_VARIANTS', () => {
-    test('has 7 keychain variants', () => {
+    it('has 7 keychain variants', () => {
       expect(BROWSER_KEYCHAIN_VARIANTS).toHaveLength(7)
     })
 
-    test('each variant has service and account properties', () => {
+    it('each variant has service and account properties', () => {
       for (const variant of BROWSER_KEYCHAIN_VARIANTS) {
         expect(variant.service).toBeString()
         expect(variant.account).toBeString()
       }
     })
 
-    test('includes known safe storage services', () => {
+    it('includes known safe storage services', () => {
       const services = BROWSER_KEYCHAIN_VARIANTS.map((variant) => variant.service)
 
       expect(services).toEqual(expect.arrayContaining(['Chrome Safe Storage', 'Microsoft Edge Safe Storage']))
@@ -61,7 +61,7 @@ describe('browsers', () => {
   })
 
   describe('getBrowserBasePath', () => {
-    test('returns darwin path with Library/Application Support prefix', () => {
+    it('returns darwin path with Library/Application Support prefix', () => {
       // given
       const chrome = CHROMIUM_BROWSERS.find((browser) => browser.name === 'Chrome')!
 
@@ -74,7 +74,7 @@ describe('browsers', () => {
       expect(path).toEndWith(join('Google', 'Chrome'))
     })
 
-    test('returns linux path with .config prefix', () => {
+    it('returns linux path with .config prefix', () => {
       // given
       const chrome = CHROMIUM_BROWSERS.find((browser) => browser.name === 'Chrome')!
 
@@ -86,7 +86,7 @@ describe('browsers', () => {
       expect(path).toContain(join('.config', 'google-chrome'))
     })
 
-    test('returns win32 path with LOCALAPPDATA prefix', () => {
+    it('returns win32 path with LOCALAPPDATA prefix', () => {
       // given
       const localAppData = mkdtempSync(join(tmpdir(), 'browser-localappdata-'))
       tempDirs.push(localAppData)
@@ -100,7 +100,7 @@ describe('browsers', () => {
       expect(path).toBe(join(localAppData, 'Google', 'Chrome', 'User Data'))
     })
 
-    test('returns null for unsupported platform', () => {
+    it('returns null for unsupported platform', () => {
       // given
       const chrome = CHROMIUM_BROWSERS.find((browser) => browser.name === 'Chrome')!
 
@@ -111,7 +111,7 @@ describe('browsers', () => {
       expect(path).toBeNull()
     })
 
-    test('returns null when browser has empty path for platform', () => {
+    it('returns null when browser has empty path for platform', () => {
       // given
       const arc = CHROMIUM_BROWSERS.find((browser) => browser.name === 'Arc')!
 
@@ -124,7 +124,7 @@ describe('browsers', () => {
   })
 
   describe('discoverBrowserProfileDirs', () => {
-    test('always includes Default dir even when base does not exist', () => {
+    it('always includes Default dir even when base does not exist', () => {
       // given
       const browserBase = join(tmpdir(), `missing-browser-base-${Date.now()}-${Math.random().toString(36).slice(2)}`)
 
@@ -135,7 +135,7 @@ describe('browsers', () => {
       expect(dirs).toEqual([join(browserBase, 'Default')])
     })
 
-    test('discovers Profile 1 and Profile 2 dirs when they exist', () => {
+    it('discovers Profile 1 and Profile 2 dirs when they exist', () => {
       // given
       const browserBase = mkdtempSync(join(tmpdir(), 'browser-profiles-'))
       tempDirs.push(browserBase)
@@ -153,7 +153,7 @@ describe('browsers', () => {
       ])
     })
 
-    test('ignores non-profile directories', () => {
+    it('ignores non-profile directories', () => {
       // given
       const browserBase = mkdtempSync(join(tmpdir(), 'browser-non-profile-'))
       tempDirs.push(browserBase)
@@ -168,7 +168,7 @@ describe('browsers', () => {
       expect(dirs).toEqual([join(browserBase, 'Default'), join(browserBase, 'Profile 1')])
     })
 
