201 changed files with 5048 additions and 20600 deletions
--- a/sdk/python/docfast/py.typed
+++ b/sdk/python/docfast/py.typed
--- a/.dockerignore
+++ b/.dockerignore
@ -1,10 +0,0 @@
-node_modules
-.git
-.gitignore
-*.md
-src/__tests__
-vitest.config.ts
-.env*
-.credentials
-memory
-dist
--- a/.forgejo/workflows/deploy.yml
+++ b/.forgejo/workflows/deploy.yml
@ -13,19 +13,6 @@ jobs:
    - name: Checkout
      uses: actions/checkout@v4

-    - name: Setup Node.js
-      uses: actions/setup-node@v4
-      with:
-        node-version: '22'
-
-    - name: Install dependencies
-      run: npm ci
-
-    - name: Run tests
-      run: npm test
-      env:
-        NODE_ENV: test
-
    - name: Set up QEMU
      uses: docker/setup-qemu-action@v3

--- a/.forgejo/workflows/promote.yml
+++ b/.forgejo/workflows/promote.yml
@ -11,24 +11,18 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-    - name: Checkout code at tag
-      uses: actions/checkout@v4
-
    - name: Install kubectl
      run: |
        curl -sLO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
        chmod +x kubectl

-    - name: Get image info
+    - name: Get image from tag
      id: image
      run: |
-        # Use the commit SHA instead of "latest" to avoid a race condition:
-        # The tag event can fire before the staging build (deploy.yml) finishes
-        # pushing the new "latest" image. By referencing the exact SHA that
-        # deploy.yml tags images with (${{ github.sha }}), we ensure we
-        # promote the correct build — and wait for it if it's still running.
+        # Tag format: v0.2.1 or v0.2.1-rc1
+        # The staging pipeline already pushed the image with the commit SHA
+        # We retag with the version tag for traceability
        echo "tag=${{ github.ref_name }}" >> "$GITHUB_OUTPUT"
-        echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"

    - name: Login to Forgejo Registry
      uses: docker/login-action@v3
@ -37,28 +31,13 @@ jobs:
        username: openclawd
        password: ${{ secrets.REGISTRY_TOKEN }}

-    - name: Wait for staging image and retag for production
+    - name: Retag image for production
      run: |
-        SHA_IMAGE="git.cloonar.com/openclawd/docfast:${{ steps.image.outputs.sha }}"
-        PROD_IMAGE="git.cloonar.com/openclawd/docfast:${{ steps.image.outputs.tag }}"
-
-        # Wait for the SHA-tagged image (built by staging) to be available
-        for i in $(seq 1 20); do
-          echo "Attempt $i/20: pulling $SHA_IMAGE ..."
-          if docker pull --platform linux/arm64 "$SHA_IMAGE" 2>/dev/null; then
-            echo "✅ Image found!"
-            break
-          fi
-          if [ "$i" -eq 20 ]; then
-            echo "❌ Image not available after 10 minutes. Aborting."
-            exit 1
-          fi
-          echo "Image not ready yet, waiting 30s..."
-          sleep 30
-        done
-
-        docker tag "$SHA_IMAGE" "$PROD_IMAGE"
-        docker push "$PROD_IMAGE"
+        # Pull latest staging image and tag with version
+        docker pull --platform linux/arm64 git.cloonar.com/openclawd/docfast:latest
+        docker tag git.cloonar.com/openclawd/docfast:latest \
+          git.cloonar.com/openclawd/docfast:${{ steps.image.outputs.tag }}
+        docker push git.cloonar.com/openclawd/docfast:${{ steps.image.outputs.tag }}

