DocFast session 90: v0.5.0 production deploy detected

projects/business/memory/sessions.md

@@ -1859,6 +1859,22 @@
   - Full audit: mobile, legal, compression, security headers, structured data, error handling
   - Competitive analysis: well-positioned on pricing
 
+## Session 90 — 2026-02-24 16:00 UTC (Tuesday Afternoon)
+- **🚀 PRODUCTION DEPLOYED: v0.5.0** — 25 commits shipped! Tagged by investor on ec7af37.
+- **Production:** v0.5.0 (reports 0.4.5 in /health — package.json wasn't bumped) ✅ healthy, 20k+ seconds uptime
+- **Staging:** v0.4.5 ✅ (1 commit ahead: footer link fix c52d149)
+- **Support:** Zero tickets
+- **Prod smoke test results:**
+  - Landing page: 200, 0.48s ✅
+  - Cache-Control on `/`: present ✅
+  - Demo PDF: 200, 4.3s (cold start) ✅
+  - Stripe checkout: returns valid URL ✅
+  - Footer "API Status" still links to `/health` ⚠️ (fix was 1 commit after tag)
+- **Action:** Spawned version bump to 0.5.1 (fixes package.json mismatch + includes footer fix for next prod deploy)
+- **Investor Test:** All 5 ✅
+- **Budget:** €181.71 remaining, Revenue: €9
+- **Now only 1 commit ahead of prod** (footer link fix). Production is essentially current.
+
 ## Session 89 — 2026-02-24 13:01 UTC (Tuesday Afternoon)
 - **Production:** v0.4.3 ✅ healthy
 - **Staging:** v0.4.5 (commit c52d149 deployed) ✅ — footer link fix confirmed live

projects/business/memory/state.json

@@ -85,5 +85,5 @@
   },
   "blockers": [],
   "startDate": "2026-02-14",
-  "sessionCount": 86
+  "sessionCount": 90
 }

projects/snapapi/memory/sessions.md

@@ -1,5 +1,28 @@
 # SnapAPI Session Log
 
+## Session 19 — 2026-02-24 14:00 UTC (Error Handling Hardening)
+
+**Goal:** Fix error status codes found during QA.
+
+### What Was Done
+
+1. **Fixed `javascript:` URLs returning 500 instead of 400:**
+   - Changed SSRF error message to match catch pattern ("URL protocol not allowed")
+   - Now returns 400 with clear message
+
+2. **Fixed unresolvable hostnames returning 500 instead of 400:**
+   - Added "Could not resolve" to error pattern matching in both playground and screenshot routes
+   - Now returns 400 with "Could not resolve hostname"
+
+3. **Commit b07b9cf, deployed to staging, all 3 test cases verified:**
+   - `javascript:alert(1)` → 400 ✅
+   - `https://nonexistent.host` → 400 ✅  
+   - `https://example.com` → 200 ✅
+
+### Production: Healthy, unchanged. Still awaiting v0.5.0 approval.
+
+---
+
 ## Session 18 — 2026-02-24 11:00 UTC (QA + BUG-011 Fix)
 
 **Goal:** Production QA, fix bugs found.

projects/snapapi/memory/state.json

@@ -76,6 +76,6 @@
       "priceId": "price_1T2XHpRtlDv9c8GoThHfd8kS"
     }
   },
-  "lastSession": "2026-02-24T11:00:00Z",
+  "lastSession": "2026-02-24T14:00:00Z",
   "codeLocation": "Forgejo repo openclawd/SnapAPI. Clone: git clone forgejo-snapapi:openclawd/SnapAPI.git"
 }