-    test('ignores files that match profile pattern', () => {
+    it('ignores files that match profile pattern', () => {
       // given
       const browserBase = mkdtempSync(join(tmpdir(), 'browser-profile-files-'))
       tempDirs.push(browserBase)
@@ -182,7 +182,7 @@ describe('browsers', () => {
       expect(dirs).toEqual([join(browserBase, 'Default'), join(browserBase, 'Profile 2')])
     })
 
-    test('returns only Default when base directory is empty', () => {
+    it('returns only Default when base directory is empty', () => {
       // given
       const browserBase = mkdtempSync(join(tmpdir(), 'browser-empty-'))
       tempDirs.push(browserBase)
@@ -196,7 +196,7 @@ describe('browsers', () => {
   })
 
   describe('findLocalStatePath', () => {
-    test('returns null when no Local State exists at any level', () => {
+    it('returns null when no Local State exists at any level', () => {
       // given
       const rootDir = mkdtempSync(join(tmpdir(), 'browser-local-state-missing-'))
       tempDirs.push(rootDir)
@@ -210,7 +210,7 @@ describe('browsers', () => {
       expect(path).toBeNull()
     })
 
-    test('finds Local State 2 levels up from cookie path', () => {
+    it('finds Local State 2 levels up from cookie path', () => {
       // given
       const rootDir = mkdtempSync(join(tmpdir(), 'browser-local-state-two-'))
       tempDirs.push(rootDir)
@@ -226,7 +226,7 @@ describe('browsers', () => {
       expect(path).toBe(join(profileDir, 'Local State'))
     })
 
-    test('finds Local State 3 levels up from cookie path', () => {
+    it('finds Local State 3 levels up from cookie path', () => {
       // given
       const rootDir = mkdtempSync(join(tmpdir(), 'browser-local-state-three-'))
       tempDirs.push(rootDir)
@@ -242,7 +242,7 @@ describe('browsers', () => {
       expect(path).toBe(join(browserDir, 'Local State'))
     })
 
-    test('returns null for path with too few segments', () => {
+    it('returns null for path with too few segments', () => {
       // given
       const cookiePath = 'Cookies'
 
@@ -253,7 +253,7 @@ describe('browsers', () => {
       expect(path).toBeNull()
     })
 
-    test('finds the first match when multiple levels could match', () => {
+    it('finds the first match when multiple levels could match', () => {
       // given
       const rootDir = mkdtempSync(join(tmpdir(), 'browser-local-state-first-'))
       tempDirs.push(rootDir)

package/src/shared/chromium/cookie-reader.test.ts

@@ -1,5 +1,5 @@
 import { Database } from 'bun:sqlite'
-import { afterEach, describe, expect, test } from 'bun:test'
+import { afterEach, describe, expect, it } from 'bun:test'
 import { existsSync, mkdtempSync, rmSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
@@ -31,7 +31,7 @@ describe('ChromiumCookieReader', () => {
   })
 
   describe('queryAll', () => {
-    test('returns all matching rows from a real SQLite database', async () => {
+    it('returns all matching rows from a real SQLite database', async () => {
       // given
       const tempDir = mkdtempSync(join(tmpdir(), 'chromium-cookie-reader-'))
       tempDirs.push(tempDir)
@@ -55,7 +55,7 @@ describe('ChromiumCookieReader', () => {
       ])
     })
 
-    test('returns empty array when database file does not exist', async () => {
+    it('returns empty array when database file does not exist', async () => {
       // given
       const tempDir = mkdtempSync(join(tmpdir(), 'chromium-cookie-reader-'))
       tempDirs.push(tempDir)
@@ -69,7 +69,7 @@ describe('ChromiumCookieReader', () => {
       expect(result).toEqual([])
     })
 
-    test('returns empty array when query matches no rows', async () => {
+    it('returns empty array when query matches no rows', async () => {
       // given
       const tempDir = mkdtempSync(join(tmpdir(), 'chromium-cookie-reader-'))
       tempDirs.push(tempDir)
@@ -86,7 +86,7 @@ describe('ChromiumCookieReader', () => {
       expect(result).toEqual([])
     })
 