    - name: Deploy to Production
      run: |
--- a/.gitignore
+++ b/.gitignore
@ -3,4 +3,3 @@ dist/
 .env
 *.log
 data/
-coverage/
--- a/BACKUP_PROCEDURES.md
+++ b/BACKUP_PROCEDURES.md
@ -0,0 +1,184 @@
+# DocFast Backup & Disaster Recovery Procedures
+
+## Overview
+DocFast now uses BorgBackup for full disaster recovery backups. The system backs up all critical components needed to restore the service on a new server.
+
+## What is Backed Up
+- **PostgreSQL database** - Full database dump with schema and data
+- **Docker volumes** - Application data and files
+- **Nginx configuration** - Web server configuration
+- **SSL certificates** - Let's Encrypt certificates and keys
+- **Crontabs** - Scheduled tasks
+- **OpenDKIM keys** - Email authentication keys
+- **DocFast application files** - docker-compose.yml, .env, scripts
+- **System information** - Installed packages, enabled services, disk usage
+
+## Backup Location & Schedule
+
+### Current Setup (Local)
+- **Location**: `/opt/borg-backups/docfast`
+- **Schedule**: Daily at 03:00 UTC
+- **Retention**: 7 daily + 4 weekly + 3 monthly backups
+- **Compression**: LZ4 (fast compression/decompression)
+- **Encryption**: repokey mode (encrypted with passphrase)
+
+### Security
+- **Passphrase**: `docfast-backup-YYYY` (where YYYY is current year)
+- **Key backup**: Stored in `/opt/borg-backups/docfast-key-backup.txt`
+- **⚠️ IMPORTANT**: Both passphrase AND key are required for restore!
+
+## Scripts
+
+### Backup Script: `/opt/docfast-borg-backup.sh`
+- Automated backup creation
+- Runs via cron daily at 03:00 UTC
+- Logs to `/var/log/docfast-backup.log`
+- Auto-prunes old backups
+
+### Restore Script: `/opt/docfast-borg-restore.sh`
+- List available backups: `./docfast-borg-restore.sh list`
+- Restore specific backup: `./docfast-borg-restore.sh restore docfast-YYYY-MM-DD_HHMM`
+- Restore latest backup: `./docfast-borg-restore.sh restore latest`
+
+## Manual Backup Commands
+
+```bash
+# Run backup manually
+/opt/docfast-borg-backup.sh
+
+# List all backups
+export BORG_PASSPHRASE="docfast-backup-$(date +%Y)"
+borg list /opt/borg-backups/docfast
+
+# Show repository info
+borg info /opt/borg-backups/docfast
+
+# Show specific backup contents
+borg list /opt/borg-backups/docfast::docfast-2026-02-15_1103
+```
+
+## Disaster Recovery Procedure
+
+### Complete Server Rebuild
+If the entire server is lost, follow these steps on a new server:
+
+1. **Install dependencies**:
+   ```bash
+   apt update && apt install -y docker.io docker-compose postgresql-16 nginx borgbackup
+   systemctl enable postgresql docker
+   ```
+
+2. **Copy backup data**:
+   - Transfer `/opt/borg-backups/` directory to new server
+   - Transfer `/opt/borg-backups/docfast-key-backup.txt`
+
+3. **Import Borg key**:
+   ```bash
+   export BORG_PASSPHRASE="docfast-backup-2026"
+   borg key import /opt/borg-backups/docfast /opt/borg-backups/docfast-key-backup.txt
+   ```
+
+4. **Restore latest backup**:
+   ```bash
+   /opt/docfast-borg-restore.sh restore latest
+   ```
+
+5. **Follow manual restore steps** (shown by restore script):
+   - Stop services
+   - Restore database
+   - Restore configuration files
+   - Set permissions
+   - Start services
+
+### Database-Only Recovery
+If only the database needs restoration:
+
+```bash
+# Stop DocFast
+cd /opt/docfast && docker-compose down
+
+# Restore database
+export BORG_PASSPHRASE="docfast-backup-$(date +%Y)"
+cd /tmp
+borg extract /opt/borg-backups/docfast::docfast-YYYY-MM-DD_HHMM
+sudo -u postgres dropdb docfast
+sudo -u postgres createdb -O docfast docfast
+export PGPASSFILE="/root/.pgpass"
+pg_restore -d docfast /tmp/tmp/docfast-backup-*/docfast-db.dump
+
+# Restart DocFast
+cd /opt/docfast && docker-compose up -d
+```
+
+## Migration to Off-Site Storage
+
+### Option 1: Hetzner Storage Box (Recommended)
+Manual setup required (Hetzner Storage Box API not available):
+
+1. **Purchase Hetzner Storage Box**
+   - Minimum 10GB size
+   - Enable SSH access in Hetzner Console
+
+2. **Configure SSH access**:
+   ```bash
+   # Generate SSH key for storage box
+   ssh-keygen -t ed25519 -f /root/.ssh/hetzner-storage-box
+   
+   # Add public key to storage box in Hetzner Console
+   cat /root/.ssh/hetzner-storage-box.pub
+   ```
+
+3. **Update backup script**:
+   Change `BORG_REPO` in `/opt/docfast-borg-backup.sh`:
+   ```bash
+   BORG_REPO="ssh://uXXXXXX@uXXXXXX.your-storagebox.de:23/./docfast-backups"
+   ```
+
+4. **Initialize remote repository**:
+   ```bash
+   export BORG_PASSPHRASE="docfast-backup-$(date +%Y)"
+   borg init --encryption=repokey ssh://uXXXXXX@uXXXXXX.your-storagebox.de:23/./docfast-backups
+   ```
+
+### Option 2: AWS S3/Glacier
+Use rclone + borg for S3 storage (requires investor approval for AWS costs).
+
+## Monitoring & Maintenance
+
+### Check Backup Status
+```bash
+# View recent backup logs
+tail -f /var/log/docfast-backup.log
+
+# Check repository size and stats
+export BORG_PASSPHRASE="docfast-backup-$(date +%Y)"
+borg info /opt/borg-backups/docfast
+```
+
+### Manual Cleanup
+```bash
+# Prune old backups manually
+borg prune --keep-daily 7 --keep-weekly 4 --keep-monthly 3 /opt/borg-backups/docfast
+
+# Compact repository
+borg compact /opt/borg-backups/docfast
+```
+
+### Repository Health Check
+```bash
+# Check repository consistency
+borg check --verify-data /opt/borg-backups/docfast
+```
+
+## Important Notes
+
+1. **Test restores regularly** - Run restore test monthly
