jiva-core 0.3.47 → 0.3.48-dev.0fd3c65

package/dist/code/benchmark/fixtures.js

@@ -0,0 +1,177 @@
+/**
+ * Canonical "taskstore" library fixtures.
+ *
+ * A single evolving Node library is the substrate for the whole benchmark. Each
+ * tier's scaffold is the canonical (golden) state of the prior tiers plus the
+ * new failing test(s). These helpers are the single source of truth for that
+ * golden state, so the suite stays DRY and the tiers genuinely build on one
+ * another.
+ *
+ * Layout in the workspace:
+ *   package.json        { "type": "module" }
+ *   src/index.js        public entry (single file for tiers 1-4, re-export after)
+ *   src/model.js        mutation functions (after the tier-5 refactor)
+ *   src/query.js        read functions (after the tier-5 refactor)
+ *   src/storage.js      serialize/deserialize (after tier 7)
+ *   test/tNN.test.mjs   cumulative node:test files
+ */
+export const PACKAGE_JSON = JSON.stringify({ name: 'taskstore', type: 'module', private: true }, null, 2) + '\n';
+// ---------------------------------------------------------------------------
+// Function source snippets (correct + buggy variants)
+// ---------------------------------------------------------------------------
+const createTaskFn = `export function createTask(title) {
+  if (typeof title !== 'string' || title.trim() === '') {
+    throw new Error('title is required');
+  }
+  return { title, done: false, priority: 'normal', due: null };
+}`;
+const addTaskFn = `export function addTask(list, title) {
+  const task = createTask(title);
+  const nextId = list.reduce((max, t) => Math.max(max, t.id || 0), 0) + 1;
+  return [...list, { ...task, id: nextId }];
+}`;
+/** Tier-8 planted bug: length-based id collides after a removal. */
+const addTaskBuggyFn = `export function addTask(list, title) {
+  const task = createTask(title);
+  // BUG: uses list length for the id, which collides after a removal.
+  const nextId = list.length + 1;
+  return [...list, { ...task, id: nextId }];
+}`;
+const removeTaskFn = `export function removeTask(list, id) {
+  return list.filter((t) => t.id !== id);
+}`;
+const listTasksFn = `export function listTasks(list) {
+  return [...list];
+}`;
+const toggleTaskFn = `export function toggleTask(list, id) {
+  return list.map((t) => (t.id === id ? { ...t, done: !t.done } : t));
+}`;
+/** Tier-3 planted bug: treats id as an array index. */
+const toggleTaskBuggyFn = `export function toggleTask(list, id) {
+  // BUG: treats id as an array index instead of matching task.id.
+  return list.map((t, index) => (index === id ? { ...t, done: !t.done } : t));
+}`;
+const setPriorityFn = `const PRIORITIES = ['low', 'normal', 'high'];
+export function setPriority(list, id, priority) {
+  if (!PRIORITIES.includes(priority)) {
+    throw new Error('invalid priority: ' + priority);
+  }
+  return list.map((t) => (t.id === id ? { ...t, priority } : t));
+}`;
+const tasksByPriorityFn = `export function tasksByPriority(list, priority) {
+  return list.filter((t) => t.priority === priority);
+}`;
+const sortTasksFn = `export function sortTasks(list, options = {}) {
+  const by = options.by || 'due';
+  if (by !== 'due') throw new Error('unsupported sort key: ' + by);
+  // Array.prototype.sort is stable in Node, so equal keys keep their order.
