@polderlabs/bizar 9.0.0 → 10.0.7

package/bizar-dash/src/web/v8/__tests__/agents-stuck-banner.test.tsx

@@ -0,0 +1,142 @@
+import { afterEach, describe, expect, it, vi } from 'vitest';
+import { cleanup, render, screen, waitFor } from '@testing-library/react';
+import userEvent from '@testing-library/user-event';
+import { AgentsView } from '../views/Agents/AgentsView.js';
+
+type Handler = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+function installFetchMock(handlers: Array<[RegExp, Handler]>): void {
+  globalThis.fetch = vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
+    const url = String(input);
+    const method = init?.method ?? 'GET';
+    for (const [pat, fn] of handlers) if (pat.test(url)) return fn(input, init);
+    return new Response(JSON.stringify({}), { status: 200, headers: { 'content-type': 'application/json' } });
+  }) as unknown as typeof fetch;
+}
+function jsonResponse(body: unknown, status = 200): Response {
+  return new Response(JSON.stringify(body), { status, headers: { 'content-type': 'application/json' } });
+}
+
+describe('AgentsView stuck banner (v9.5.0 S48)', () => {
+  afterEach(() => { cleanup(); vi.restoreAllMocks(); });
+
+  it('renders no banner when /api/agents/stuck returns []', async () => {
+    installFetchMock([
+      [/^\/api\/agents(\?|$)/, () => jsonResponse({ agents: [] })],
+      [/^\/api\/cc-agents/, () => jsonResponse({ agents: [] })],
+      [/^\/api\/agents\/stuck/, () => jsonResponse({ stuck: [] })],
+    ]);
+    render(<AgentsView />);
+    // Wait for both fetches to settle, then assert no banner
+    await waitFor(() => { expect(screen.queryByTestId('agents-stuck-banner')).toBeNull(); });
+  });
+
+  it('renders the warning banner when stuck agents exist', async () => {
+    installFetchMock([
+      [/^\/api\/agents(\?|$)/, () => jsonResponse({
+        agents: [{ name: 'frigg', role: 'researcher', status: 'stuck', lastSeen: Date.now() - 600_000 }],
+      })],
+      [/^\/api\/cc-agents/, () => jsonResponse({ agents: [] })],
+      [/^\/api\/agents\/stuck/, () => jsonResponse({
+        stuck: [{ name: 'frigg', role: 'researcher', status: 'stuck' }],
+      })],
+    ]);
+    render(<AgentsView />);
+    expect(await screen.findByTestId('agents-stuck-banner')).toBeTruthy();
+    expect(screen.getByTestId('agents-stuck-banner').textContent).toMatch(/frigg|stuck/i);
+  });
+
+  it('clicking the per-agent Restart button POSTs /api/agents/:name/restart', async () => {
+    let restartCalled: { url: string; body: unknown } | null = null;
+    installFetchMock([
+      [/^\/api\/agents(\?|$)/, () => jsonResponse({
+        agents: [{ name: 'frigg', role: 'researcher', status: 'stuck', lastSeen: Date.now() - 600_000 }],
+      })],
+      [/^\/api\/cc-agents/, () => jsonResponse({ agents: [] })],
+      [/^\/api\/agents\/stuck/, () => jsonResponse({
+        stuck: [{ name: 'frigg', role: 'researcher', status: 'stuck' }],
+      })],
+      [/^\/api\/agents\/frigg\/restart/, (input, init) => {
+        restartCalled = { url: String(input), body: init?.body ? JSON.parse(String(init.body)) : undefined };
+        return jsonResponse({ ok: true });
+      }],
+    ]);
+    const user = userEvent.setup();
+    render(<AgentsView />);
+    const btn = await screen.findByTestId('agents-stuck-restart-frigg');
+    await user.click(btn);
+    await waitFor(() => { expect(restartCalled).not.toBeNull(); });
+    expect(restartCalled!.url).toMatch(/\/api\/agents\/frigg\/restart$/);
+  });
+
+  // v10-S1 — Pause/Resume + bulk action. The v9.5.0 banner only had
+  // Restart; users with 3+ stuck agents who want to triage them one at
+  // a time still need Pause (stop heartbeat drain) and Resume (re-enable)
+  // without a full restart. Plus bulk Pause-all-stuck for the case where
+  // the cluster is wedged and the user wants to drain it.