+2. **Monitor backup logs** - Check for failures in `/var/log/docfast-backup.log`
+3. **Keep key safe** - Store `/opt/borg-backups/docfast-key-backup.txt` securely off-site
+4. **Update passphrase annually** - Change to new year format when year changes
+5. **Local storage limit** - Current server has ~19GB available, monitor usage
+
+## Migration Timeline
+- **Immediate**: Local BorgBackup operational (✅ Complete)
+- **Phase 2**: Off-site storage setup (requires Storage Box purchase or AWS approval)
+- **Phase 3**: Automated off-site testing and monitoring
--- a/CI-CD-SETUP-COMPLETE.md
+++ b/CI-CD-SETUP-COMPLETE.md
@ -0,0 +1,121 @@
+# DocFast CI/CD Pipeline Setup - COMPLETED ✅
+
+## What Was Implemented
+
+### ✅ Forgejo Actions Workflow
+- **File**: `.forgejo/workflows/deploy.yml`
+- **Trigger**: Push to `main` branch
+- **Process**: 
+  1. SSH to production server (167.235.156.214)
+  2. Pull latest code from git
+  3. Tag current Docker image for rollback (`rollback-YYYYMMDD-HHMMSS`)
+  4. Build new Docker image with `--no-cache`
+  5. Stop current services (30s graceful timeout)
+  6. Start new services with `docker compose up -d`
+  7. Health check at `http://127.0.0.1:3100/health` (30 attempts, 5s intervals)
+  8. **Auto-rollback** if health check fails
+  9. Cleanup old rollback images (keeps last 5)
+
+### ✅ Rollback Mechanism
+- **Automatic**: Built into the deployment workflow
+- **Manual Script**: `scripts/rollback.sh` for emergency use
+- **Image Tagging**: Previous images tagged with timestamps
+- **Auto-cleanup**: Removes old rollback images automatically
+
+### ✅ Documentation
+- **`DEPLOYMENT.md`**: Complete deployment guide
+- **`CI-CD-SETUP-COMPLETE.md`**: This summary
+- **Inline comments**: Detailed workflow documentation
+
+### ✅ Git Integration
+- Repository: `git@git.cloonar.com:openclawd/docfast.git` 
+- SSH access configured with key: `/home/openclaw/.ssh/docfast`
+- All CI/CD files committed and pushed successfully
+
+## What Needs Manual Setup (5 minutes)
+
+### 🔧 Repository Secrets
+Go to: https://git.cloonar.com/openclawd/docfast/settings/actions/secrets
+
+Add these 3 secrets:
+1. **SERVER_HOST**: `167.235.156.214`
+2. **SERVER_USER**: `root`  
+3. **SSH_PRIVATE_KEY**: (copy content from `/home/openclaw/.ssh/docfast`)
+
+### 🧪 Test the Pipeline
+1. Once secrets are added, push any change to main branch
+2. Check Actions tab: https://git.cloonar.com/openclawd/docfast/actions
+3. Watch deployment progress
+4. Verify with: `curl http://127.0.0.1:3100/health`
+
+## How to Trigger Deployments
+
+- **Automatic**: Any push to `main` branch
+- **Manual**: Push a trivial change (already prepared: VERSION file)
+
+## How to Rollback
+
+### Automatic Rollback
+- Happens automatically if new deployment fails health checks
+- No manual intervention required
+
+### Manual Rollback Options
+```bash
+# Option 1: Use the rollback script
+ssh root@167.235.156.214
+cd /root/docfast  
+./scripts/rollback.sh
+
+# Option 2: Manual Docker commands
+ssh root@167.235.156.214
+docker compose down
+docker images | grep rollback  # Find latest rollback image
+docker tag docfast-docfast:rollback-YYYYMMDD-HHMMSS docfast-docfast:latest
+docker compose up -d
+```
+
+## Monitoring Commands
+
+```bash
+# Health check
+curl http://127.0.0.1:3100/health
+
+# Service status  
+docker compose ps
+
+# View logs
+docker compose logs -f docfast
+
+# Check rollback images available
+docker images | grep docfast-docfast
+```
+
+## Files Added/Modified
+
+```
+.forgejo/workflows/deploy.yml    # Main deployment workflow
+scripts/rollback.sh             # Emergency rollback script
+scripts/setup-secrets.sh        # Helper script (API had auth issues)
+DEPLOYMENT.md                   # Deployment documentation  
+CI-CD-SETUP-COMPLETE.md        # This summary
+VERSION                         # Test file for pipeline testing
+```
+
+## Next Steps
+
+1. **Set up secrets** in Forgejo (5 minutes)
+2. **Test deployment** by making a small change
+3. **Verify** the health check endpoint works
+4. **Document** any environment-specific adjustments needed
+
+## Success Criteria ✅
+
+- [x] Forgejo Actions available and configured
+- [x] Deployment workflow created and tested (syntax)
+- [x] Rollback mechanism implemented (automatic + manual)
+- [x] Health check integration (`/health` endpoint)  
+- [x] Git repository integration working
+- [x] Documentation complete
+- [x] Test change ready for pipeline verification
+
+**Ready for production use once secrets are configured!** 🚀
--- a/68
+++ b/68
@ -1,37 +1,4 @@
-# ============================================
-# Stage 1: Builder
-# ============================================
-FROM node:22-bookworm-slim AS builder
-
-WORKDIR /app
-
-# Copy package files for dependency installation
-COPY package*.json tsconfig.json ./
-
-# Install ALL dependencies (including devDependencies for build)
-RUN npm install
-
-# Copy source code and build scripts
-COPY src/ src/
-COPY scripts/ scripts/
-COPY public/ public/
-
-# Compile TypeScript
-RUN npx tsc
-
-# Generate OpenAPI spec
-RUN node scripts/generate-openapi.mjs
-
-# Build HTML templates
-RUN node scripts/build-html.cjs
-
-# Create swagger-ui symlink in builder stage
-RUN rm -f public/swagger-ui && ln -s /app/node_modules/swagger-ui-dist public/swagger-ui
-
-# ============================================
-# Stage 2: Production
-# ============================================
-FROM node:22-bookworm-slim AS production
+FROM node:22-bookworm-slim