+  return [...list].sort((a, b) => {
+    const av = a.due ?? null;
+    const bv = b.due ?? null;
+    if (av === null && bv === null) return 0;
+    if (av === null) return 1; // tasks without a due date sort last
+    if (bv === null) return -1;
+    if (av < bv) return -1;
+    if (av > bv) return 1;
+    return 0;
+  });
+}`;
+const storageFns = `export function serialize(list) {
+  return JSON.stringify(list);
+}
+
+export function deserialize(str) {
+  const data = JSON.parse(str);
+  if (!Array.isArray(data)) throw new Error('expected an array');
+  return data;
+}`;
+// ---------------------------------------------------------------------------
+// Golden src builders
+// ---------------------------------------------------------------------------
+/** Single-file `src/index.js` containing every function up to `tier` (<=4). */
+function singleFileSrc(tier, opts = {}) {
+    const parts = [createTaskFn];
+    if (tier >= 2)
+        parts.push(addTaskFn, removeTaskFn, listTasksFn);
+    if (opts.buggyToggle)
+        parts.push(toggleTaskBuggyFn);
+    else if (tier >= 3)
+        parts.push(toggleTaskFn);
+    if (tier >= 4)
+        parts.push(setPriorityFn, tasksByPriorityFn);
+    return { 'src/index.js': parts.join('\n\n') + '\n' };
+}
+/** Multi-file layout (after the tier-5 refactor). */
+function multiFileSrc(opts = {}) {
+    const model = [
+        createTaskFn,
+        opts.buggyAdd ? addTaskBuggyFn : addTaskFn,
+        removeTaskFn,
+        toggleTaskFn,
+        setPriorityFn,
+    ].join('\n\n') + '\n';
+    const query = [listTasksFn, tasksByPriorityFn, ...(opts.sort ? [sortTasksFn] : [])].join('\n\n') + '\n';
+    const reexports = [`export * from './model.js';`, `export * from './query.js';`];
+    if (opts.storage)
+        reexports.push(`export * from './storage.js';`);
+    const files = {
+        'src/model.js': model,
+        'src/query.js': query,
+        'src/index.js': reexports.join('\n') + '\n',
+    };
+    if (opts.storage)
+        files['src/storage.js'] = storageFns + '\n';
+    return files;
+}
+/**
+ * Canonical golden source state *after* a tier is completed. Used both as the
+ * baseline scaffold for the next tier and (by the harness self-test) as a
+ * "known-good" set of files a mock agent can write to prove the verifier works.
+ */
+export function goldenSrcAfter(tier) {
+    switch (tier) {
+        case 0:
+            return {};
+        case 1:
+            return singleFileSrc(1);
+        case 2:
+            return singleFileSrc(2);
+        case 3:
+            return singleFileSrc(3);
+        case 4:
+            return singleFileSrc(4);
+        case 5:
+            return multiFileSrc();
+        case 6:
+            return multiFileSrc({ sort: true });
+        case 7:
+        case 8:
+            return multiFileSrc({ sort: true, storage: true });
+        default:
+            throw new Error(`no golden state for tier ${tier}`);
+    }
+}
+/** The scaffolded (pre-agent) src state for a given tier — golden(N-1) plus any planted bug. */
+export function scaffoldSrc(tier) {
+    switch (tier) {
+        case 1:
+            return {}; // nothing yet — the agent creates src/index.js from scratch
+        case 2:
+            return singleFileSrc(1);
+        case 3:
+            return singleFileSrc(2, { buggyToggle: true }); // planted toggle bug
+        case 4:
+            return singleFileSrc(3);
+        case 5:
+            return singleFileSrc(4);
+        case 6:
+            return multiFileSrc();
+        case 7:
+            return multiFileSrc({ sort: true });
+        case 8:
+            return multiFileSrc({ sort: true, storage: true, buggyAdd: true }); // planted add bug
+        default:
+            throw new Error(`no scaffold for tier ${tier}`);
+    }
+}
+//# sourceMappingURL=fixtures.js.map