-    test('supports parameterized queries with params', async () => {
+    it('supports parameterized queries with params', async () => {
       // given
       const tempDir = mkdtempSync(join(tmpdir(), 'chromium-cookie-reader-'))
       tempDirs.push(tempDir)
@@ -108,7 +108,7 @@ describe('ChromiumCookieReader', () => {
       expect(result).toEqual([{ name: 'token', value: 'xyz789' }])
     })
 
-    test('cleans up temp file after query', async () => {
+    it('cleans up temp file after query', async () => {
       // given
       const tempDir = mkdtempSync(join(tmpdir(), 'chromium-cookie-reader-'))
       tempDirs.push(tempDir)
@@ -135,7 +135,7 @@ describe('ChromiumCookieReader', () => {
   })
 
   describe('queryFirst', () => {
-    test('returns first matching row from a real SQLite database', async () => {
+    it('returns first matching row from a real SQLite database', async () => {
       // given
       const tempDir = mkdtempSync(join(tmpdir(), 'chromium-cookie-reader-'))
       tempDirs.push(tempDir)
@@ -156,7 +156,7 @@ describe('ChromiumCookieReader', () => {
       expect(result).toEqual({ name: 'session', value: 'abc123' })
     })
 
-    test('returns null when database file does not exist', async () => {
+    it('returns null when database file does not exist', async () => {
       // given
       const tempDir = mkdtempSync(join(tmpdir(), 'chromium-cookie-reader-'))
       tempDirs.push(tempDir)
@@ -170,7 +170,7 @@ describe('ChromiumCookieReader', () => {
       expect(result).toBeNull()
     })
 
-    test('returns null when query matches no rows', async () => {
+    it('returns null when query matches no rows', async () => {
       // given
       const tempDir = mkdtempSync(join(tmpdir(), 'chromium-cookie-reader-'))
       tempDirs.push(tempDir)
@@ -187,7 +187,7 @@ describe('ChromiumCookieReader', () => {
       expect(result).toBeNull()
     })
 
-    test('supports parameterized queries with params', async () => {
+    it('supports parameterized queries with params', async () => {
       // given
       const tempDir = mkdtempSync(join(tmpdir(), 'chromium-cookie-reader-'))
       tempDirs.push(tempDir)
@@ -211,7 +211,7 @@ describe('ChromiumCookieReader', () => {
   })
 
   describe('edge cases', () => {
-    test('handles multiple calls to same reader instance', async () => {
+    it('handles multiple calls to same reader instance', async () => {
       // given
       const tempDir = mkdtempSync(join(tmpdir(), 'chromium-cookie-reader-'))
       tempDirs.push(tempDir)
@@ -241,7 +241,7 @@ describe('ChromiumCookieReader', () => {
       expect(firstRow).toEqual({ name: 'token', value: 'xyz789' })
     })
 
-    test('returns empty array for malformed SQL without throwing', async () => {
+    it('returns empty array for malformed SQL without throwing', async () => {
       // given
       const tempDir = mkdtempSync(join(tmpdir(), 'chromium-cookie-reader-'))
       tempDirs.push(tempDir)
@@ -256,7 +256,7 @@ describe('ChromiumCookieReader', () => {
       expect(result).toEqual([])
     })
 
-    test('returns null for malformed SQL without throwing', async () => {
+    it('returns null for malformed SQL without throwing', async () => {
       // given
       const tempDir = mkdtempSync(join(tmpdir(), 'chromium-cookie-reader-'))
       tempDirs.push(tempDir)

package/src/shared/chromium/decryptor.test.ts

@@ -1,4 +1,4 @@
-import { beforeEach, describe, expect, spyOn, test } from 'bun:test'
+import { beforeEach, describe, expect, spyOn, it } from 'bun:test'
 import { createCipheriv, pbkdf2Sync, randomBytes } from 'node:crypto'
 
 import * as linuxKeyring from '@/shared/utils/linux-keyring'
@@ -29,7 +29,7 @@ describe('ChromiumCookieDecryptor', () => {
   })
 
   describe('constructor', () => {
-    test('prepends appKeychainVariants before browser variants', () => {
+    it('prepends appKeychainVariants before browser variants', () => {
       // given
       const appVariants = [{ service: 'App Safe Storage', account: 'App' }]
 
