Find what nothing asserts.
Across contract, code, cases,
autotests and CI.

COVERAGE AUDIT · 5 DIMENSIONS VERIFIED
  route ......... POST /api/v2/orders/{id}/cancel
  spec source ... ✓ PAY-231 (Jira task / Confluence doc / OpenAPI)
  backend code .. ✓ Implemented (orders.controller.ts:84)
  tms cases ..... ✗ 0 cases matched in the test repository
  autotests ..... ✗ 0 assertions in test suite
  ci runs ....... ✗ Never executed in CI

GAP DETECTED
  code .......... GAP-UNASSERTED-POST-_api_v2_orders__id__cancel
  exposure ...... Critical business endpoint exists but lacks automated test assertions
  recommend ..... Generate test cases from PAY-231 spec, emit autotests, and run in CI

---
id: "TC-205"
title: "POST /api/v2/orders/{id}/cancel — conflict on repeated cancel"
suite: "Orders & Checkout"
feature: "Cancellation"
priority: "high"
author: "Agent 1"
targetType: "api"
endpoint: "/api/v2/orders/{id}/cancel"
httpMethod: "POST"
sourceRef: "PAY-231 (Jira Story / Spec)"
appliedSkills: ["api-testcase-style", "billing-domain"]
---

# POST /api/v2/orders/{id}/cancel — conflict on repeated cancel

## Description
Derived from task specification in PAY-231: asserts idempotent handling when attempting to cancel an already-cancelled order.

## Steps to Reproduce
- 1. POST /api/v2/orders/ORD-991/cancel with a valid bearer token.
- 2. Verify the response status code is 409 Conflict.
- 3. Assert error response body matches { code: 'ORDER_ALREADY_CANCELLED' }.

## Expected Result
Returns 409 Conflict with structured error payload without triggering duplicate refunds.

import { test, expect } from '@playwright/test';
import { createCancelledOrderFixture } from '../fixtures/orders.fixture';

test.describe('Orders API — cancellation lifecycle', () => {
  test('returns 409 on duplicate cancel (PAY-231 / TC-205)', async ({ request }) => {
    const { orderId, authToken } = await createCancelledOrderFixture(request);

    const response = await request.post(`/api/v2/orders/${orderId}/cancel`, {
      headers: { 'Authorization': `Bearer ${authToken}` }
    });

    expect(response.status()).toBe(409);
    expect((await response.json()).error.code).toBe('ORDER_ALREADY_CANCELLED');
  });
});

CI TRIAGE & LOCATOR SELF-HEALING
  verdict ....... UI text drift & locator timeout
  broken ........ page.getByRole("button", { name: "Submit Order" })
  dom match ..... <button data-testid="complete-order-btn">Complete Order</button>

RESILIENCE HEALING (96% CONFIDENCE · TIER 1)
--- tests/checkout.spec.ts (Original)
+++ tests/checkout.spec.ts (Healed)
@@ -14,1 +14,1 @@
- this.submitBtn = page.getByRole("button", { name: "Submit Order" });
+ this.submitBtn = page.getByTestId("complete-order-btn");

DEFECT DISPATCH
  tracker ....... Jira / YouTrack (Auto-linked to PAY-231)
  status ........ 1-click self-healing patch ready for branch PR