[arko33]

Real-user live session exposed demo set-dressing leaking into recordings:

• The 44 'district block' ambient filler towers were added to every city, including live recordings — an empty repo rendered dozens of fake buildings. Live sessions now get zero filler: the skyline is exactly the files the session touched.
• Autopsy verdict 'no anomaly detected — samples stayed inside every threshold' is a claim we cannot make with 0 runtime samples; live with no probes now shows 'runtime monitor waiting' and points at --app-url. typecheck green.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
ghostinthecodebase	Ready	Preview	Oct 21, 2026 7:17pm UTC

[testsprite]

Caution

Widespread failures — 23 failed

The backend run is not demonstrating stable, verifiable behavior: 1 test passed and 24 tests failed, with no frontend coverage in this run. Because the failures all reported the same TestSprite internal error reference, the executable subset effectively showed one passing integration path and a broad inability to complete the rest of the suite. The score is computed only from the executable subset (passed vs failed) and excludes any blocked tests; there were no explicit blocked results here. Overall, confidence in invoice create/read/list/auth flows is low, and the current run does not provide evidence that the API is consistently meeting its contract.

Results: 1 passed • 23 failed • 24 total  ·  View Full Report ↗

23 failed tests

Create an invoice then read it back

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

List invoices does not leak other users' invoice records or fields

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Create invoice with malformed JSON body returns 400 invalid_json

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Reject unauthenticated invoice read

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Create invoice without x-user-id returns 401 and no invoice is created

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Unauthenticated request to invoices endpoint should not reveal data even if caller is otherwise valid

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

List invoices with a real user session returns only that user's seeded invoice

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

List bob's own invoices

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Create and read invoice as Alice, ensuring owner isolation fields

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Reject invoice listing without authentication

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Unknown x-user-id value returns 401 on POST /api/invoices

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Invoice list response shape is stable for seeded invoices

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Reject missing auth before invoice existence is evaluated

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Unknown invoice id returns not_found even for authenticated user

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Get own seeded invoice by id as Alice

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Reject invoice listing with unknown user identity

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Create invoice with non-numeric amount returns 422 and creates nothing

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Deny access when Alice reads Bob's invoice

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Get own seeded invoice by id as Bob

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

List alice's own invoices

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Create invoice with missing customer returns 422 and creates nothing

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Read a created invoice using the id captured from create

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

---

Return 404 for an unknown invoice id

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)

1 passed test

Test Case	Status	Screenshot
Invoice visibility and retrieval flow	Passed	—

Evaluation details

What could be better: The main issue is that nearly every invoice-related scenario failed at execution time with the same harness-side message: "TestSprite hit an internal error while running this test; our team has been notified. (ref: d1e0cc82-242a-48ed-ac90-ee8f22471074)". That prevents the suite from distinguishing real API defects from test-environment problems. Still, the coverage areas are clear: create/read flows, list isolation, auth rejection, malformed JSON handling, and 404/422 validation on /api/invoices. If these endpoints are intended to be production-ready, they need to be re-run under a stable harness so status codes, ownership isolation, and request validation can be confirmed.

Recommended next steps: First, rerun the invoice API suite in a clean environment to determine whether the repeated TestSprite internal error is masking real backend failures or is purely a harness issue. If the error persists, inspect the test runner logs and any shared setup/teardown around invoice fixtures, auth headers, and seeded users. If the runner succeeds, focus on the highest-risk behaviors in the invoice endpoints: authenticated create/read/list, owner isolation, malformed JSON, missing x-user-id, and unknown invoice IDs. Then fix the API until POST /api/invoices, GET /api/invoices, and invoice-by-id responses consistently match the expected auth and validation contract. See the fix prompt for a copy-ready task list.

---

_{Automated end-to-end testing powered by}