Function normalize_comm 

pub fn normalize_comm(comm: &str) -> &str

Strip a comm value down to its bare executable name for classification. macOS ps -o comm reports full paths (e.g. /bin/zsh); login shells arrive prefixed with - (e.g. -zsh). Both should match Shell.