+  it('clicking the per-agent Pause button POSTs /api/agents/:name/status with paused', async () => {
+    let statusCalled: { url: string; body: unknown } | null = null;
+    installFetchMock([
+      [/^\/api\/agents(\?|$)/, () => jsonResponse({
+        agents: [{ name: 'frigg', role: 'researcher', status: 'stuck', lastSeen: Date.now() - 600_000 }],
+      })],
+      [/^\/api\/cc-agents/, () => jsonResponse({ agents: [] })],
+      [/^\/api\/agents\/stuck/, () => jsonResponse({
+        stuck: [{ name: 'frigg', role: 'researcher', status: 'stuck' }],
+      })],
+      [/^\/api\/agents\/frigg\/status/, (input, init) => {
+        statusCalled = { url: String(input), body: init?.body ? JSON.parse(String(init.body)) : undefined };
+        return jsonResponse({ ok: true });
+      }],
+    ]);
+    const user = userEvent.setup();
+    render(<AgentsView />);
+    const btn = await screen.findByTestId('agents-stuck-pause-frigg');
+    await user.click(btn);
+    await waitFor(() => { expect(statusCalled).not.toBeNull(); });
+    expect(statusCalled!.url).toMatch(/\/api\/agents\/frigg\/status$/);
+    expect((statusCalled!.body as { status?: string })?.status).toBe('paused');
+  });
+
+  it('clicking the bulk Pause-all-stuck button POSTs /status for every stuck agent', async () => {
+    const statusCalls: Array<{ url: string; body: unknown }> = [];
+    installFetchMock([
+      [/^\/api\/agents(\?|$)/, () => jsonResponse({
+        agents: [
+          { name: 'frigg', role: 'r', status: 'stuck', lastSeen: Date.now() - 600_000 },
+          { name: 'thor', role: 'i', status: 'stuck', lastSeen: Date.now() - 600_000 },
+        ],
+      })],
+      [/^\/api\/cc-agents/, () => jsonResponse({ agents: [] })],
+      [/^\/api\/agents\/stuck/, () => jsonResponse({
+        stuck: [
+          { name: 'frigg', role: 'r', status: 'stuck' },
+          { name: 'thor', role: 'i', status: 'stuck' },
+        ],
+      })],
+      [/^\/api\/agents\/.*\/status/, (input, init) => {
+        statusCalls.push({ url: String(input), body: init?.body ? JSON.parse(String(init.body)) : undefined });
+        return jsonResponse({ ok: true });
+      }],
+    ]);
+    const user = userEvent.setup();
+    render(<AgentsView />);
+    const btn = await screen.findByTestId('agents-stuck-bulk-pause');
+    await user.click(btn);
+    await waitFor(() => { expect(statusCalls.length).toBeGreaterThanOrEqual(2); });
+    const names = statusCalls.map((c) => c.url.match(/\/api\/agents\/([^/]+)\/status$/)?.[1]).filter(Boolean);
+    expect(names).toEqual(expect.arrayContaining(['frigg', 'thor']));
+    for (const c of statusCalls) expect((c.body as { status?: string })?.status).toBe('paused');
+  });
+
+  it('does not render Pause/Resume or bulk actions when there are no stuck agents', async () => {
+    installFetchMock([
+      [/^\/api\/agents(\?|$)/, () => jsonResponse({ agents: [] })],
+      [/^\/api\/cc-agents/, () => jsonResponse({ agents: [] })],
+      [/^\/api\/agents\/stuck/, () => jsonResponse({ stuck: [] })],
+    ]);
+    render(<AgentsView />);
+    await waitFor(() => { expect(screen.queryByTestId('agents-stuck-banner')).toBeNull(); });
+    expect(screen.queryByTestId('agents-stuck-pause-frigg')).toBeNull();
+    expect(screen.queryByTestId('agents-stuck-bulk-pause')).toBeNull();
+  });
+});

package/bizar-dash/src/web/v8/__tests__/artifacts-view.test.tsx

@@ -0,0 +1,102 @@
+/**
+ * S43 — artifacts-view.test.tsx
+ *
+ * Renders list, opens detail Sheet, confirms DELETE.
