[arko33]

User feedback: the 2D /city card did not read like the product. This rebuilds /city with the same layout language as the published playground — 3D city center (three.js via browser CDN, importmap), session/turns panel left, selected-tower panel right with the real patch link (/diff/), turn dock bottom — all streamed from the recorder's /session on loopback.

• Towers: files actually touched; git sessions → height = churn; non-git → low tiles + honest mode note; no demo filler ever.
• Orbit controls with damping + slow auto-rotate; raycaster hover tooltip (path/churn/turn/patch link); click selects and lights the tower.
• /city2d kept as the zero-dep fallback and linked from both pages (offline CDN case). Verified: node --check, sandbox non-git run — /city 200 (importmap+three), /city2d 200, checkpoints recorded.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
ghostinthecodebase	Ready	Preview	Oct 21, 2026 7:27pm UTC

[testsprite]

Caution

Widespread failures — 23 failed

The executable subset of the backend suite does not show product behavior failures because every functional/validation case was blocked by the same TestSprite internal error reference, while 1 integration test passed. On the data available, the backend appears partially healthy but not confidently verified: 1 passed, 23 failed, with the failures all attributable to the harness rather than the API under test. Because the blocked/execution-error cases are excluded from the score, the quality score is computed on the executable subset only and should be treated as a limited signal. The repeated internal error also means current reliability is unproven for invoice auth, validation, and ownership flows.

Results: 1 passed • 23 failed • 24 total  ·  View Full Report ↗

23 failed tests

Get own seeded invoice by id as Alice

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Create an invoice then read it back

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Create invoice with non-numeric amount returns 422 and creates nothing

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Unauthenticated request to invoices endpoint should not reveal data even if caller is otherwise valid

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Get own seeded invoice by id as Bob

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Create invoice with missing customer returns 422 and creates nothing

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Create invoice without x-user-id returns 401 and no invoice is created

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Unknown x-user-id value returns 401 on POST /api/invoices

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Return 404 for an unknown invoice id

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

List alice's own invoices

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Reject missing auth before invoice existence is evaluated

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Unknown invoice id returns not_found even for authenticated user

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Reject unauthenticated invoice read

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

List bob's own invoices

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Deny access when Alice reads Bob's invoice

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Reject invoice listing with unknown user identity

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

List invoices does not leak other users' invoice records or fields

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Create invoice with malformed JSON body returns 400 invalid_json

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Reject invoice listing without authentication

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Create and read invoice as Alice, ensuring owner isolation fields

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

List invoices with a real user session returns only that user's seeded invoice

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Read a created invoice using the id captured from create

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

---

Invoice list response shape is stable for seeded invoices

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)

1 passed test

Test Case	Status	Screenshot
Invoice visibility and retrieval flow	Passed	—

Evaluation details

What could be better: The main weakness is test executability, not a confirmed API regression: 23 backend cases all failed with the same message, "TestSprite hit an internal error while running this test; our team has been notified. (ref: 744806e1-cb74-47d5-bdb8-7b028ebc01fe)". That means the suite is not currently exercising key invoice flows such as GET /api/invoices/:id, POST /api/invoices, auth rejection, and validation behavior. The only concrete positive signal is the passed "Invoice visibility and retrieval flow" integration test. Until the harness issue is resolved, there is no trustworthy evidence about whether the app returns correct 401/404/422 behavior or enforces owner isolation.

Recommended next steps: First, fix the TestSprite runner issue tied to ref 744806e1-cb74-47d5-bdb8-7b028ebc01fe, because the current run cannot distinguish product bugs from infrastructure problems. Re-run the invoice suite after that and confirm the core contract around authentication, record ownership, and request validation: unauthenticated requests should be rejected, unknown users should get 401, unknown invoice ids should return 404, and invalid create payloads should return 422/400 without creating records. If the runner still fails, isolate by running only the passing integration case and one simple CRUD test at a time. See the fixPrompt panel for the copy-ready action list and verification steps.

---

_{Automated end-to-end testing powered by}