package/dist/code/benchmark/fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../../src/code/benchmark/fixtures.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAEjH,8EAA8E;AAC9E,sDAAsD;AACtD,8EAA8E;AAE9E,MAAM,YAAY,GAAG;;;;;EAKnB,CAAC;AAEH,MAAM,SAAS,GAAG;;;;EAIhB,CAAC;AAEH,oEAAoE;AACpE,MAAM,cAAc,GAAG;;;;;EAKrB,CAAC;AAEH,MAAM,YAAY,GAAG;;EAEnB,CAAC;AAEH,MAAM,WAAW,GAAG;;EAElB,CAAC;AAEH,MAAM,YAAY,GAAG;;EAEnB,CAAC;AAEH,uDAAuD;AACvD,MAAM,iBAAiB,GAAG;;;EAGxB,CAAC;AAEH,MAAM,aAAa,GAAG;;;;;;EAMpB,CAAC;AAEH,MAAM,iBAAiB,GAAG;;EAExB,CAAC;AAEH,MAAM,WAAW,GAAG;;;;;;;;;;;;;;EAclB,CAAC;AAEH,MAAM,UAAU,GAAG;;;;;;;;EAQjB,CAAC;AAEH,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,+EAA+E;AAC/E,SAAS,aAAa,CAAC,IAAY,EAAE,OAAkC,EAAE;IACvE,MAAM,KAAK,GAAG,CAAC,YAAY,CAAC,CAAC;IAC7B,IAAI,IAAI,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;SAC/C,IAAI,IAAI,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7C,IAAI,IAAI,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAC5D,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;AACvD,CAAC;AAED,qDAAqD;AACrD,SAAS,YAAY,CAAC,OAAkE,EAAE;IACxF,MAAM,KAAK,GAAG;QACZ,YAAY;QACZ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QAC1C,YAAY;QACZ,YAAY;QACZ,aAAa;KACd,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAEtB,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,iBAAiB,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAExG,MAAM,SAAS,GAAG,CAAC,6BAA6B,EAAE,6BAA6B,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,OAAO;QAAE,SAAS,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAElE,MAAM,KAAK,GAAa;QACtB,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI;KAC5C,CAAC;IACF,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,gBAAgB,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,CAAC;YACJ,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC;YACJ,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;QAC1B,KAAK,CAAC;YACJ,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;QAC1B,KAAK,CAAC;YACJ,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;QAC1B,KAAK,CAAC;YACJ,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;QAC1B,KAAK,CAAC;YACJ,OAAO,YAAY,EAAE,CAAC;QACxB,KAAK,CAAC;YACJ,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,CAAC;QACP,KAAK,CAAC;YACJ,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD;YACE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,CAAC;YACJ,OAAO,EAAE,CAAC,CAAC,4DAA4D;QACzE,KAAK,CAAC;YACJ,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;QAC1B,KAAK,CAAC;YACJ,OAAO,aAAa,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,qBAAqB;QACvE,KAAK,CAAC;YACJ,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;QAC1B,KAAK,CAAC;YACJ,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;QAC1B,KAAK,CAAC;YACJ,OAAO,YAAY,EAAE,CAAC;QACxB,KAAK,CAAC;YACJ,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC;YACJ,OAAO,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,kBAAkB;QACxF;YACE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}

package/dist/code/benchmark/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Code-mode benchmark suite — public entry point.
+ *
+ * Drives CodeAgent through a TDD-style suite of increasing complexity in
+ * isolated workspaces, scoring each task deterministically with Node's built-in
+ * test runner. Invokable from the CLI (`jiva benchmark`) and the HTTP API
+ * (`/api/benchmark/*`).
+ */
+export { BENCHMARK_TASKS, listTaskMetadata, selectTasks } from './tasks.js';
+export { BENCHMARK_SUITES, DEFAULT_SUITE_ID, getSuite, listSuiteMetadata } from './suites.js';
+export { runBenchmark, BenchmarkRunner } from './runner.js';
+export { createOrchestrator } from './orchestrator-factory.js';
+export type { OrchestratorInput, OrchestratorBundle, ModelConfigInput } from './orchestrator-factory.js';
+export { formatReportForCLI, toReportJSON } from './report.js';
+export type { BenchmarkTask, BenchmarkSuite, ScoringMode, TaskResult, SuiteResult, RunnerOptions, ProgressEvents, VerifyResult, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/code/benchmark/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/code/benchmark/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC9F,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACzG,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,YAAY,EACV,aAAa,EACb,cAAc,EACd,WAAW,EACX,UAAU,EACV,WAAW,EACX,aAAa,EACb,cAAc,EACd,YAAY,GACb,MAAM,YAAY,CAAC"}

package/dist/code/benchmark/index.js

@@ -0,0 +1,14 @@
+/**
+ * Code-mode benchmark suite — public entry point.
+ *
+ * Drives CodeAgent through a TDD-style suite of increasing complexity in
+ * isolated workspaces, scoring each task deterministically with Node's built-in
+ * test runner. Invokable from the CLI (`jiva benchmark`) and the HTTP API
+ * (`/api/benchmark/*`).
