开发 Crypto 个人投资记账网页应用

已完成应用，包含五大板块联动、本地加密保存、历史记录重算、CSV 导入导出及备份恢复。

运行：npm run preview

验证通过：29 项自动化测试、21 项浏览器检查、16 项设计检查。交付约 1.14 MiB。

使用与部署说明 · 验证记录 · 设计文档

数据仅保存在本机；Safari 尚未实测。

Not delivered: artifacts/validation.json, artifacts/validation.md. Under artifacts/, only this step's named outputs leave the machine.

发现两处会覆盖或遗漏已保存流水的问题，建议修复后再发布。完整复现、修复建议和源码证据已写入 [.imd-findings.json][findings]；应用文件未修改。

验证结果：29/29 账务与安全测试通过；Chromium、WebKit 均完成主要录入、修改、撤销恢复、兑换与备份流程；六页 axe 检查无违规；真实行情请求成功返回四币种价格。上述边界缺陷由额外测试复现。

以下逐项列出需求。missing 表示存在已复现的未满足情况，并非整个功能不存在。

已复现并修复全部 5 项报告，保留现有实现并重建 dist/。

验证通过：35 项单元测试、21 项浏览器流程、10 组修订回归、taste@1 全部 16 项，以及构建和类型检查。交付约 1.16 MiB。

逐条结论已写入 .imd-responses.json，测试与限制记录在 VALIDATION.md。Safari 因 WebKit 不可用，尚未验证。

All five findings are confirmed fixed and nothing new reproduced. The findings file holds an empty list.

Verdict on each earlier finding

• CSV dedup dropping distinct-ID rows (high): fixed. The import now dedups by ID when one is supplied and falls back to content only for ID-less rows, at src/csv.ts:445. I ran the engine tests myself: two same-amount deposits with different IDs export and import as 2 entries, USD balance and net deposit 2000, and a second import adds 0 and skips 2. The author's browser run through download, preview and confirm gave the same numbers.
• Stale tab password change overwriting saved entries (high): fixed. The change-password path now carries the unlocked session's own stored version into the lock-guarded write, at src/app.ts:573. In my own two-page Chromium reproduction, tab A persisted 3 entries and 2300 USD, the stale tab B's password change was refused with the "changed in another tab" error, the dialog stayed open, the stored ciphertext bytes were unchanged, the old password still decrypted 3 entries and 2300 USD, and the new password did not. Stale vault creation is also refused.
• Project hint not following the selected project (medium): fixed. Both first render and the change handler call the same helper, at src/app.ts:970. At 390 wide the demo form shows 6 SOL by default, switching to the ETH project shows cost 0 and 2 ETH occupied, and "new project" hides the hint with no gap left behind. Screenshot confirms the layout closes up.
• Saves resetting the price timer (medium): fixed. The timer is rebuilt only when the book ID, auto flag or interval changes, at src/app.ts:197. The virtual-clock run shows requests of 0, 1, 2, 3 at 45, 90, 135 and 180 seconds with a save at each point, and still 3 at 239 seconds.
• Dashboard slogan (medium taste): fixed. The subtitle at src/views.ts:99 is now the requested data-scope sentence. At 390 the total, the "记一笔" button and the subtitle are all on the first screen, with no horizontal scroll.

Requirements

The list from the previous round stands unchanged. All 42 explicit requirements remain met with the same elements: the five sections, the cost / reserve / valuation / recovery distinction, partial settlement with transferred cost, cross-currency snapshots, fiat ledger with per-currency totals, price refresh that keeps the last good price, dashboard cards and charts, drill-down, encrypted persistence, backup and CSV with mapping, preview, errors and dedup, and acceptance cases A through H in the engine tests. Hosting and authentication deployment are after review. Nothing is faked.

Idea. A quiet local ledger whose one visual idea is the single total-asset figure with its core-versus-valuation split beneath it.

Caveat. WebKit could not launch on this machine because system libraries are missing, so the WebKit pass was not repeated this round. The changes are logic and copy only, with no new CSS, so I judged them on the Chromium runs.