api-tests-coverage 1.0.20 → 1.0.22

package/dist/dashboard/dist/reports/coverage-summary.json

@@ -1,47 +1,61 @@
 {
-  "generatedAt": "2026-03-09T05:11:14.677Z",
+  "generatedAt": "2026-03-13T00:00:00.000Z",
+  "discoveryInfo": {
+    "projectRoot": "/wallets-payments-api",
+    "languages": [
+      "typescript"
+    ],
+    "frameworks": [
+      "express",
+      "jest"
+    ],
+    "serviceFilesCount": 24,
+    "testFilesCount": 9,
+    "specFilesCount": 1,
+    "analysisMode": "full"
+  },
   "summary": [
     {
       "type": "endpoint",
+      "totalItems": 15,
+      "coveredItems": 14,
+      "coveragePercent": 93.33
+    },
+    {
+      "type": "parameter",
       "totalItems": 13,
-      "coveredItems": 12,
-      "coveragePercent": 92.31
+      "coveredItems": 10,
+      "coveragePercent": 76.92
     },
     {
       "type": "business",
-      "totalItems": 8,
-      "coveredItems": 7,
-      "coveragePercent": 87.5
+      "totalItems": 9,
+      "coveredItems": 8,
+      "coveragePercent": 88.89
     },
     {
-      "type": "error",
-      "totalItems": 30,
-      "coveredItems": 0,
-      "coveragePercent": 0
+      "type": "integration",
+      "totalItems": 5,
+      "coveredItems": 3,
+      "coveragePercent": 60.0
     },
     {
       "type": "security",
-      "totalItems": 26,
-      "coveredItems": 6,
-      "coveragePercent": 23.08
-    },
-    {
-      "type": "parameter",
-      "totalItems": 12,
-      "coveredItems": 9,
-      "coveragePercent": 75.0
+      "totalItems": 27,
+      "coveredItems": 7,
+      "coveragePercent": 25.93
     },
     {
-      "type": "integration",
-      "totalItems": 5,
-      "coveredItems": 4,
-      "coveragePercent": 80.0
+      "type": "error",
+      "totalItems": 30,
+      "coveredItems": 0,
+      "coveragePercent": 0.0
     },
     {
       "type": "performance",
       "totalItems": 6,
-      "coveredItems": 4,
-      "coveragePercent": 66.67
+      "coveredItems": 3,
+      "coveragePercent": 50.0
     },
     {
       "type": "resilience",
@@ -51,712 +65,930 @@
     }
   ],
   "details": {
-    "endpoint": [
-      {
-        "endpoint": {
-          "method": "GET",
-          "path": "/wallets"
-        },
-        "covered": true
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets"
-        },
-        "covered": true
-      },
-      {
-        "endpoint": {
-          "method": "GET",
-          "path": "/wallets/{id}"
-        },
-        "covered": true
-      },
-      {
-        "endpoint": {
-          "method": "DELETE",
-          "path": "/wallets/{id}"
-        },
-        "covered": true
-      },
-      {
-        "endpoint": {
-          "method": "PATCH",
-          "path": "/wallets/{id}/freeze"
-        },
-        "covered": true
-      },
-      {
-        "endpoint": {
-          "method": "PATCH",
-          "path": "/wallets/{id}/unfreeze"
-        },
-        "covered": true
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets/{id}/fund"
-        },
-        "covered": true
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets/{id}/debit"
-        },
-        "covered": true
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets/{id}/transfer"
-        },
-        "covered": true
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/payments"
-        },
-        "covered": true
-      },
-      {
-        "endpoint": {
-          "method": "GET",
-          "path": "/payments/{id}"
-        },
-        "covered": true
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/payments/{id}/refund"
-        },
-        "covered": true
-      },
-      {
-        "endpoint": {
-          "method": "GET",
-          "path": "/transactions"
-        },
-        "covered": false
-      },
-      {
-        "endpoint": {
-          "method": "GET",
-          "path": "/api/users"
-        },
-        "covered": true
-      },
-      {
-        "endpoint": {
-          "method": "GET",
-          "path": "/api/products"
-        },
-        "covered": true
-      }
-    ],
-    "business": [
-      {
-        "name": "min-fund-amount",
-        "covered": true
-      },
-      {
-        "name": "insufficient-funds",
-        "covered": true
-      },
-      {
-        "name": "frozen-wallet-reject",
-        "covered": true
-      },
-      {
-        "name": "daily-limit",
-        "covered": false
-      },
-      {
-        "name": "transfer-same-currency",
-        "covered": true
-      },
-      {
-        "name": "refund-window",
-        "covered": true
-      },
-      {
-        "name": "fraud-check",
-        "covered": true
-      },
-      {
-        "name": "idempotency",
-        "covered": true
-      },
-      {
-        "name": "unique email validation",
-        "covered": true
-      }
-    ],
-    "error": [
-      {
-        "endpoint": {
-          "method": "GET",
-          "path": "/wallets"
-        },
-        "covered": false,
-        "errorCodes": [
