[arko33]

Author change, committed exactly as written:

• Instead of pathspec excludes on every git call, the shadow index writes '.ghost/' once into the repo-local .git/info/exclude (never commits it, never touches the user's .gitignore) and then uses a plain 'git add -A' — so the recorder bookkeeping is skipped by vanilla git everywhere.
• listChangedFiles drops the pathspec narrowing accordingly.
  node --check green.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
ghostinthecodebase	Ready	Preview	Oct 21, 2026 11:12pm UTC

[testsprite]

Caution

Widespread failures — 23 failed

The backend run is not giving a meaningful product-quality signal because every failing case was reported as the same TestSprite internal error, so the score is computed on the executable subset only. On that subset, 1 test passed and 24 failed, which is a very weak result for an invoice API. The suite did at least confirm that one invoice visibility/retrieval flow works, but the rest of the coverage could not be validated due to the repeated harness failure. Because the Blocked count is non-zero here only implicitly via the shared internal error behavior, the score should be treated as provisional and tied to the executable subset, not the full intended suite.

Results: 1 passed • 23 failed • 24 total  ·  View Full Report ↗

23 failed tests

Unauthenticated request to invoices endpoint should not reveal data even if caller is otherwise valid

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Reject missing auth before invoice existence is evaluated

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Read a created invoice using the id captured from create

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Create an invoice then read it back

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Deny access when Alice reads Bob's invoice

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Get own seeded invoice by id as Alice

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Reject invoice listing without authentication

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Reject unauthenticated invoice read

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Create invoice with missing customer returns 422 and creates nothing

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

List invoices with a real user session returns only that user's seeded invoice

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Reject invoice listing with unknown user identity

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

List bob's own invoices

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Create invoice with non-numeric amount returns 422 and creates nothing

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Get own seeded invoice by id as Bob

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Unknown x-user-id value returns 401 on POST /api/invoices

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

List alice's own invoices

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Create and read invoice as Alice, ensuring owner isolation fields

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Create invoice with malformed JSON body returns 400 invalid_json

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Return 404 for an unknown invoice id

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Create invoice without x-user-id returns 401 and no invoice is created

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Unknown invoice id returns not_found even for authenticated user

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

List invoices does not leak other users' invoice records or fields

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

---

Invoice list response shape is stable for seeded invoices

Screenshot	Error details
—	TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af)

1 passed test

Test Case	Status	Screenshot
Invoice visibility and retrieval flow	Passed	—

Evaluation details

What could be better: The main issue is reliability of test execution: every failed case reports TestSprite hit an internal error while running this test; our team has been notified. (ref: b8e4219d-61c8-4c6f-bae7-48b97438b9af), so it is impossible to confirm whether the backend is failing on auth, validation, or invoice ownership logic. That means the suite is currently unable to distinguish healthy behavior from regressions on critical flows like GET /api/invoices, POST /api/invoices, and single-invoice reads. Even though the run surfaced many authorization and validation scenarios, the identical failure mode suggests the blocker is in the harness or environment rather than the API responses themselves.

Recommended next steps: First, rerun the suite with the TestSprite internal error resolved so the tests can actually exercise the API responses. If the error persists, inspect the test harness logs and the backend service health to confirm the endpoint is reachable and the auth/session capture is valid. Once the suite runs normally, focus on the highest-value invoice flows: create/read, invoice listing by user, unauthorized access rejection, and request validation for missing/invalid fields. Use the copy-ready prompt below to drive fixes once real response data is available.

---

_{Automated end-to-end testing powered by}