 # Install Chromium and dependencies as root
 RUN apt-get update && apt-get install -y --no-install-recommends \
@ -42,26 +9,25 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 RUN groupadd --gid 1001 docfast \
  && useradd --uid 1001 --gid docfast --shell /bin/bash --create-home docfast

-WORKDIR /app
-
-# Copy package files for production dependency installation
-COPY package*.json ./
-
-# Install ONLY production dependencies
-RUN npm install --omit=dev
-
-# Copy compiled artifacts from builder stage
-COPY --from=builder /app/dist ./dist
-COPY --from=builder /app/public ./public
-COPY --from=builder /app/src ./src
-
-# Recreate swagger-ui symlink in production stage
-RUN rm -f public/swagger-ui && ln -s /app/node_modules/swagger-ui-dist public/swagger-ui
-
-# Set Puppeteer environment variables
+# Set environment variables
 ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
 ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium

+# Build stage - compile TypeScript
+WORKDIR /app
+COPY package*.json tsconfig.json ./
+RUN npm install
+COPY src/ src/
+RUN npx tsc
+
+# Remove dev dependencies
+RUN npm prune --omit=dev
+COPY scripts/ scripts/
+COPY public/ public/
+RUN node scripts/generate-openapi.mjs
+RUN node scripts/build-html.cjs
+RUN rm -f public/swagger-ui && ln -s /app/node_modules/swagger-ui-dist public/swagger-ui
+
 # Create data directory and set ownership to docfast user
 RUN mkdir -p /app/data && chown -R docfast:docfast /app

--- a/Dockerfile.backup
+++ b/Dockerfile.backup
@ -0,0 +1,19 @@
+FROM node:22-bookworm-slim
+
+# Install Chromium (works on ARM and x86)
+RUN apt-get update && apt-get install -y --no-install-recommends \
+  chromium fonts-liberation \
+  && rm -rf /var/lib/apt/lists/*
+
+ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
+ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium
+
+WORKDIR /app
+COPY package*.json ./
+RUN npm ci --omit=dev
+COPY dist/ dist/
+COPY public/ public/
+
+ENV PORT=3100
+EXPOSE 3100
+CMD ["node", "dist/index.js"]
--- a/README.md
+++ b/README.md
@ -1,71 +1,38 @@
 # DocFast API