-          "401"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets"
-        },
-        "covered": false,
-        "errorCodes": [
-          "400"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets"
-        },
-        "covered": false,
-        "errorCodes": [
-          "401"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "GET",
-          "path": "/wallets/{id}"
-        },
-        "covered": false,
-        "errorCodes": [
-          "401"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "GET",
-          "path": "/wallets/{id}"
-        },
-        "covered": false,
-        "errorCodes": [
-          "404"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "DELETE",
-          "path": "/wallets/{id}"
-        },
-        "covered": false,
-        "errorCodes": [
-          "401"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "DELETE",
-          "path": "/wallets/{id}"
-        },
-        "covered": false,
-        "errorCodes": [
-          "404"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "PATCH",
-          "path": "/wallets/{id}/freeze"
-        },
-        "covered": false,
-        "errorCodes": [
-          "401"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "PATCH",
-          "path": "/wallets/{id}/freeze"
-        },
-        "covered": false,
-        "errorCodes": [
-          "404"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "PATCH",
-          "path": "/wallets/{id}/freeze"
-        },
-        "covered": false,
-        "errorCodes": [
-          "422"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "PATCH",
-          "path": "/wallets/{id}/unfreeze"
-        },
-        "covered": false,
-        "errorCodes": [
-          "401"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "PATCH",
-          "path": "/wallets/{id}/unfreeze"
-        },
-        "covered": false,
-        "errorCodes": [
-          "404"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "PATCH",
-          "path": "/wallets/{id}/unfreeze"
-        },
-        "covered": false,
-        "errorCodes": [
-          "422"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets/{id}/fund"
-        },
-        "covered": false,
-        "errorCodes": [
-          "401"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets/{id}/fund"
-        },
-        "covered": false,
-        "errorCodes": [
-          "404"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets/{id}/fund"
-        },
-        "covered": false,
-        "errorCodes": [
-          "422"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets/{id}/debit"
-        },
-        "covered": false,
-        "errorCodes": [
-          "401"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets/{id}/debit"
-        },
-        "covered": false,
-        "errorCodes": [
-          "404"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets/{id}/debit"
-        },
-        "covered": false,
-        "errorCodes": [
-          "422"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets/{id}/transfer"
-        },
-        "covered": false,
-        "errorCodes": [
-          "401"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets/{id}/transfer"
-        },
-        "covered": false,
-        "errorCodes": [
-          "404"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/wallets/{id}/transfer"
-        },
-        "covered": false,
-        "errorCodes": [
-          "422"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/payments"
-        },
-        "covered": false,
-        "errorCodes": [
-          "401"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/payments"
-        },
-        "covered": false,
-        "errorCodes": [
-          "422"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "GET",
-          "path": "/payments/{id}"
-        },
-        "covered": false,
-        "errorCodes": [
-          "401"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "GET",
-          "path": "/payments/{id}"
-        },
-        "covered": false,
-        "errorCodes": [
-          "404"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/payments/{id}/refund"
-        },
-        "covered": false,
-        "errorCodes": [
-          "401"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/payments/{id}/refund"
-        },
-        "covered": false,
-        "errorCodes": [
-          "404"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "POST",
-          "path": "/payments/{id}/refund"
-        },
-        "covered": false,
-        "errorCodes": [
-          "422"
-        ]
-      },
-      {
-        "endpoint": {
-          "method": "GET",
-          "path": "/transactions"
-        },
-        "covered": false,
-        "errorCodes": [
-          "401"
-        ]
-      }
-    ],
-    "security": [
-      {
-        "control": {
+    "endpoint": {
+      "items": [
+        {
+          "id": "GET /wallets",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts"
+          ],
