Repository navigation
feat: real probe latency + city client polish (author edits, as-is) - #22
Conversation
… hardening (author edits, as-is)
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
|
Caution
|
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Reject invoice listing with unknown user identity
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Create an invoice then read it back
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Get own seeded invoice by id as Bob
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Create invoice with non-numeric amount returns 422 and creates nothing
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Create invoice with malformed JSON body returns 400 invalid_json
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Reject invoice listing without authentication
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Unauthenticated request to invoices endpoint should not reveal data even if caller is otherwise valid
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
List invoices with a real user session returns only that user's seeded invoice
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Invoice list response shape is stable for seeded invoices
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Create invoice with missing customer returns 422 and creates nothing
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Return 404 for an unknown invoice id
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Get own seeded invoice by id as Alice
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Reject unauthenticated invoice read
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
List invoices does not leak other users' invoice records or fields
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Deny access when Alice reads Bob's invoice
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Unknown x-user-id value returns 401 on POST /api/invoices
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Create invoice without x-user-id returns 401 and no invoice is created
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Unknown invoice id returns not_found even for authenticated user
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Read a created invoice using the id captured from create
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Reject missing auth before invoice existence is evaluated
| Screenshot | Error details |
|---|---|
|
— |
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184) |
Evaluation details
What could be better: The main issue is test harness execution, not a confirmed backend contract failure: 24 tests failed with the same internal error reference (
TestSprite hit an internal error while running this test; our team has been notified. (ref: 0f6d37d9-bdb3-45be-8b48-a0c02e49b184)). That means we do not have evidence yet for whether POST /api/invoices, invoice reads, auth checks, or validation are correct. The suite’s intended coverage is strong—401/403, 422, 404, owner isolation, and list-shape checks—but the run did not surface actual status codes or response bodies. The project needs a clean rerun with a stable harness before any backend behavior can be trusted.
Recommended next steps: First, rerun the backend suite after fixing the TestSprite execution issue so the tests can reach the API and return real assertions. Once the harness is healthy, focus on the highest-value invoice flows: authenticated create/read, owner isolation on reads and list endpoints, and request validation for missing fields and malformed JSON. Verify that unauthenticated requests are rejected before existence checks, and that unknown IDs return the documented 404/not_found behavior. If the rerun still fails, inspect server logs and test setup for auth fixture or environment mismatches. Use the fix prompt below to hand the agent the exact failing areas to investigate.
Author change, committed exactly as written:
node --check green on all touched .mjs files.