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { cleanup, render, screen, fireEvent, waitFor } from '@testing-library/react';
+import { ArtifactsView } from '../views/Artifacts/ArtifactsView.js';
+
+interface MockState {
+  posts: Array<{ url: string; body: unknown }>;
+  deletes: string[];
+}
+
+function installFetchMock(handler: (url: string) => Response, state?: MockState): MockState {
+  const out: MockState = state ?? { posts: [], deletes: [] };
+  globalThis.fetch = vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
+    const url = String(input);
+    const method = String(init?.method ?? 'GET').toUpperCase();
+    if (method === 'POST' && init?.body) {
+      let parsed: unknown = init.body;
+      try { parsed = JSON.parse(String(init.body)); } catch { /* keep raw */ }
+      out.posts.push({ url, body: parsed });
+    } else if (method === 'DELETE') {
+      out.deletes.push(url);
+    }
+    return handler(url);
+  }) as unknown as typeof fetch;
+  return out;
+}
+
+function jsonResponse(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { 'content-type': 'application/json' },
+  });
+}
+
+describe('S43 ArtifactsView', () => {
+  beforeEach(() => {
+    if (!Element.prototype.scrollIntoView) Element.prototype.scrollIntoView = vi.fn();
+  });
+  afterEach(() => {
+    cleanup();
+    vi.restoreAllMocks();
+  });
+
+  it('renders empty state when no artifacts', async () => {
+    installFetchMock((url) => {
+      if (url.endsWith('/api/artifacts')) return jsonResponse(200, { artifacts: [] });
+      return jsonResponse(200, {});
+    });
+    render(<ArtifactsView />);
+    expect(await screen.findByTestId('artifacts-view')).toBeTruthy();
+    expect(await screen.findByText('No artifacts')).toBeTruthy();
+  });
+
+  it('POSTs /api/artifacts from Add Sheet', async () => {
+    const state = installFetchMock((url) => {
+      if (url.endsWith('/api/artifacts')) return jsonResponse(200, { artifacts: [] });
+      return jsonResponse(200, {});
+    });
+    render(<ArtifactsView />);
+    fireEvent.click(await screen.findByTestId('artifacts-add'));
+    fireEvent.input(await screen.findByTestId('artifact-form-slug'), { target: { value: 'foo-plan' } });
+    fireEvent.input(await screen.findByTestId('artifact-form-title'), { target: { value: 'Foo plan' } });
+    fireEvent.click(await screen.findByTestId('artifact-form-submit'));
+    await waitFor(() => {
+      const hit = state.posts.find((p) => p.url.endsWith('/api/artifacts'));
+      expect(hit).toBeTruthy();
+      expect((hit!.body as { slug: string }).slug).toBe('foo-plan');
+    });
+  });
+
+  it('DELETEs /api/artifacts/:slug on confirm', async () => {
+    const state = installFetchMock((url) => {
+      if (url.endsWith('/api/artifacts')) {
+        return jsonResponse(200, { artifacts: [{ slug: 'plan-a', title: 'Plan A' }] });
+      }
+      return jsonResponse(200, {});
+    });
+    render(<ArtifactsView />);
+    fireEvent.click(await screen.findByTestId('artifact-delete-plan-a'));
+    fireEvent.click(await screen.findByTestId('artifact-confirm-delete-plan-a'));
+    await waitFor(() => {
+      expect(state.deletes.find((u) => u.endsWith('/api/artifacts/plan-a'))).toBeTruthy();
+    });
+  });
+
+  it('opens detail Sheet on Open click', async () => {
+    installFetchMock((url) => {
+      if (url.endsWith('/api/artifacts')) return jsonResponse(200, { artifacts: [{ slug: 'plan-x', title: 'Plan X' }] });
+      if (url.endsWith('/api/artifacts/plan-x')) return jsonResponse(200, { slug: 'plan-x', title: 'Plan X', description: 'desc', planMdx: '# X', frontmatter: { kind: 'plan' } });