+          "evidence": {
+            "confidence": "high",
+            "detectionMode": "direct",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        },
+        {
+          "id": "POST /wallets",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts",
+            "tests/integration/wallets.integration.test.ts"
+          ],
+          "evidence": {
+            "confidence": "high",
+            "detectionMode": "direct",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        },
+        {
+          "id": "GET /wallets/{id}",
+          "covered": true,
+          "tests": [
+            "tests/integration/wallets.integration.test.ts"
+          ],
+          "evidence": {
+            "confidence": "high",
+            "detectionMode": "direct",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        },
+        {
+          "id": "DELETE /wallets/{id}",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts",
+            "tests/integration/wallets.integration.test.ts"
+          ],
+          "evidence": {
+            "confidence": "medium",
+            "detectionMode": "string-template",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        },
+        {
+          "id": "PATCH /wallets/{id}/freeze",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts",
+            "tests/integration/wallets.integration.test.ts"
+          ],
+          "evidence": {
+            "confidence": "medium",
+            "detectionMode": "string-template",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        },
+        {
+          "id": "PATCH /wallets/{id}/unfreeze",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts",
+            "tests/integration/wallets.integration.test.ts"
+          ],
+          "evidence": {
+            "confidence": "medium",
+            "detectionMode": "string-template",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        },
+        {
+          "id": "POST /wallets/{id}/fund",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts",
+            "tests/integration/wallets.integration.test.ts"
+          ],
+          "evidence": {
+            "confidence": "medium",
+            "detectionMode": "string-template",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        },
+        {
+          "id": "POST /wallets/{id}/debit",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts",
+            "tests/integration/wallets.integration.test.ts"
+          ],
+          "evidence": {
+            "confidence": "medium",
+            "detectionMode": "string-template",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        },
+        {
+          "id": "POST /wallets/{id}/transfer",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts",
+            "tests/integration/wallets.integration.test.ts"
+          ],
+          "evidence": {
+            "confidence": "medium",
+            "detectionMode": "string-template",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        },
+        {
+          "id": "POST /payments",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/payments.blackbox.test.ts",
+            "tests/integration/payments.integration.test.ts"
+          ],
+          "evidence": {
+            "confidence": "high",
+            "detectionMode": "direct",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        },
+        {
+          "id": "GET /payments/{id}",
+          "covered": true,
+          "tests": [
+            "tests/integration/payments.integration.test.ts"
+          ],
+          "evidence": {
+            "confidence": "high",
+            "detectionMode": "direct",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        },
+        {
+          "id": "POST /payments/{id}/refund",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/payments.blackbox.test.ts",
+            "tests/integration/payments.integration.test.ts"
+          ],
+          "evidence": {
+            "confidence": "medium",
+            "detectionMode": "string-template",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        },
+        {
+          "id": "GET /transactions",
+          "covered": false,
+          "tests": []
+        },
+        {
+          "id": "GET /api/users",
+          "covered": true,
+          "tests": [
+            "tests/integration/users.integration.test.ts"
+          ],
+          "evidence": {
+            "confidence": "high",
+            "detectionMode": "direct",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        },
+        {
+          "id": "GET /api/products",
+          "covered": true,
+          "tests": [
+            "tests/integration/products.integration.test.ts"
+          ],
+          "evidence": {
+            "confidence": "high",
+            "detectionMode": "direct",
+            "matchedFrameworks": [
+              "typescript"
+            ]
+          }
+        }
+      ]
+    },
+    "parameter": {
+      "items": [
+        {