+ */
+export { BENCHMARK_TASKS, listTaskMetadata, selectTasks } from './tasks.js';
+export { BENCHMARK_SUITES, DEFAULT_SUITE_ID, getSuite, listSuiteMetadata } from './suites.js';
+export { runBenchmark, BenchmarkRunner } from './runner.js';
+export { createOrchestrator } from './orchestrator-factory.js';
+export { formatReportForCLI, toReportJSON } from './report.js';
+//# sourceMappingURL=index.js.map

package/dist/code/benchmark/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/code/benchmark/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC9F,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/code/benchmark/microcrm/assets/api.test.mjs

@@ -0,0 +1,254 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { createApp } from '../src/app.js';
+
+// Each test gets a fresh in-memory app on an ephemeral port, so tests are
+// independent and a partial implementation still passes the subset it supports.
+async function withServer(run) {
+  const server = createApp(':memory:');
+  await new Promise((res) => server.listen(0, res));
+  const { port } = server.address();
+  try {
+    await run(`http://127.0.0.1:${port}`);
+  } finally {
+    await new Promise((res) => server.close(res));
+  }
+}
+
+async function req(base, method, path, body, raw) {
+  const init = { method, headers: {} };
+  if (raw !== undefined) { init.headers['content-type'] = 'application/json'; init.body = raw; }
+  else if (body !== undefined) { init.headers['content-type'] = 'application/json'; init.body = JSON.stringify(body); }
+  const res = await fetch(base + path, init);
+  const text = await res.text();
+  let json = null;
+  try { json = text ? JSON.parse(text) : null; } catch { json = null; }
+  return { status: res.status, body: json };
+}
+
+const mkContact = (over = {}) => ({ name: 'Ada Lovelace', email: `ada${Math.random().toString(36).slice(2)}@example.com`, company: 'Analytical', ...over });
+
+// ── Contacts: create & validation ─────────────────────────────────────────────
+test('POST /contacts creates a contact (201) with id and created_at', () =>
+  withServer(async (base) => {
+    const c = mkContact();
+    const r = await req(base, 'POST', '/contacts', c);
+    assert.equal(r.status, 201);
+    assert.ok(Number.isInteger(r.body.id));
+    assert.equal(r.body.name, c.name);
+    assert.equal(r.body.email, c.email);
+    assert.ok(typeof r.body.created_at === 'string' && r.body.created_at.length > 0);
+  }));
+
+test('POST /contacts without name → 400', () =>
+  withServer(async (base) => {
+    const r = await req(base, 'POST', '/contacts', { email: 'x@y.com' });
+    assert.equal(r.status, 400);
+  }));
+
+test('POST /contacts without email → 400', () =>
+  withServer(async (base) => {
+    const r = await req(base, 'POST', '/contacts', { name: 'No Email' });
+    assert.equal(r.status, 400);
+  }));
+
+test('POST /contacts with malformed email → 400', () =>
+  withServer(async (base) => {
+    const r = await req(base, 'POST', '/contacts', { name: 'Bad', email: 'not-an-email' });
+    assert.equal(r.status, 400);
+  }));
+
+test('POST /contacts with duplicate email → 409', () =>
+  withServer(async (base) => {
+    const c = mkContact();
+    assert.equal((await req(base, 'POST', '/contacts', c)).status, 201);
+    const r = await req(base, 'POST', '/contacts', c);
+    assert.equal(r.status, 409);
+  }));
+
+test('POST /contacts with malformed JSON body → 400', () =>
+  withServer(async (base) => {
+    const r = await req(base, 'POST', '/contacts', undefined, '{ not json');
+    assert.equal(r.status, 400);
+  }));
+
+// ── Contacts: read ─────────────────────────────────────────────────────────────
+test('GET /contacts/:id returns the contact (200)', () =>
+  withServer(async (base) => {
+    const created = await req(base, 'POST', '/contacts', mkContact());