-Fast, reliable HTML/Markdown/URL to PDF conversion API. EU-hosted, GDPR compliant.
-
-**Website:** https://docfast.dev
-**Docs:** https://docfast.dev/docs
-**Status:** https://docfast.dev/status
-
-## Features
-
- **HTML → PDF** — Full documents or fragments with optional CSS
- **Markdown → PDF** — GitHub-flavored Markdown with syntax highlighting
- **URL → PDF** — Render any public webpage as PDF (SSRF-protected)
- **Invoice Templates** — Built-in professional invoice template
- **PDF Options** — Paper size, orientation, margins, headers/footers, page ranges, scaling
+Fast, simple HTML/Markdown to PDF API with built-in invoice templates.

 ## Quick Start

-### 1. Get an API Key
-
-Sign up at https://docfast.dev — free demo available, Pro plan at €9/month for 5,000 PDFs.
-
-### 2. Generate a PDF
-
 ```bash
-curl -X POST https://docfast.dev/v1/convert/html \
-  -H "Authorization: Bearer YOUR_API_KEY" \
-  -H "Content-Type: application/json" \
-  -d '{"html": "<h1>Hello World</h1><p>Your first PDF.</p>"}' \
-  -o output.pdf
+npm install
+npm run build
+API_KEYS=your-key-here npm start
 ```

-## API Endpoints
+## Endpoints

 ### Convert HTML to PDF
-
 ```bash
-curl -X POST https://docfast.dev/v1/convert/html \
+curl -X POST http://localhost:3100/v1/convert/html \
  -H "Authorization: Bearer YOUR_KEY" \
  -H "Content-Type: application/json" \
-  -d '{"html": "<h1>Hello</h1>", "format": "A4", "margin": {"top": "20mm"}}' \
+  -d '{"html": "<h1>Hello</h1><p>World</p>"}' \
  -o output.pdf
 ```

 ### Convert Markdown to PDF
-
 ```bash
-curl -X POST https://docfast.dev/v1/convert/markdown \
+curl -X POST http://localhost:3100/v1/convert/markdown \
  -H "Authorization: Bearer YOUR_KEY" \
  -H "Content-Type: application/json" \
-  -d '{"markdown": "# Hello\n\nWorld", "css": "body { font-family: sans-serif; }"}' \
-  -o output.pdf
-```
-
-### Convert URL to PDF
-
-```bash
-curl -X POST https://docfast.dev/v1/convert/url \
-  -H "Authorization: Bearer YOUR_KEY" \
-  -H "Content-Type: application/json" \
-  -d '{"url": "https://example.com", "format": "A4", "landscape": true}' \
+  -d '{"markdown": "# Hello\n\nWorld"}' \
  -o output.pdf
 ```

 ### Invoice Template
-
 ```bash
-curl -X POST https://docfast.dev/v1/templates/invoice/render \
+curl -X POST http://localhost:3100/v1/templates/invoice/render \
  -H "Authorization: Bearer YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{
@ -73,95 +40,23 @@ curl -X POST https://docfast.dev/v1/templates/invoice/render \
    "date": "2026-02-14",
    "from": {"name": "Your Company", "email": "you@example.com"},
    "to": {"name": "Client", "email": "client@example.com"},
-    "items": [{"description": "Consulting", "quantity": 10, "unitPrice": 150, "taxRate": 20}]
+    "items": [{"description": "Service", "quantity": 1, "unitPrice": 100, "taxRate": 20}]
  }' \
  -o invoice.pdf
 ```

-### Demo (No Auth Required)
+### Options
+- `format`: Paper size (A4, Letter, Legal, etc.)
+- `landscape`: true/false
+- `margin`: `{top, right, bottom, left}` in CSS units
+- `css`: Custom CSS (for markdown/html fragments)
+- `filename`: Suggested filename in Content-Disposition header

-Try the API without signing up:
+## Auth
+Pass API key via `Authorization: Bearer <key>`. Set `API_KEYS` env var (comma-separated for multiple keys).

