DocFast session 92: broken test suite found, fix in progress

projects/business/memory/sessions.md

@@ -1,5 +1,25 @@
 # Session Log
 
+## Session 92 — 2026-02-25 07:00 UTC (Wednesday Morning)
+- **Production:** v0.5.0 (reports 0.4.5) ✅ healthy, 74k+ seconds uptime, 2 replicas running
+- **Staging:** v0.5.1 ✅ healthy, 53k+ seconds uptime
+- **Support:** Zero tickets
+- **K8s cluster:** All nodes Ready. Prod: 2 replicas (w1, w2). Staging: 1 replica (w1).
+- **Critical finding: Test suite broken** — 24/27 tests fail because they require a running PostgreSQL database. CI pipeline has NO test step (just builds Docker image). Effectively only 3 tests work (auth rejection tests that don't need DB).
+- **npm audit:** 1 high-severity vuln (minimatch ReDoS via swagger-jsdoc transitive dep) — not directly exploitable by users
+- **All pages returning 200:** /, /docs, /status, /examples, /impressum, /privacy, /terms, /health, /sitemap.xml, /robots.txt, /openapi.json
+- **Sitemap:** Correct namespace, all 7 pages listed
+- **Spawned 1 sub-agent:**
+  - docfast-test-infra: Fix broken test suite (mock DB layer, make tests CI-runnable, add test step to CI pipeline, add new test coverage)
+- **Investor Test:**
+  1. Would a stranger trust this? ✅ Yes
+  2. Pod crash data loss? ✅ No (PostgreSQL + CNPG backups)
+  3. Free tier abuse? ✅ Free tier removed, demo rate-limited
+  4. Key recovery? ✅ Works
+  5. Website features work? ✅ All pages 200, all links valid
+- **Budget:** €181.71 remaining, Revenue: €9
+- **Pending:** Test infra fix in progress, prod tag for v0.5.1, SDK tokens, GSC verification
+
 ## Session 1 — 2026-02-14 12:16 UTC
 - Phase 0: Business Model Discovery
 - Analyzed constraints (€200 budget, no human identity, must be automatable)

projects/business/memory/state.json

@@ -3,7 +3,7 @@
   "phaseLabel": "Build Production-Grade Product",
   "status": "launch-ready",
   "product": "DocFast — HTML/Markdown to PDF API",
-  "currentPriority": "Production deployed v0.5.0 (tag on ec7af37, image from 272c03c). 25 commits promoted from staging. Still need npm/PyPI tokens for SDKs + GSC verification.",
+  "currentPriority": "Fix broken test suite (24/27 tests fail, CI has no test step). Staging v0.5.1 ready for prod tag. Still need SDK tokens + GSC verification.",
   "ownerDirectives_PRIORITY": "Process these IN ORDER. Do not skip. Remove items marked ✅ DONE/FIXED during housekeeping.",
   "ownerDirectives": [
     "Stripe Product ID for DocFast: prod_TygeG8tQPtEAdE — webhook handler must filter by this product_id to ignore events from other projects on the same Stripe account."
@@ -85,5 +85,5 @@
   },
   "blockers": [],
   "startDate": "2026-02-14",
-  "sessionCount": 90
+  "sessionCount": 92
 }