+    const r = await req(base, 'GET', `/contacts/${created.body.id}`);
+    assert.equal(r.status, 200);
+    assert.equal(r.body.id, created.body.id);
+  }));
+
+test('GET /contacts/:id unknown → 404', () =>
+  withServer(async (base) => {
+    const r = await req(base, 'GET', '/contacts/99999');
+    assert.equal(r.status, 404);
+  }));
+
+test('GET /contacts returns { data, total }', () =>
+  withServer(async (base) => {
+    await req(base, 'POST', '/contacts', mkContact());
+    await req(base, 'POST', '/contacts', mkContact());
+    const r = await req(base, 'GET', '/contacts');
+    assert.equal(r.status, 200);
+    assert.ok(Array.isArray(r.body.data));
+    assert.equal(r.body.total, 2);
+    assert.equal(r.body.data.length, 2);
+  }));
+
+test('GET /contacts?q= filters by name or email substring', () =>
+  withServer(async (base) => {
+    await req(base, 'POST', '/contacts', mkContact({ name: 'Grace Hopper', email: 'grace@navy.mil' }));
+    await req(base, 'POST', '/contacts', mkContact({ name: 'Alan Turing', email: 'alan@bletchley.uk' }));
+    const r = await req(base, 'GET', '/contacts?q=Hopper');
+    assert.equal(r.status, 200);
+    assert.equal(r.body.total, 1);
+    assert.equal(r.body.data[0].name, 'Grace Hopper');
+  }));
+
+test('GET /contacts?limit=&offset= paginates while total reflects the full count', () =>
+  withServer(async (base) => {
+    for (let i = 0; i < 5; i++) await req(base, 'POST', '/contacts', mkContact());
+    const r = await req(base, 'GET', '/contacts?limit=2&offset=0');
+    assert.equal(r.status, 200);
+    assert.equal(r.body.data.length, 2);
+    assert.equal(r.body.total, 5);
+  }));
+
+// ── Contacts: update & delete ──────────────────────────────────────────────────
+test('PATCH /contacts/:id updates a field (200)', () =>
+  withServer(async (base) => {
+    const created = await req(base, 'POST', '/contacts', mkContact({ company: 'Old' }));
+    const r = await req(base, 'PATCH', `/contacts/${created.body.id}`, { company: 'New Co' });
+    assert.equal(r.status, 200);
+    assert.equal(r.body.company, 'New Co');
+  }));
+
+test('PATCH /contacts/:id to an existing email → 409', () =>
+  withServer(async (base) => {
+    const a = await req(base, 'POST', '/contacts', mkContact());
+    const b = await req(base, 'POST', '/contacts', mkContact());
+    const r = await req(base, 'PATCH', `/contacts/${b.body.id}`, { email: a.body.email });
+    assert.equal(r.status, 409);
+  }));
+
+test('PATCH /contacts/:id unknown → 404', () =>
+  withServer(async (base) => {
+    const r = await req(base, 'PATCH', '/contacts/99999', { company: 'x' });
+    assert.equal(r.status, 404);
+  }));
+
+test('DELETE /contacts/:id → 204 then GET → 404', () =>
+  withServer(async (base) => {
+    const created = await req(base, 'POST', '/contacts', mkContact());
+    const del = await req(base, 'DELETE', `/contacts/${created.body.id}`);
+    assert.equal(del.status, 204);
+    const r = await req(base, 'GET', `/contacts/${created.body.id}`);
+    assert.equal(r.status, 404);
+  }));
+
+test('DELETE /contacts/:id unknown → 404', () =>
+  withServer(async (base) => {
+    const r = await req(base, 'DELETE', '/contacts/99999');
+    assert.equal(r.status, 404);
+  }));
+
+// ── Deals ──────────────────────────────────────────────────────────────────────
+test('POST /contacts/:id/deals creates a deal (201) defaulting stage to "lead"', () =>
+  withServer(async (base) => {
+    const c = await req(base, 'POST', '/contacts', mkContact());
+    const r = await req(base, 'POST', `/contacts/${c.body.id}/deals`, { title: 'Big deal', amount: 1000 });
+    assert.equal(r.status, 201);
+    assert.equal(r.body.stage, 'lead');
+    assert.equal(r.body.amount, 1000);
+    assert.equal(r.body.contact_id, c.body.id);
+  }));
+
+test('POST deal for unknown contact → 404', () =>