+          "id": "GET /wallets:query.status",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts"
+          ]
+        },
+        {
+          "id": "GET /wallets:query.limit",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts"
+          ]
+        },
+        {
+          "id": "GET /wallets:query.page",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts"
+          ]
+        },
+        {
+          "id": "GET /wallets/{id}:path.id",
+          "covered": true,
+          "tests": [
+            "tests/integration/wallets.integration.test.ts"
+          ]
+        },
+        {
+          "id": "DELETE /wallets/{id}:path.id",
+          "covered": true,
+          "tests": [
+            "tests/integration/wallets.integration.test.ts"
+          ]
+        },
+        {
+          "id": "POST /wallets/{id}/fund:body.amount",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts"
+          ]
+        },
+        {
+          "id": "POST /wallets/{id}/fund:body.currency",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts"
+          ]
+        },
+        {
+          "id": "POST /wallets/{id}/debit:body.amount",
+          "covered": true,
+          "tests": [
+            "tests/integration/wallets.integration.test.ts"
+          ]
+        },
+        {
+          "id": "POST /wallets/{id}/transfer:body.targetWalletId",
+          "covered": false,
+          "tests": []
+        },
+        {
+          "id": "POST /payments:body.amount",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/payments.blackbox.test.ts"
+          ]
+        },
+        {
+          "id": "POST /payments:body.currency",
+          "covered": false,
+          "tests": []
+        },
+        {
+          "id": "GET /payments/{id}:path.id",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/payments.blackbox.test.ts"
+          ]
+        },
+        {
+          "id": "POST /payments/{id}/refund:path.id",
+          "covered": false,
+          "tests": []
+        }
+      ]
+    },
+    "business": {
+      "items": [
+        {
+          "id": "min-fund-amount",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/payments.blackbox.test.ts",
+            "tests/blackbox/wallets.blackbox.test.ts",
+            "tests/integration/wallets.integration.test.ts"
+          ],
+          "description": "Minimum funding amount is $1"
+        },
+        {
+          "id": "insufficient-funds",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/payments.blackbox.test.ts",
+            "tests/blackbox/wallets.blackbox.test.ts",
+            "tests/integration/wallets.integration.test.ts",
+            "tests/unit/riskService.test.ts",
+            "tests/unit/walletService.test.ts"
+          ],
+          "description": "Debit cannot exceed balance"
+        },
+        {
+          "id": "frozen-wallet-reject",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts",
+            "tests/integration/wallets.integration.test.ts",
+            "tests/unit/riskService.test.ts",
+            "tests/unit/walletService.test.ts"
+          ],
+          "description": "Frozen wallets reject all transactions"
+        },
+        {
+          "id": "daily-limit",
+          "covered": false,
+          "tests": [],
+          "description": "Daily transaction limit is $10,000"
+        },
+        {
+          "id": "transfer-same-currency",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/payments.blackbox.test.ts",
+            "tests/blackbox/wallets.blackbox.test.ts",
+            "tests/integration/wallets.integration.test.ts"
+          ],
+          "description": "Transfer requires matching currencies"
+        },
+        {
+          "id": "refund-window",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/payments.blackbox.test.ts",
+            "tests/blackbox/wallets.blackbox.test.ts",
+            "tests/integration/payments.integration.test.ts",
+            "tests/integration/wallets.integration.test.ts"
+          ],
+          "description": "Refund allowed only within 30 days"
+        },
+        {
+          "id": "fraud-check",
+          "covered": true,
+          "tests": [
+            "tests/unit/paymentService.test.ts",
+            "tests/wiremock/fraudEngine.wiremock.test.ts"
+          ],
+          "description": "Payments require fraud check approval"
+        },
+        {
+          "id": "idempotency",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/payments.blackbox.test.ts",
+            "tests/integration/payments.integration.test.ts"
+          ],
+          "description": "Duplicate requests with same key return same result"
+        },
+        {
+          "id": "unique email",
+          "covered": true,
+          "tests": [
+            "tests/integration/users.integration.test.ts"
+          ],
+          "description": "Unique email required for all user accounts"
+        }
+      ]
+    },
+    "integration": {
+      "items": [
+        {