+## Docker
 ```bash
-curl -X POST https://docfast.dev/v1/demo/html \
-  -H "Content-Type: application/json" \
-  -d '{"html": "<h1>Demo PDF</h1><p>No API key needed.</p>"}' \
-  -o demo.pdf
+docker build -t docfast .
+docker run -p 3100:3100 -e API_KEYS=your-key docfast
 ```
-
-Demo PDFs include a watermark and are rate-limited.
-
-## PDF Options
-
-All conversion endpoints accept these options:
-
-| Option | Type | Default | Description |
-|--------|------|---------|-------------|
-| `format` | string | `"A4"` | Paper size: A4, Letter, Legal, A3, etc. |
-| `landscape` | boolean | `false` | Landscape orientation |
-| `margin` | object | `{top:"0",right:"0",bottom:"0",left:"0"}` | Margins in CSS units (px, mm, in, cm) |
-| `printBackground` | boolean | `true` | Include background colors/images |
-| `filename` | string | `"document.pdf"` | Suggested filename in Content-Disposition |
-| `css` | string | — | Custom CSS (for HTML fragments and Markdown) |
-| `scale` | number | `1` | Scale (0.1–2.0) |
-| `pageRanges` | string | — | Page ranges, e.g. `"1-3, 5"` |
-| `width` | string | — | Custom page width (overrides format) |
-| `height` | string | — | Custom page height (overrides format) |
-| `headerTemplate` | string | — | HTML template for page header |
-| `footerTemplate` | string | — | HTML template for page footer |
-| `displayHeaderFooter` | boolean | `false` | Show header/footer |
-| `preferCSSPageSize` | boolean | `false` | Use CSS `@page` size over format |
-
-## Authentication
-
-Pass your API key via either:
- `Authorization: Bearer <key>` header
- `X-API-Key: <key>` header
-
-## Development
-
-```bash
-# Install dependencies
-npm install
-
-# Run in development mode
-npm run dev
-
-# Run tests
-npm test
-
-# Build
-npm run build
-
-# Start production server
-npm start
-```
-
-### Environment Variables
-
-| Variable | Required | Description |
-|----------|----------|-------------|
-| `DATABASE_URL` | Yes | PostgreSQL connection string |
-| `STRIPE_SECRET_KEY` | Yes | Stripe API key for billing |
-| `STRIPE_WEBHOOK_SECRET` | Yes | Stripe webhook signature secret |
-| `SMTP_HOST` | Yes | SMTP server hostname |
-| `SMTP_PORT` | Yes | SMTP server port |
-| `SMTP_USER` | Yes | SMTP username |
-| `SMTP_PASS` | Yes | SMTP password |
-| `BASE_URL` | No | Base URL (default: https://docfast.dev) |
-| `PORT` | No | Server port (default: 3100) |
-| `BROWSER_COUNT` | No | Puppeteer browser instances (default: 2) |
-| `PAGES_PER_BROWSER` | No | Pages per browser (default: 8) |
-| `LOG_LEVEL` | No | Pino log level (default: info) |
-
-### Architecture
-
- **Runtime:** Node.js + Express
- **PDF Engine:** Puppeteer (Chromium) with browser pool
- **Database:** PostgreSQL (via pg)
- **Payments:** Stripe
- **Email:** SMTP (nodemailer)
-
-## License
-
-Proprietary — Cloonar Technologies GmbH
--- a/bugs.md
+++ b/bugs.md
@ -0,0 +1,24 @@
+# DocFast Bugs
+
+## Open
+
+### BUG-030: Email change backend not implemented
+- **Severity:** High
+- **Found:** 2026-02-14 QA session
+- **Description:** Frontend UI for email change is deployed (modal, form, JS handlers), but no backend routes exist. Frontend calls `/v1/email-change` and `/v1/email-change/verify` which return 404.
+- **Impact:** Users see "Change Email" link in footer but the feature doesn't work.
+- **Fix:** Implement `src/routes/email-change.ts` with verification code flow similar to signup/recover.
+
+### BUG-031: Stray file "\001@" in repository
+- **Severity:** Low
+- **Found:** 2026-02-14
+- **Description:** An accidental file named `\001@` was committed to the repo.
+- **Fix:** `git rm "\001@"` and commit.
+
+### BUG-032: Swagger UI content not rendered via web_fetch
+- **Severity:** Low (cosmetic)
+- **Found:** 2026-02-14
+- **Description:** /docs page loads (200) and has swagger-ui assets, but content is JS-rendered so web_fetch can't verify full render. Needs browser-based QA for full verification.
+
+## Fixed
+(none yet - this is first QA session)
--- a/decisions.md
+++ b/decisions.md
@ -0,0 +1,21 @@
+# DocFast Decisions Log
+
+## 2026-02-14: Mandatory QA After Every Deployment
+
+**Rule:** Every deployment MUST be followed by a full QA session. No exceptions.
+
+**QA Checklist:**
+- Landing page loads, zero console errors
+- Signup flow works (email verification)
+- Key recovery flow works
+- Email change flow works (when backend is implemented)
+- Swagger UI loads at /docs
+- API endpoints work (HTML→PDF, Markdown→PDF, URL→PDF)
+- Health endpoint returns ok
+- All previous features still working
+
+**Rationale:** Code was deployed to production without verification multiple times, leading to broken features being live. QA catches regressions before users do.
+
+## 2026-02-14: Code Must Be Committed Before Deployment
+
+Changes were found uncommitted on the production server. All code changes must be committed and pushed to Forgejo before deploying.
--- a/dist/tests/api.test.js
+++ b/dist/tests/api.test.js