+  withServer(async (base) => {
+    const r = await req(base, 'POST', '/contacts/99999/deals', { title: 'x' });
+    assert.equal(r.status, 404);
+  }));
+
+test('POST deal without title → 400', () =>
+  withServer(async (base) => {
+    const c = await req(base, 'POST', '/contacts', mkContact());
+    const r = await req(base, 'POST', `/contacts/${c.body.id}/deals`, { amount: 10 });
+    assert.equal(r.status, 400);
+  }));
+
+test('POST deal with invalid stage → 400', () =>
+  withServer(async (base) => {
+    const c = await req(base, 'POST', '/contacts', mkContact());
+    const r = await req(base, 'POST', `/contacts/${c.body.id}/deals`, { title: 'x', stage: 'banana' });
+    assert.equal(r.status, 400);
+  }));
+
+test('POST deal with negative amount → 400', () =>
+  withServer(async (base) => {
+    const c = await req(base, 'POST', '/contacts', mkContact());
+    const r = await req(base, 'POST', `/contacts/${c.body.id}/deals`, { title: 'x', amount: -5 });
+    assert.equal(r.status, 400);
+  }));
+
+test('GET /contacts/:id/deals lists only that contact’s deals', () =>
+  withServer(async (base) => {
+    const a = await req(base, 'POST', '/contacts', mkContact());
+    const b = await req(base, 'POST', '/contacts', mkContact());
+    await req(base, 'POST', `/contacts/${a.body.id}/deals`, { title: 'A1' });
+    await req(base, 'POST', `/contacts/${a.body.id}/deals`, { title: 'A2' });
+    await req(base, 'POST', `/contacts/${b.body.id}/deals`, { title: 'B1' });
+    const r = await req(base, 'GET', `/contacts/${a.body.id}/deals`);
+    assert.equal(r.status, 200);
+    assert.equal(r.body.data.length, 2);
+  }));
+
+test('GET /deals?stage= filters by stage', () =>
+  withServer(async (base) => {
+    const c = await req(base, 'POST', '/contacts', mkContact());
+    await req(base, 'POST', `/contacts/${c.body.id}/deals`, { title: 'won1', stage: 'won', amount: 100 });
+    await req(base, 'POST', `/contacts/${c.body.id}/deals`, { title: 'lead1', stage: 'lead' });
+    const r = await req(base, 'GET', '/deals?stage=won');
+    assert.equal(r.status, 200);
+    assert.equal(r.body.data.length, 1);
+    assert.equal(r.body.data[0].stage, 'won');
+  }));
+
+test('PATCH /deals/:id updates the stage (200)', () =>
+  withServer(async (base) => {
+    const c = await req(base, 'POST', '/contacts', mkContact());
+    const d = await req(base, 'POST', `/contacts/${c.body.id}/deals`, { title: 'x', stage: 'lead' });
+    const r = await req(base, 'PATCH', `/deals/${d.body.id}`, { stage: 'won' });
+    assert.equal(r.status, 200);
+    assert.equal(r.body.stage, 'won');
+  }));
+
+test('GET /deals/summary aggregates count and totalAmount per stage', () =>
+  withServer(async (base) => {
+    const c = await req(base, 'POST', '/contacts', mkContact());
+    await req(base, 'POST', `/contacts/${c.body.id}/deals`, { title: 'w1', stage: 'won', amount: 100 });
+    await req(base, 'POST', `/contacts/${c.body.id}/deals`, { title: 'w2', stage: 'won', amount: 250 });
+    const r = await req(base, 'GET', '/deals/summary');
+    assert.equal(r.status, 200);
+    assert.equal(r.body.summary.won.count, 2);
+    assert.equal(r.body.summary.won.totalAmount, 350);
+    assert.equal(r.body.summary.lead.count, 0);
+  }));
+
+test('DELETE contact cascades to its deals', () =>
+  withServer(async (base) => {
+    const c = await req(base, 'POST', '/contacts', mkContact());
+    await req(base, 'POST', `/contacts/${c.body.id}/deals`, { title: 'd1', stage: 'won', amount: 10 });
+    await req(base, 'DELETE', `/contacts/${c.body.id}`);
+    const r = await req(base, 'GET', '/deals');
+    assert.equal(r.status, 200);
+    assert.equal(r.body.data.length, 0);
+  }));
+
+test('unknown route → 404', () =>
+  withServer(async (base) => {
+    const r = await req(base, 'GET', '/nope');
+    assert.equal(r.status, 404);
+  }));