+          "id": "User Registration to First Payment Flow",
+          "covered": true,
+          "tests": [
+            "tests/integration/wallets.integration.test.ts",
+            "tests/blackbox/payments.blackbox.test.ts"
+          ],
+          "flowName": "User Registration to First Payment Flow",
+          "steps": 4,
+          "coveredSteps": 4
+        },
+        {
+          "id": "Wallet Fund and Transfer Flow",
+          "covered": true,
+          "tests": [
+            "tests/integration/wallets.integration.test.ts"
+          ],
+          "flowName": "Wallet Fund and Transfer Flow",
+          "steps": 3,
+          "coveredSteps": 3
+        },
+        {
+          "id": "Payment Refund Lifecycle",
+          "covered": false,
+          "tests": [],
+          "flowName": "Payment Refund Lifecycle",
+          "steps": 3,
+          "coveredSteps": 0
+        },
+        {
+          "id": "Fraud Detection Flow",
+          "covered": true,
+          "tests": [
+            "tests/unit/riskService.test.ts"
+          ],
+          "flowName": "Fraud Detection Flow",
+          "steps": 5,
+          "coveredSteps": 4
+        },
+        {
+          "id": "Wallet Freeze and Unfreeze Flow",
+          "covered": false,
+          "tests": [],
+          "flowName": "Wallet Freeze and Unfreeze Flow",
+          "steps": 2,
+          "coveredSteps": 0
+        }
+      ]
+    },
+    "security": {
+      "items": [
+        {
           "id": "authentication:bearerAuth",
+          "covered": true,
+          "tests": [
+            "returns 401 when no token",
+            "returns 401 when no token provided",
+            "returns 401 for invalid token",
+            "returns 401 without auth"
+          ],
           "category": "authentication",
           "description": "Authentication via security scheme \"bearerAuth\" (http/bearer)"
         },
-        "covered": true
-      },
-      {
-        "control": {
+        {
           "id": "cryptography:https",
+          "covered": false,
+          "tests": [],
           "category": "cryptography",
-          "description": "API servers include non-HTTPS URLs – cryptographic transport security may be missing"
+          "description": "API servers include non-HTTPS URLs \u2013 cryptographic transport security may be missing"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "authorization:get:/wallets",
+          "covered": false,
+          "tests": [],
           "category": "authorization",
           "description": "Authorization check for GET /wallets"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "authorization:post:/wallets",
+          "covered": false,
+          "tests": [],
           "category": "authorization",
           "description": "Authorization check for POST /wallets"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "input-validation:post:/wallets",
+          "covered": true,
+          "tests": [
+            "returns 400 when currency is missing",
+            "returns 400 for unsupported currency",
+            "returns 422 for insufficient funds",
+            "returns 401 for invalid token",
+            "returns 400 for invalid currency",
+            "returns 422 with insufficient funds"
+          ],
           "category": "input-validation",
           "description": "Input validation for POST /wallets"
         },
-        "covered": true
-      },
-      {
-        "control": {
+        {
           "id": "authorization:get:/wallets/{id}",
+          "covered": false,
+          "tests": [],
           "category": "authorization",
           "description": "Authorization check for GET /wallets/{id}"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "input-validation:get:/wallets/{id}",
+          "covered": true,
+          "tests": [
+            "returns 422 for insufficient funds",
+            "returns 400 for invalid currency",
+            "returns 422 with insufficient funds"
+          ],
           "category": "input-validation",
           "description": "Input validation for GET /wallets/{id}"
         },
-        "covered": true
-      },
-      {
-        "control": {
+        {
           "id": "authorization:delete:/wallets/{id}",
+          "covered": false,
+          "tests": [],
           "category": "authorization",
           "description": "Authorization check for DELETE /wallets/{id}"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "input-validation:delete:/wallets/{id}",
+          "covered": true,
+          "tests": [
+            "returns 422 for insufficient funds",
+            "returns 400 for invalid currency",
+            "returns 422 with insufficient funds"
+          ],
           "category": "input-validation",
           "description": "Input validation for DELETE /wallets/{id}"
         },
-        "covered": true
-      },
-      {
-        "control": {
+        {
           "id": "authorization:patch:/wallets/{id}/freeze",
+          "covered": false,
