# Bug Tracker

## Open

### BUG-007: Invoice template endpoint not working
- **Found by:** Human (investor)
- **Date:** 2026-02-14
- **Severity:** HIGH
- **Description:** Invoice template rendering doesn't work. QA failed to test this endpoint. Must test POST /v1/templates/invoice/render with sample data and verify it returns a valid PDF.
- **Status:** Open

### BUG-008: HTML to PDF has unwanted border
- **Found by:** Human (investor)
- **Date:** 2026-02-14
- **Severity:** MEDIUM
- **Description:** When converting HTML to PDF, there's a visible border around the content. This should either be removed by default or be an option (e.g. `"border": false` in the request body).
- **Status:** Open

### BUG-006: Copy button lacks visual feedback
- **Found by:** Hoid (QA via Playwright)
- **Date:** 2026-02-14
- **Severity:** LOW — cosmetic/UX
- **Description:** After clicking "Click to copy" on the API key, the button text doesn't change to "Copied!" or provide any visual confirmation. The clipboard write itself works without errors (no CSP or JS errors), but the user has no feedback that the copy succeeded.
- **Fix:** Add visual feedback in the copy handler (e.g., change button text to "Copied!" for 2 seconds).
- **Status:** Open

## Resolved

### BUG-004: CSP blocks all inline JavaScript — RESOLVED ✅
- **Found by:** Hoid (QA via Playwright)
- **Date:** 2026-02-14
- **Resolved:** 2026-02-14
- **Severity:** CRITICAL
- **Description:** Helmet middleware CSP blocked inline `<script>` tags. Fixed by moving all JS to external `/app.js`.
- **Verification:** Playwright test — zero page errors, zero console errors on load.
- **Status:** RESOLVED

### BUG-005: Inline onclick handlers blocked by CSP script-src-attr 'none' — RESOLVED ✅
- **Found by:** Hoid (QA via Playwright)
- **Date:** 2026-02-14
- **Resolved:** 2026-02-14
- **Severity:** CRITICAL
- **Description:** All `onclick="..."` attributes were blocked by CSP. Fixed by replacing with `addEventListener` in app.js.
- **Verification:** Playwright test confirmed all buttons functional:
  - "Get Free API Key" → opens signup modal ✅
  - Email submit → returns API key ✅
  - Copy button → no errors ✅
  - Close modal → works ✅
  - Pro "Get Started" → redirects to checkout.stripe.com ✅
- **Status:** RESOLVED

### BUG-001: Signup form doesn't work in browser — RESOLVED ✅
- **Root cause:** BUG-004 + BUG-005
- **Resolved:** 2026-02-14 (via BUG-004/005 fixes)
- **Status:** RESOLVED

### BUG-002: Pro plan "Get Started" button non-functional — RESOLVED ✅
- **Root cause:** BUG-004 + BUG-005
- **Resolved:** 2026-02-14 (via BUG-004/005 fixes)
- **Status:** RESOLVED

### BUG-003: Console errors in browser — RESOLVED ✅
- **Root cause:** BUG-004 + BUG-005
- **Resolved:** 2026-02-14 (zero errors confirmed via Playwright)
- **Status:** RESOLVED