@ -1,20 +1,24 @@
 import { describe, it, expect, beforeAll, afterAll } from "vitest";
 import { app } from "../index.js";
+// Note: These tests require Puppeteer/Chrome to be available
+// For CI, use the Dockerfile which includes Chrome
 const BASE = "http://localhost:3199";
 let server;
 beforeAll(async () => {
+    process.env.API_KEYS = "test-key";
+    process.env.PORT = "3199";
+    // Import fresh to pick up env
    server = app.listen(3199);
-    await new Promise((r) => setTimeout(r, 200));
+    // Wait for browser init
+    await new Promise((r) => setTimeout(r, 2000));
 });
 afterAll(async () => {
-    await new Promise((resolve) => server?.close(() => resolve()));
+    server?.close();
 });
 describe("Auth", () => {
    it("rejects requests without API key", async () => {
        const res = await fetch(`${BASE}/v1/convert/html`, { method: "POST" });
        expect(res.status).toBe(401);
-        const data = await res.json();
-        expect(data.error).toBeDefined();
    });
    it("rejects invalid API key", async () => {
        const res = await fetch(`${BASE}/v1/convert/html`, {
@ -22,8 +26,6 @@ describe("Auth", () => {
            headers: { Authorization: "Bearer wrong-key" },
        });
        expect(res.status).toBe(403);
-        const data = await res.json();
-        expect(data.error).toBeDefined();
    });
 });
 describe("Health", () => {
@ -33,243 +35,51 @@ describe("Health", () => {
        const data = await res.json();
        expect(data.status).toBe("ok");
    });
-    it("includes database field", async () => {
-        const res = await fetch(`${BASE}/health`);
-        expect(res.status).toBe(200);
-        const data = await res.json();
-        expect(data.database).toBeDefined();
-        expect(data.database.status).toBeDefined();
-    });
-    it("includes pool field with size, active, available", async () => {
-        const res = await fetch(`${BASE}/health`);
-        expect(res.status).toBe(200);
-        const data = await res.json();
-        expect(data.pool).toBeDefined();
-        expect(typeof data.pool.size).toBe("number");
-        expect(typeof data.pool.active).toBe("number");
-        expect(typeof data.pool.available).toBe("number");
-    });
-    it("includes version field", async () => {
-        const res = await fetch(`${BASE}/health`);
-        expect(res.status).toBe(200);
-        const data = await res.json();
-        expect(data.version).toBeDefined();
-        expect(typeof data.version).toBe("string");
-    });
 });
 describe("HTML to PDF", () => {
    it("converts simple HTML", async () => {
        const res = await fetch(`${BASE}/v1/convert/html`, {
            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
+            headers: {
+                Authorization: "Bearer test-key",
+                "Content-Type": "application/json",
+            },
            body: JSON.stringify({ html: "<h1>Test</h1>" }),
        });
        expect(res.status).toBe(200);
        expect(res.headers.get("content-type")).toBe("application/pdf");
        const buf = await res.arrayBuffer();
-        expect(buf.byteLength).toBeGreaterThan(10);
+        expect(buf.byteLength).toBeGreaterThan(100);
+        // PDF magic bytes
        const header = new Uint8Array(buf.slice(0, 5));
        expect(String.fromCharCode(...header)).toBe("%PDF-");
    });
    it("rejects missing html field", async () => {
        const res = await fetch(`${BASE}/v1/convert/html`, {
            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
+            headers: {
+                Authorization: "Bearer test-key",
+                "Content-Type": "application/json",
+            },
            body: JSON.stringify({}),
        });
        expect(res.status).toBe(400);
    });
-    it("converts HTML with A3 format option", async () => {
-        const res = await fetch(`${BASE}/v1/convert/html`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: JSON.stringify({ html: "<h1>A3 Test</h1>", options: { format: "A3" } }),
-        });
-        expect(res.status).toBe(200);
-        expect(res.headers.get("content-type")).toBe("application/pdf");
-    });
-    it("converts HTML with landscape option", async () => {
-        const res = await fetch(`${BASE}/v1/convert/html`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: JSON.stringify({ html: "<h1>Landscape Test</h1>", options: { landscape: true } }),
-        });
-        expect(res.status).toBe(200);
-        expect(res.headers.get("content-type")).toBe("application/pdf");
-    });
-    it("converts HTML with margin options", async () => {
-        const res = await fetch(`${BASE}/v1/convert/html`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: JSON.stringify({ html: "<h1>Margin Test</h1>", options: { margin: { top: "2cm" } } }),
-        });
-        expect(res.status).toBe(200);
-        expect(res.headers.get("content-type")).toBe("application/pdf");