+          "tests": [],
           "category": "authorization",
           "description": "Authorization check for PATCH /wallets/{id}/freeze"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "input-validation:patch:/wallets/{id}/freeze",
+          "covered": false,
+          "tests": [],
           "category": "input-validation",
           "description": "Input validation for PATCH /wallets/{id}/freeze"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "authorization:patch:/wallets/{id}/unfreeze",
+          "covered": false,
+          "tests": [],
           "category": "authorization",
           "description": "Authorization check for PATCH /wallets/{id}/unfreeze"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "input-validation:patch:/wallets/{id}/unfreeze",
+          "covered": false,
+          "tests": [],
           "category": "input-validation",
           "description": "Input validation for PATCH /wallets/{id}/unfreeze"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "authorization:post:/wallets/{id}/fund",
+          "covered": false,
+          "tests": [],
           "category": "authorization",
           "description": "Authorization check for POST /wallets/{id}/fund"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "input-validation:post:/wallets/{id}/fund",
+          "covered": false,
+          "tests": [],
           "category": "input-validation",
           "description": "Input validation for POST /wallets/{id}/fund"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "authorization:post:/wallets/{id}/debit",
+          "covered": false,
+          "tests": [],
           "category": "authorization",
           "description": "Authorization check for POST /wallets/{id}/debit"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "input-validation:post:/wallets/{id}/debit",
+          "covered": false,
+          "tests": [],
           "category": "input-validation",
           "description": "Input validation for POST /wallets/{id}/debit"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "authorization:post:/wallets/{id}/transfer",
+          "covered": false,
+          "tests": [],
           "category": "authorization",
           "description": "Authorization check for POST /wallets/{id}/transfer"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "input-validation:post:/wallets/{id}/transfer",
+          "covered": false,
+          "tests": [],
           "category": "input-validation",
           "description": "Input validation for POST /wallets/{id}/transfer"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "authorization:post:/payments",
+          "covered": false,
+          "tests": [],
           "category": "authorization",
           "description": "Authorization check for POST /payments"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "input-validation:post:/payments",
+          "covered": true,
+          "tests": [
+            "returns 400 for missing required fields",
+            "returns 422 for invalid (non-existent) wallet",
+            "returns 422 when refunding a non-completed payment"
+          ],
           "category": "input-validation",
           "description": "Input validation for POST /payments"
         },
-        "covered": true
-      },
-      {
-        "control": {
+        {
           "id": "authorization:get:/payments/{id}",
+          "covered": false,
+          "tests": [],
           "category": "authorization",
           "description": "Authorization check for GET /payments/{id}"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "input-validation:get:/payments/{id}",
+          "covered": true,
+          "tests": [
+            "returns 422 when refunding a non-completed payment"
+          ],
           "category": "input-validation",
           "description": "Input validation for GET /payments/{id}"
         },
-        "covered": true
-      },
-      {
-        "control": {
+        {
           "id": "authorization:post:/payments/{id}/refund",
+          "covered": false,
+          "tests": [],
           "category": "authorization",
           "description": "Authorization check for POST /payments/{id}/refund"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "input-validation:post:/payments/{id}/refund",
+          "covered": false,
+          "tests": [],
           "category": "input-validation",
           "description": "Input validation for POST /payments/{id}/refund"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "authorization:get:/transactions",
+          "covered": false,
+          "tests": [],
           "category": "authorization",
           "description": "Authorization check for GET /transactions"
         },
-        "covered": false
-      },
-      {
-        "control": {
+        {
           "id": "authentication:JWT",
+          "covered": true,
+          "tests": [
+            "returns 401 for expired JWT",
+            "returns 401 for invalid JWT signature"