+      if (url.endsWith('/api/artifacts/plan-x/render')) return jsonResponse(200, { blocks: [{}, {}] });
+      return jsonResponse(200, {});
+    });
+    render(<ArtifactsView />);
+    fireEvent.click(await screen.findByTestId('artifact-open-plan-x'));
+    expect(await screen.findByTestId('artifact-frontmatter-plan-x')).toBeTruthy();
+    expect(await screen.findByTestId('artifact-mdx-plan-x')).toBeTruthy();
+  });
+});

package/bizar-dash/src/web/v8/__tests__/audit-fixes.test.tsx

@@ -0,0 +1,139 @@
+import { describe, expect, it, vi, beforeEach } from 'vitest';
+import { render, screen, waitFor } from '@testing-library/react';
+import userEvent from '@testing-library/user-event';
+import { ThemeProvider } from '../ui/theme/ThemeProvider.js';
+import { DensityProvider } from '../ui/theme/DensityProvider.js';
+import { SettingsView } from '../views/Settings/SettingsView.js';
+import { TasksView } from '../views/Tasks/TasksView.js';
+import { AgentsView } from '../views/Agents/AgentsView.js';
+
+/**
+ * Audit-fix coverage — Sprint S34.
+ *
+ * Verifies that the v9.2.0 HIGH/MEDIUM audit gaps are no longer gaps:
+ *   1. SettingsView hook switches, notification channel, storage paths,
+ *      cache budget, timezone, and activityCompact all bind to state.
+ *   2. TasksView exposes a "+ Task" Sheet that POSTs to /api/tasks.
+ *   3. AgentsView exposes a "+ Agent" Sheet that POSTs to /api/agents.
+ *
+ * Each test fetches with a mocked fetch and asserts the right call.
+ */
+
+function Providers({ children }: { children: React.ReactNode }): JSX.Element {
+  return (
+    <ThemeProvider>
+      <DensityProvider>{children}</DensityProvider>
+    </ThemeProvider>
+  );
+}
+
+function mockFetch(handlers: Array<{ match: (url: string) => boolean; run: () => unknown }>): void {
+  globalThis.fetch = vi.fn(async (input: RequestInfo | URL) => {
+    const url = typeof input === 'string' ? input : (input as Request).url;
+    const h = handlers.find((x) => x.match(url));
+    const body = h ? h.run() : {};
+    return new Response(JSON.stringify(body), { status: 200, headers: { 'content-type': 'application/json' } });
+  }) as typeof fetch;
+}
+
+describe('SettingsView — audit fixes (S34)', () => {
+  beforeEach(() => {
+    window.localStorage.clear();
+    mockFetch([
+      { match: (u) => u.includes('/api/settings'), run: () => ({ workspaceTimezone: 'UTC', notifyChannel: 'toast', hookPreToolUse: true, hookPostToolUse: true, hookTaskStart: true, hookTaskResume: true, hookUserPromptSubmit: true, storagePath: '~/.bizar', cachePath: '~/.cache/bizar', sessionsPath: '~/.claude/sessions', cacheSizeMb: 256, activityCompact: false }) },
+      { match: (u) => u.includes('/api/skills'), run: () => ({ skills: [] }) },
+      { match: (u) => u.includes('/api/agents'), run: () => ({ agents: [] }) },
+      { match: () => true, run: () => ({}) },
+    ]);
+  });
+
+  it('exposes a timezone select populated by default', async () => {
+    const { container } = render(<Providers><SettingsView /></Providers>);
+    const sel = container.querySelector<HTMLSelectElement>('#workspace-timezone-select');
+    expect(sel).toBeTruthy();
+    expect(sel?.value).toBeTruthy();
+    expect(sel?.options.length).toBeGreaterThan(5);
+  });
+
+  it('renders 18 settings sections (up from 16)', async () => {
+    render(<Providers><SettingsView /></Providers>);
+    // All 16 pre-existing sections + 2 new headings: Timezone lives in
+    // General; the section count itself doesn't grow because Timezone
+    // is a SettingsRow inside General. Verify section IDs.
