{
  "phase": 1,
  "phaseLabel": "Build MVP — Fix CSP bug",
  "status": "critical-bug",
  "product": "DocFast — HTML/Markdown to PDF API",
  "currentPriority": "CRITICAL BUG: Helmet CSP blocks ALL inline JavaScript on the landing page. Console error: script-src 'self' blocks inline scripts. This is the ROOT CAUSE of all 3 bugs (signup, checkout, console errors). FIX: Move all inline JS to an external file (e.g. /public/app.js) and reference it with <script src='/app.js'>. Deploy and verify with Playwright: NODE_PATH=/usr/local/lib/node_modules node -e \"const {chromium}=require('playwright'); ...\" — must show ZERO console errors.",
  "qaTools": {
    "playwright": "Installed globally. Use: NODE_PATH=/usr/local/lib/node_modules node -e \"const {chromium}=require('playwright'); ...\"",
    "note": "QA agents MUST test with Playwright to catch browser-only bugs like CSP violations"
  },
  "infrastructure": {
    "domain": "docfast.dev",
    "url": "https://docfast.dev",
    "server": "docfast-1 (CAX11, nbg1)",
    "serverIP": "167.235.156.214",
    "sshKey": "/home/openclaw/.ssh/docfast"
  },
  "credentials": {
    "file": "/home/openclaw/.openclaw/workspace/.credentials/docfast.env",
    "keys": ["HETZNER_API_TOKEN", "STRIPE_SECRET_KEY"],
    "NEVER_READ_DIRECTLY": true
  },
  "team": {
    "structure": "CEO + specialist sub-agents",
    "ceo": "Plans, delegates, reviews. Does NOT code. Only one who makes financial decisions.",
    "specialists": ["Backend Developer", "UI/UX Developer", "QA Tester", "Marketing Agent"],
    "workflow": "CEO spawns specialists → specialists do work → CEO spawns QA → QA verifies → CEO reviews"
  },
  "blockers": [],
  "startDate": "2026-02-14",
  "sessionCount": 14
}