+          ],
           "category": "authentication",
           "description": "JWT token signature and expiry validation"
-        },
-        "covered": true
-      }
-    ],
-    "parameter": {
-      "items": [
-        { "id": "page", "covered": true, "tests": ["pagination returns page 1", "pagination defaults to page 1"] },
-        { "id": "limit", "covered": true, "tests": ["pagination returns limited results"] },
-        { "id": "offset", "covered": false, "tests": [] },
-        { "id": "currency", "covered": true, "tests": ["POST /wallets validates currency"] },
-        { "id": "amount", "covered": true, "tests": ["POST /wallets/{id}/fund validates amount"] },
-        { "id": "walletId", "covered": true, "tests": ["GET /wallets/{id} validates walletId"] },
-        { "id": "paymentId", "covered": true, "tests": ["GET /payments/{id} validates paymentId"] },
-        { "id": "idempotencyKey", "covered": true, "tests": ["POST /payments validates idempotency key"] },
-        { "id": "fromWalletId", "covered": true, "tests": ["POST /wallets/{id}/transfer validates fromWalletId"] },
-        { "id": "toWalletId", "covered": false, "tests": [] },
-        { "id": "status", "covered": false, "tests": [] },
-        { "id": "startDate", "covered": false, "tests": [] }
+        }
       ]
     },
-    "performance": {
+    "error": {
       "items": [
-        { "id": "response-time-200ms", "threshold": "200ms", "covered": true, "tests": ["response time within 200ms"] },
-        { "id": "throughput", "threshold": "1000 rps", "covered": true, "tests": ["throughput load test"] },
-        { "id": "concurrent-users", "threshold": "100", "covered": true, "tests": ["concurrent users load test"] },
-        { "id": "bulk-operations", "threshold": "500ms", "covered": false, "tests": [] },
-        { "id": "db-query-time", "threshold": "50ms", "covered": true, "tests": ["db query benchmark"] },
-        { "id": "cache-hit-rate", "threshold": "80%", "covered": false, "tests": [] }
+        {
+          "id": "GET /wallets:401",
+          "covered": false,
+          "tests": [],
+          "description": "Unauthorized"
+        },
+        {
+          "id": "POST /wallets:400",
+          "covered": false,
+          "tests": [],
+          "description": "Invalid input"
+        },
+        {
+          "id": "POST /wallets:401",
+          "covered": false,
+          "tests": [],
+          "description": "Unauthorized"
+        },
+        {
+          "id": "GET /wallets/{id}:401",
+          "covered": false,
+          "tests": [],
+          "description": "Unauthorized"
+        },
+        {
+          "id": "GET /wallets/{id}:404",
+          "covered": false,
+          "tests": [],
+          "description": "Not found"
+        },
+        {
+          "id": "DELETE /wallets/{id}:401",
+          "covered": false,
+          "tests": [],
+          "description": "Unauthorized"
+        },
+        {
+          "id": "DELETE /wallets/{id}:404",
+          "covered": false,
+          "tests": [],
+          "description": "Not found"
+        },
+        {
+          "id": "PATCH /wallets/{id}/freeze:401",
+          "covered": false,
+          "tests": [],
+          "description": "Unauthorized"
+        },
+        {
+          "id": "PATCH /wallets/{id}/freeze:404",
+          "covered": false,
+          "tests": [],
+          "description": "Not found"
+        },
+        {
+          "id": "PATCH /wallets/{id}/freeze:422",
+          "covered": false,
+          "tests": [],
+          "description": "Unprocessable"
+        },
+        {
+          "id": "PATCH /wallets/{id}/unfreeze:401",
+          "covered": false,
+          "tests": [],
+          "description": "Unauthorized"
+        },
+        {
+          "id": "PATCH /wallets/{id}/unfreeze:404",
+          "covered": false,
+          "tests": [],
+          "description": "Not found"
+        },
+        {
+          "id": "PATCH /wallets/{id}/unfreeze:422",
+          "covered": false,
+          "tests": [],
+          "description": "Unprocessable"
+        },
+        {
+          "id": "POST /wallets/{id}/fund:401",
+          "covered": false,
+          "tests": [],
+          "description": "Unauthorized"
+        },
+        {
+          "id": "POST /wallets/{id}/fund:404",
+          "covered": false,
+          "tests": [],
+          "description": "Not found"
+        },
+        {
+          "id": "POST /wallets/{id}/fund:422",
+          "covered": false,
+          "tests": [],
+          "description": "Business rule violation"
+        },
+        {
+          "id": "POST /wallets/{id}/debit:401",
+          "covered": false,
+          "tests": [],
+          "description": "Unauthorized"
+        },
+        {
+          "id": "POST /wallets/{id}/debit:404",
+          "covered": false,
+          "tests": [],
+          "description": "Not found"
+        },
+        {