+    for (const id of ['general', 'theme', 'density', 'density-rules', 'palette', 'keyboard', 'notifications', 'storage', 'plugins', 'mcps', 'skills', 'hooks', 'activity', 'memory', 'task-defaults', 'agent-defaults', 'privacy', 'advanced']) {
+      expect(document.getElementById(id)).toBeTruthy();
+    }
+  });
+});
+
+describe('TasksView — create-task Sheet (S34)', () => {
+  beforeEach(() => {
+    window.localStorage.clear();
+    mockFetch([
+      { match: (u) => u === 'http://localhost/api/tasks' && !u.includes('status') && !u.includes('comments'), run: () => ({ tasks: [] }) },
+      { match: () => true, run: () => ({}) },
+    ]);
+  });
+
+  it('renders the New-task button + opens a Sheet form', async () => {
+    const user = userEvent.setup();
+    render(<Providers><TasksView /></Providers>);
+    const openBtn = await screen.findByTestId('task-create-open');
+    expect(openBtn).toBeInTheDocument();
+    await user.click(openBtn);
+    expect(screen.getByTestId('task-create-title')).toBeInTheDocument();
+    expect(screen.getByTestId('task-create-desc')).toBeInTheDocument();
+    expect(screen.getByTestId('task-create-priority')).toBeInTheDocument();
+    expect(screen.getByTestId('task-create-submit')).toBeInTheDocument();
+  });
+
+  it('POSTs to /api/tasks on submit', async () => {
+    const user = userEvent.setup();
+    render(<Providers><TasksView /></Providers>);
+    const openBtn = await screen.findByTestId('task-create-open');
+    await user.click(openBtn);
+    await user.type(screen.getByTestId('task-create-title'), 'Ship v9.2.0');
+    await user.click(screen.getByTestId('task-create-submit'));
+    await waitFor(() => {
+      const fetchMock = globalThis.fetch as unknown as { mock: { calls: Array<[string, RequestInit?]> } };
+      const seen = fetchMock.mock.calls.some((c) => String(c[0]).endsWith('/api/tasks'));
+      expect(seen).toBe(true);
+    });
+  });
+});
+
+describe('AgentsView — create-agent Sheet (S34)', () => {
+  beforeEach(() => {
+    window.localStorage.clear();
+    mockFetch([
+      { match: (u) => u.endsWith('/api/agents'), run: () => ({ agents: [] }) },
+      { match: (u) => u.includes('/api/cc-agents'), run: () => ({ agents: [] }) },
+      { match: () => true, run: () => ({}) },
+    ]);
+  });
+
+  it('renders the New-agent button + opens a Sheet form', async () => {
+    const user = userEvent.setup();
+    render(<Providers><AgentsView /></Providers>);
+    const openBtn = await screen.findByTestId('agent-create-open');
+    expect(openBtn).toBeInTheDocument();
+    await user.click(openBtn);
+    expect(screen.getByTestId('agent-create-name')).toBeInTheDocument();
+    expect(screen.getByTestId('agent-create-role')).toBeInTheDocument();
+    expect(screen.getByTestId('agent-create-submit')).toBeInTheDocument();
+  });
+
+  it('POSTs to /api/agents on submit', async () => {
+    const user = userEvent.setup();
+    render(<Providers><AgentsView /></Providers>);
+    const openBtn = await screen.findByTestId('agent-create-open');
+    await user.click(openBtn);
+    await user.type(screen.getByTestId('agent-create-name'), 'frigg');
+    await user.click(screen.getByTestId('agent-create-submit'));
+    await waitFor(() => {
