// UI should escape or handle this

const sanitized = sanitizeProfileForDisplay(result.profile);

expect(sanitized.name).toEqual(expect.any(String));

expect(sanitized.name).toBe("\u202Eevil\u202C");

});

it("handles bidi embedding in about", () => {

);

expect(first.ok).toBe(true);

expect(first.verifiedRequestKey).toEqual(expect.any(String));

expect(first.verifiedRequestKey).toBeTypeOf("string");

expect(first.verifiedRequestKey).not.toBe("");

expect(second.ok).toBe(true);

expect(second.verifiedRequestKey).toBe(first.verifiedRequestKey);

expect(second.isReplay).toBe(true);

const createZaloMock = vi.hoisted(() => vi.fn());

const TEST_MTIME_TICK_MS = 20;

const ISO_TIMESTAMP_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u;

vi.mock("./zca-client.js", () => ({

createZalo: createZaloMock,

const stored = await readStoredCredentials(stateDir, profile);

expect(stored.cookie).toEqual(refreshedCookie);

expect(stored.createdAt).toBe("2026-04-01T00:00:00.000Z");

expect(stored.lastUsedAt).toEqual(expect.any(String));

expect(stored.lastUsedAt).toMatch(ISO_TIMESTAMP_RE);

});

} finally {

await rm(stateDir, { recursive: true, force: true });

const stored = await readStoredCredentials(stateDir, profile);

expect(stored.cookie).toEqual(refreshedCookie);

expect(stored.createdAt).toBe("2026-04-01T00:00:00.000Z");

expect(stored.lastUsedAt).toEqual(expect.any(String));

expect(stored.lastUsedAt).toMatch(ISO_TIMESTAMP_RE);

});

} finally {

await rm(stateDir, { recursive: true, force: true });

it("keeps the version label available in shipped locales", () => {

for (const [locale, value] of Object.entries(shippedLocales)) {

expect((value.common as { version?: string }).version, locale).toEqual(expect.any(String));

expect((value.common as { version?: string }).version, locale).toBeTypeOf("string");

expect((value.common as { version?: string }).version?.trim(), locale).not.toBe("");

}

});