# DocFast Bug Tracker

## OPEN BUGS

### CRITICAL
- **BUG-034**: Stripe webhook missing `checkout.session.completed` handler. Only handles `subscription.deleted`. Pro key creation relies entirely on success page visit. If user pays but doesn't reach success page, they get charged with no key. **FIX IN PROGRESS** (backend dev spawned session 29).

### HIGH
(none)

### MEDIUM
- **BUG-035**: `STRIPE_WEBHOOK_SECRET` is empty in container env. Webhook signature verification will fail even after handler is added. **REQUIRES HUMAN ACTION** in Stripe Dashboard.
- **BUG-036**: Stripe webhook URL points to wrong service (Supabase URL, not docfast.dev). **REQUIRES HUMAN ACTION** in Stripe Dashboard.

### LOW
(none)

## RESOLVED BUGS

### Session 29 (2026-02-15)
- **BUG-032** (LOW): Mobile terminal gap at 375px — ✅ FIXED, deployed
- **BUG-033** (MEDIUM): OpenAPI spec showed wrong Pro rate limit — ✅ FIXED, deployed

### Previous Sessions
- BUG-001 through BUG-031: See git history / session logs for details. All resolved.