+      const fetchMock = globalThis.fetch as unknown as { mock: { calls: Array<[string, RequestInit?]> } };
+      const seen = fetchMock.mock.calls.some((c) => String(c[0]).endsWith('/api/agents'));
+      expect(seen).toBe(true);
+    });
+  });
+});

package/bizar-dash/src/web/v8/__tests__/auth-view.test.tsx

@@ -0,0 +1,94 @@
+/**
+ * S40 — auth-view.test.tsx
+ *
+ * Verifies AuthView shows auth status, reveals the bearer token
+ * via /api/auth/reveal, and rotates via /api/auth/regenerate with
+ * inline confirm.
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { cleanup, render, screen, fireEvent, waitFor } from '@testing-library/react';
+import { AuthView } from '../views/Auth/AuthView.js';
+
+interface MockState {
+  posts: Array<{ url: string; body: unknown }>;
+  gets: string[];
+}
+
+function installFetchMock(handler: (url: string) => Response, state?: MockState): MockState {
+  const out: MockState = state ?? { posts: [], gets: [] };
+  globalThis.fetch = vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
+    const url = String(input);
+    const method = String(init?.method ?? 'GET').toUpperCase();
+    if (method === 'POST') {
+      try { out.posts.push({ url, body: JSON.parse(String(init?.body ?? '{}')) }); } catch { /* swallow */ }
+    } else {
+      out.gets.push(url);
+    }
+    return handler(url);
+  }) as unknown as typeof fetch;
+  return out;
+}
+
+function jsonResponse(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { 'content-type': 'application/json' },
+  });
+}
+
+describe('S40 AuthView', () => {
+  beforeEach(() => {
+    if (!Element.prototype.scrollIntoView) Element.prototype.scrollIntoView = vi.fn();
+    Object.defineProperty(navigator, 'clipboard', {
+      value: { writeText: vi.fn().mockResolvedValue(undefined) },
+      configurable: true,
+    });
+  });
+  afterEach(() => {
+    cleanup();
+    vi.restoreAllMocks();
+  });
+
+  it('renders status from /api/auth/status', async () => {
+    installFetchMock((url) => {
+      if (url.endsWith('/api/auth/status')) return jsonResponse(200, { required: true, loopback: false });
+      if (url.endsWith('/api/auth/reveal')) return jsonResponse(200, { token: 'sec1' });
+      return jsonResponse(200, {});
+    });
+    render(<AuthView />);
+    expect(await screen.findByTestId('auth-view')).toBeTruthy();
+    expect(await screen.findByTestId('auth-required')).toBeTruthy();
+  });
+
+  it('hits /api/auth/reveal on the Reveal button', async () => {
+    const state = installFetchMock((url) => {
+      if (url.endsWith('/api/auth/status')) return jsonResponse(200, { required: true, loopback: true });
+      if (url.endsWith('/api/auth/reveal')) return jsonResponse(200, { token: 'sec1' });
+      return jsonResponse(200, {});
+    });
+    render(<AuthView />);
+    fireEvent.click(await screen.findByTestId('auth-reveal'));
+    await waitFor(() => {
+      expect(state.gets.find((u) => u.endsWith('/api/auth/reveal'))).toBeTruthy();
+    });
+    expect(await screen.findByTestId('auth-token-input')).toBeTruthy();
+  });
+
+  it('shows inline confirm before regenerating the token', async () => {
+    const state = installFetchMock((url) => {