@@ -40,7 +40,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect((decryptor as any).keychainVariants).toEqual([...appVariants, ...BROWSER_KEYCHAIN_VARIANTS])
     })
 
-    test('uses only browser variants when no appKeychainVariants provided', () => {
+    it('uses only browser variants when no appKeychainVariants provided', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'darwin' })
 
@@ -50,7 +50,7 @@ describe('ChromiumCookieDecryptor', () => {
   })
 
   describe('isEncryptedValue', () => {
-    test('returns true for v10 prefix with sufficient length', () => {
+    it('returns true for v10 prefix with sufficient length', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
 
@@ -61,7 +61,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toBe(true)
     })
 
-    test('returns true for v11 prefix with sufficient length', () => {
+    it('returns true for v11 prefix with sufficient length', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
 
@@ -72,7 +72,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toBe(true)
     })
 
-    test('returns false for non-v10/v11 prefix', () => {
+    it('returns false for non-v10/v11 prefix', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
 
@@ -83,7 +83,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toBe(false)
     })
 
-    test('returns false for too-short buffer (< 4 bytes)', () => {
+    it('returns false for too-short buffer (< 4 bytes)', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
 
@@ -94,7 +94,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toBe(false)
     })
 
-    test('returns false for null/empty buffer', () => {
+    it('returns false for null/empty buffer', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
 
@@ -105,7 +105,7 @@ describe('ChromiumCookieDecryptor', () => {
   })
 
   describe('decryptAESCBC / decryptAESCBCRaw', () => {
-    test('decrypts v10-prefixed AES-128-CBC data with correct key', () => {
+    it('decrypts v10-prefixed AES-128-CBC data with correct key', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
       const encrypted = encryptAESCBC('test-value', peanutsKey)
@@ -117,7 +117,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toBe('test-value')
     })
 
-    test('returns null with wrong key', () => {
+    it('returns null with wrong key', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
       const encrypted = encryptAESCBC('test-value', peanutsKey)
@@ -130,7 +130,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toBeNull()
     })
 
-    test('returns null for corrupted ciphertext', () => {
+    it('returns null for corrupted ciphertext', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
       const encrypted = encryptAESCBC('test-value', peanutsKey)
@@ -144,7 +144,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toBeNull()
     })
 
-    test('decryptAESCBC returns string, decryptAESCBCRaw returns Buffer', () => {
+    it('decryptAESCBC returns string, decryptAESCBCRaw returns Buffer', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
       const encrypted = encryptAESCBC('test-value', peanutsKey)
@@ -160,7 +160,7 @@ describe('ChromiumCookieDecryptor', () => {
   })
 
   describe('decryptAESGCM / decryptAESGCMRaw', () => {
-    test('decrypts v10-prefixed AES-256-GCM data with correct key', () => {
+    it('decrypts v10-prefixed AES-256-GCM data with correct key', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'win32' })
       const masterKey = randomBytes(32)
@@ -173,7 +173,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toBe('test-value')
     })
 
-    test('returns null with wrong key', () => {
+    it('returns null with wrong key', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'win32' })
       const masterKey = randomBytes(32)
@@ -186,7 +186,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toBeNull()
     })
 
-    test('returns null for data shorter than minimum length (3+12+16 = 31 bytes)', () => {
+    it('returns null for data shorter than minimum length (3+12+16 = 31 bytes)', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'win32' })
 
@@ -197,7 +197,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toBeNull()
     })
 
-    test('decryptAESGCM returns string, decryptAESGCMRaw returns Buffer', () => {
+    it('decryptAESGCM returns string, decryptAESGCMRaw returns Buffer', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'win32' })
       const masterKey = randomBytes(32)
@@ -214,7 +214,7 @@ describe('ChromiumCookieDecryptor', () => {
   })
 
   describe('decryptCookie / decryptCookieRaw', () => {
-    test('returns plaintext for non-encrypted values (no v10/v11 prefix)', () => {
+    it('returns plaintext for non-encrypted values (no v10/v11 prefix)', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
       const plaintext = Buffer.from('plain-cookie')
@@ -228,7 +228,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(rawResult).toEqual(plaintext)
     })
 