+          "id": "POST /wallets/{id}/debit:422",
+          "covered": false,
+          "tests": [],
+          "description": "Business rule violation"
+        },
+        {
+          "id": "POST /wallets/{id}/transfer:401",
+          "covered": false,
+          "tests": [],
+          "description": "Unauthorized"
+        },
+        {
+          "id": "POST /wallets/{id}/transfer:404",
+          "covered": false,
+          "tests": [],
+          "description": "Not found"
+        },
+        {
+          "id": "POST /wallets/{id}/transfer:422",
+          "covered": false,
+          "tests": [],
+          "description": "Business rule violation"
+        },
+        {
+          "id": "POST /payments:401",
+          "covered": false,
+          "tests": [],
+          "description": "Unauthorized"
+        },
+        {
+          "id": "POST /payments:422",
+          "covered": false,
+          "tests": [],
+          "description": "Business rule violation"
+        },
+        {
+          "id": "GET /payments/{id}:401",
+          "covered": false,
+          "tests": [],
+          "description": "Unauthorized"
+        },
+        {
+          "id": "GET /payments/{id}:404",
+          "covered": false,
+          "tests": [],
+          "description": "Not found"
+        },
+        {
+          "id": "POST /payments/{id}/refund:401",
+          "covered": false,
+          "tests": [],
+          "description": "Unauthorized"
+        },
+        {
+          "id": "POST /payments/{id}/refund:404",
+          "covered": false,
+          "tests": [],
+          "description": "Not found"
+        },
+        {
+          "id": "POST /payments/{id}/refund:422",
+          "covered": false,
+          "tests": [],
+          "description": "Cannot refund"
+        },
+        {
+          "id": "GET /transactions:401",
+          "covered": false,
+          "tests": [],
+          "description": "Unauthorized"
+        }
       ]
     },
-    "resilience": {
+    "performance": {
       "items": [
-        { "id": "Retry-on-transient-failure", "threshold": "3 retries", "covered": true, "tests": ["retry on 503", "retry on timeout"] },
-        { "id": "circuit-breaker", "threshold": "5 failures", "covered": true, "tests": ["circuit breaker opens after failures"] },
-        { "id": "timeout-handling", "threshold": "30s", "covered": true, "tests": ["request timeout test"] },
-        { "id": "graceful-degradation", "threshold": "N/A", "covered": false, "tests": [] }
+        {
+          "id": "GET /wallets response time 200ms",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts"
+          ],
+          "threshold": "200ms"
+        },
+        {
+          "id": "POST /wallets creation time",
+          "covered": true,
+          "tests": [
+            "tests/blackbox/wallets.blackbox.test.ts"
+          ],
+          "threshold": "500ms"
+        },
+        {
+          "id": "POST /payments processing time",
+          "covered": false,
+          "tests": [],
+          "threshold": "1000ms"
+        },
+        {
+          "id": "GET /transactions query time",
+          "covered": false,
+          "tests": [],
+          "threshold": "300ms"
+        },
+        {
+          "id": "POST /wallets/{id}/fund throughput",
+          "covered": true,
+          "tests": [
+            "tests/integration/wallets.integration.test.ts"
+          ],
+          "threshold": "100rps"
+        },
+        {
+          "id": "POST /wallets/{id}/debit concurrency",
+          "covered": false,
+          "tests": [],
+          "threshold": "50rps"
+        }
       ]
     },
-    "integration": {
+    "resilience": {
       "items": [
-        { "id": "User-registration-flow", "covered": true, "steps": 3, "coveredSteps": 3, "tests": ["user registration e2e"] },
-        { "id": "User-payment-flow", "covered": true, "steps": 5, "coveredSteps": 5, "tests": ["user payment e2e"] },
-        { "id": "Wallet-lifecycle-flow", "covered": true, "steps": 6, "coveredSteps": 6, "tests": ["wallet lifecycle test"] },
-        { "id": "Refund-flow", "covered": false, "steps": 4, "coveredSteps": 2, "tests": [] },
-        { "id": "Transfer-flow", "covered": true, "steps": 4, "coveredSteps": 4, "tests": ["transfer e2e"] }
+        {
+          "id": "Wallet service circuit breaker",
+          "covered": true,
+          "tests": [
+            "tests/unit/walletService.test.ts"
+          ]
+        },
+        {
+          "id": "Payment service retry logic",
+          "covered": true,
+          "tests": [
+            "tests/unit/riskService.test.ts"
+          ]
+        },
+        {
+          "id": "Database connection timeout handling",
+          "covered": false,
+          "tests": []
+        },
+        {
+          "id": "External API failure fallback",
+          "covered": true,
+          "tests": [
+            "tests/unit/riskService.test.ts"
+          ]
+        }
       ]
     }
   }