+      if (url.endsWith('/api/auth/status')) return jsonResponse(200, { required: true, loopback: true });
+      if (url.endsWith('/api/auth/reveal')) return jsonResponse(200, { token: 'sec1' });
+      if (url.endsWith('/api/auth/regenerate')) return jsonResponse(200, { token: 'sec2' });
+      return jsonResponse(200, {});
+    });
+    render(<AuthView />);
+    fireEvent.click(await screen.findByTestId('auth-reveal'));
+    fireEvent.click(await screen.findByTestId('auth-regen'));
+    expect(await screen.findByTestId('auth-confirm-regen')).toBeTruthy();
+    expect(state.posts.find((p) => p.url.endsWith('/api/auth/regenerate'))).toBeUndefined();
+    fireEvent.click(await screen.findByTestId('auth-confirm-regen'));
+    await waitFor(() => {
+      expect(state.posts.find((p) => p.url.endsWith('/api/auth/regenerate'))).toBeTruthy();
+    });
+  });
+});

package/bizar-dash/src/web/v8/__tests__/chat-types.test.ts

@@ -0,0 +1,55 @@
+/**
+ * S37 — chat-types.test.ts
+ *
+ * Static-analysis guard that all `WsMessage`-typed consumers reference
+ * the v9.3.0 chat events. Defends against the type union growing
+ * while some consumer still filters on the legacy event set.
+ *
+ * Also verifies the data shapes exported from types.ts compile to the
+ * expected property set (chat streaming contract: delta carries text +
+ * session; message carries session + message object; done carries
+ * session; error carries session + error + status).
+ */
+import { describe, expect, it } from 'vitest';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+const TYPES_PATH = join(import.meta.dirname, '../data/types.ts');
+
+interface WsMember { type: string }
+
+function extractWsMembers(source: string): WsMember[] {
+  // Naive parse: pull every `| { type: '…'` line from the WsMessage union.
+  const out: WsMember[] = [];
+  const re = /\|\s*\{\s*type:\s*'([^']+)'/g;
+  let m: RegExpExecArray | null;
+  while ((m = re.exec(source)) !== null) out.push({ type: m[1] });
+  return out;
+}
+
+describe('S37 WsMessage union', () => {
+  it('exposes every v9.3.0 chat event type', () => {
+    const src = readFileSync(TYPES_PATH, 'utf8');
+    const members = new Set(extractWsMembers(src).map((w) => w.type));
+    for (const required of ['chat:delta', 'chat:message', 'chat:done', 'chat:error', 'history:new', 'projects:change', 'update:progress']) {
+      expect(members.has(required), `WsMessage must include ${required}`).toBe(true);
+    }
+  });
+
+  it('ChatMessage shape includes role + ts + content', () => {
+    const src = readFileSync(TYPES_PATH, 'utf8');
+    expect(src).toMatch(/export\s+interface\s+ChatMessage[\s\S]+role:\s+'user'\s*\|\s*'assistant'\s*\|\s*'system'\s*\|\s*'tool'/);
+    expect(src).toMatch(/export\s+interface\s+ChatMessage[\s\S]+content:\s*string/);
+    expect(src).toMatch(/export\s+interface\s+ChatMessage[\s\S]+ts:\s*string/);
+  });
+
+  it('ChatSession shape includes id', () => {
+    const src = readFileSync(TYPES_PATH, 'utf8');
+    expect(src).toMatch(/export\s+interface\s+ChatSession[\s\S]+id:\s*string/);
+  });
+
+  it('HistoryEvent shape includes ts', () => {
+    const src = readFileSync(TYPES_PATH, 'utf8');
+    expect(src).toMatch(/export\s+interface\s+HistoryEvent[\s\S]+ts\?:\s*number/);
+  });
+});