-    test('dispatches to Linux decryption for linux platform with v10 prefix', () => {
+    it('dispatches to Linux decryption for linux platform with v10 prefix', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
       const encrypted = Buffer.from('v10cookie')
@@ -242,7 +242,7 @@ describe('ChromiumCookieDecryptor', () => {
       spy.mockRestore()
     })
 
-    test('returns null for unsupported platform (e.g. freebsd)', () => {
+    it('returns null for unsupported platform (e.g. freebsd)', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'freebsd' as NodeJS.Platform })
 
@@ -253,7 +253,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toBeNull()
     })
 
-    test('decryptCookie returns string, decryptCookieRaw returns Buffer', () => {
+    it('decryptCookie returns string, decryptCookieRaw returns Buffer', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
       const encrypted = encryptAESCBC('test-value', peanutsKey)
@@ -269,7 +269,7 @@ describe('ChromiumCookieDecryptor', () => {
   })
 
   describe('decryptLinuxCookieRaw', () => {
-    test('decrypts v10-prefixed cookie using peanuts key (known key, verifiable)', () => {
+    it('decrypts v10-prefixed cookie using peanuts key (known key, verifiable)', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
       const encrypted = encryptAESCBC('linux-cookie', peanutsKey)
@@ -281,7 +281,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toEqual(Buffer.from('linux-cookie'))
     })
 
-    test('falls back to peanuts key for v11 when no keyring app names configured', () => {
+    it('falls back to peanuts key for v11 when no keyring app names configured', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
       const encrypted = encryptAESCBC('linux-v11-cookie', peanutsKey, 'v11')
@@ -295,7 +295,7 @@ describe('ChromiumCookieDecryptor', () => {
   })
 
   describe('decryptDPAPI', () => {
-    test('returns null on non-win32 platforms', () => {
+    it('returns null on non-win32 platforms', () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'linux' })
 
@@ -307,8 +307,73 @@ describe('ChromiumCookieDecryptor', () => {
     })
   })
 
+  describe('extractDPAPIPayload', () => {
+    it('extracts payload wrapped in markers', () => {
+      // given
+      const b64 = Buffer.from('hello').toString('base64')
+      const stdout = `<<<B64>>>${b64}<<<END>>>\r\n`
+
+      // when
+      const result = ChromiumCookieDecryptor.extractDPAPIPayload(stdout)
+
+      // then
+      expect(result).toBe(b64)
+    })
+
+    it('strips CLIXML progress-stream contamination before the payload', () => {
+      // given: PowerShell emits CLIXML on first module auto-load
+      const b64 = Buffer.from('secret-token').toString('base64')
+      const stdout =
+        '#< CLIXML\r\n' +
+        '<Objs Version="1.1.0.1" xmlns="http://schemas.microsoft.com/powershell/2004/04">' +
+        '<Obj S="progress" RefId="0"><TN RefId="0"><T>System.Management.Automation.PSCustomObject</T>' +
+        '<T>System.Object</T></TN><MS><I64 N="SourceId">1</I64><PR N="Record">' +
+        '<AV>Preparing modules for first use.</AV><AI>0</AI><Nil /><PI>-1</PI><PC>-1</PC>' +
+        '<T>Completed</T><SR>-1</SR><SD> </SD></PR></MS></Obj></Objs>' +
+        `<<<B64>>>${b64}<<<END>>>\r\n`
+
+      // when
+      const result = ChromiumCookieDecryptor.extractDPAPIPayload(stdout)
+
+      // then
+      expect(result).toBe(b64)
+    })
+
+    it('tolerates whitespace and line breaks inside the payload', () => {
+      // given
+      const b64 = Buffer.from('hello').toString('base64')
+      const chunked = b64.slice(0, 3) + '\r\n' + b64.slice(3)
+      const stdout = `<<<B64>>>${chunked}<<<END>>>`
+
+      // when
+      const result = ChromiumCookieDecryptor.extractDPAPIPayload(stdout)
+
+      // then
+      expect(result).toBe(b64)
+    })
+
+    it('returns null when markers are missing', () => {
+      // given: stdout contains only CLIXML noise, no real payload
+      const stdout = '#< CLIXML\r\n<Objs></Objs>\r\n'
+
+      // when
+      const result = ChromiumCookieDecryptor.extractDPAPIPayload(stdout)
+
+      // then
+      expect(result).toBeNull()
+    })
+
+    it('returns null when payload between markers is empty', () => {
+      // when
+      const result = ChromiumCookieDecryptor.extractDPAPIPayload('<<<B64>>><<<END>>>')
+
+      // then
+      expect(result).toBeNull()
+    })
+  })
+
   describe('stripIntegrityHash', () => {
-    test('returns input unchanged when length <= 32', () => {
+    it('returns input unchanged when length <= 32', () => {
       // given
       const decrypted = Buffer.alloc(32, 0x41)
 
@@ -319,7 +384,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toEqual(decrypted)
     })
 
-    test('strips first 32 bytes when they contain non-printable characters', () => {
+    it('strips first 32 bytes when they contain non-printable characters', () => {
       // given
       const hash = Buffer.concat([Buffer.from([0x00, 0x1f, 0xff]), Buffer.alloc(29, 0x01)])
       const value = Buffer.from('cookie-value')
@@ -331,7 +396,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toEqual(value)
     })
 
-    test('returns input unchanged when first 32 bytes are all printable ASCII', () => {
+    it('returns input unchanged when first 32 bytes are all printable ASCII', () => {
       // given
       const printablePrefix = Buffer.from('12345678901234567890123456789012')
       const decrypted = Buffer.concat([printablePrefix, Buffer.from('cookie-value')])
@@ -343,7 +408,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toEqual(decrypted)
     })
 
-    test('correctly strips binary hash prefix followed by readable cookie value', () => {
+    it('correctly strips binary hash prefix followed by readable cookie value', () => {
       // given
       const hash = randomBytes(32)
       const value = Buffer.from('readable-cookie-value')
@@ -355,7 +420,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect(result).toEqual(value)
     })
 
-    test('handles non-printable bytes that would be mangled by UTF-8 conversion (the v130+ fix)', () => {
+    it('handles non-printable bytes that would be mangled by UTF-8 conversion (the v130+ fix)', () => {
       // given
       const binaryPrefix = Buffer.from([
         ...Array.from({ length: 16 }, (_, i) => i),
@@ -372,7 +437,7 @@ describe('ChromiumCookieDecryptor', () => {
   })
 
   describe('loadCachedKey / clearKeyCache', () => {
-    test('loadCachedKey is no-op on non-darwin platform', async () => {
+    it('loadCachedKey is no-op on non-darwin platform', async () => {
       // given
       const keyCache = {
         get: async () => Buffer.from('should-not-be-used'),
@@ -392,7 +457,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect((decryptor as any).usedCachedKey).toBe(false)
     })
 
-    test('loadCachedKey is no-op when no keyCache configured', async () => {
+    it('loadCachedKey is no-op when no keyCache configured', async () => {
       // given
       const decryptor = new ChromiumCookieDecryptor({ platform: 'darwin', keyCachePlatform: 'slack' })
 
@@ -404,7 +469,7 @@ describe('ChromiumCookieDecryptor', () => {
       expect((decryptor as any).usedCachedKey).toBe(false)
     })
 
-    test('clearKeyCache resets cached key state', async () => {
+    it('clearKeyCache resets cached key state', async () => {
       // given
       const clear = async () => {}
       const keyCache = { get: async () => null, clear }
@@ -426,7 +491,7 @@ describe('ChromiumCookieDecryptor', () => {
   })
 
   describe('linux v11 keyring behavior', () => {
-    test('uses configured keyring password before falling back', () => {
+    it('uses configured keyring password before falling back', () => {
       // given
       const password = 'secret-from-keyring'
       const key = pbkdf2Sync(password, 'saltysalt', 1, 16, 'sha1')