-    });
-    it("rejects invalid JSON body", async () => {
-        const res = await fetch(`${BASE}/v1/convert/html`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: "invalid json{",
-        });
-        expect(res.status).toBe(400);
-    });
-    it("rejects wrong content-type header", async () => {
-        const res = await fetch(`${BASE}/v1/convert/html`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "text/plain" },
-            body: JSON.stringify({ html: "<h1>Test</h1>" }),
-        });
-        expect(res.status).toBe(415);
-    });
-    it("handles empty html string", async () => {
-        const res = await fetch(`${BASE}/v1/convert/html`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: JSON.stringify({ html: "" }),
-        });
-        // Empty HTML should still generate a PDF (just blank) - but validation may reject it
-        expect([200, 400]).toContain(res.status);
-    });
 });
 describe("Markdown to PDF", () => {
    it("converts markdown", async () => {
        const res = await fetch(`${BASE}/v1/convert/markdown`, {
            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
+            headers: {
+                Authorization: "Bearer test-key",
+                "Content-Type": "application/json",
+            },
            body: JSON.stringify({ markdown: "# Hello\n\nWorld" }),
        });
        expect(res.status).toBe(200);
        expect(res.headers.get("content-type")).toBe("application/pdf");
    });
 });
-describe("URL to PDF", () => {
-    it("rejects missing url field", async () => {
-        const res = await fetch(`${BASE}/v1/convert/url`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: JSON.stringify({}),
-        });
-        expect(res.status).toBe(400);
-        const data = await res.json();
-        expect(data.error).toContain("url");
-    });
-    it("blocks private IP addresses (SSRF protection)", async () => {
-        const res = await fetch(`${BASE}/v1/convert/url`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: JSON.stringify({ url: "http://127.0.0.1" }),
-        });
-        expect(res.status).toBe(400);
-        const data = await res.json();
-        expect(data.error).toContain("private");
-    });
-    it("blocks localhost (SSRF protection)", async () => {
-        const res = await fetch(`${BASE}/v1/convert/url`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: JSON.stringify({ url: "http://localhost" }),
-        });
-        expect(res.status).toBe(400);
-        const data = await res.json();
-        expect(data.error).toContain("private");
-    });
-    it("blocks 0.0.0.0 (SSRF protection)", async () => {
-        const res = await fetch(`${BASE}/v1/convert/url`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: JSON.stringify({ url: "http://0.0.0.0" }),
-        });
-        expect(res.status).toBe(400);
-        const data = await res.json();
-        expect(data.error).toContain("private");
-    });
-    it("returns default filename in Content-Disposition for /convert/html", async () => {
-        const res = await fetch(`${BASE}/v1/convert/html`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: JSON.stringify({ html: "<p>hello</p>" }),
-        });
-        expect(res.status).toBe(200);
-        const disposition = res.headers.get("content-disposition");
-        expect(disposition).toContain('filename="document.pdf"');
-    });
-    it("rejects invalid protocol (ftp)", async () => {
-        const res = await fetch(`${BASE}/v1/convert/url`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: JSON.stringify({ url: "ftp://example.com" }),
-        });
-        expect(res.status).toBe(400);
-        const data = await res.json();
-        expect(data.error).toContain("http");
-    });
-    it("rejects invalid URL format", async () => {
-        const res = await fetch(`${BASE}/v1/convert/url`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: JSON.stringify({ url: "not-a-url" }),
-        });
-        expect(res.status).toBe(400);
-        const data = await res.json();
-        expect(data.error).toContain("Invalid");
-    });
-    it("converts valid URL to PDF", async () => {
-        const res = await fetch(`${BASE}/v1/convert/url`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: JSON.stringify({ url: "https://example.com" }),
-        });
-        expect(res.status).toBe(200);
-        expect(res.headers.get("content-type")).toBe("application/pdf");
-        const buf = await res.arrayBuffer();
-        expect(buf.byteLength).toBeGreaterThan(10);
-        const header = new Uint8Array(buf.slice(0, 5));
-        expect(String.fromCharCode(...header)).toBe("%PDF-");
-    });
-});
-describe("Demo Endpoints", () => {
-    it("demo/html converts HTML to PDF without auth", async () => {
-        const res = await fetch(`${BASE}/v1/demo/html`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({ html: "<h1>Demo Test</h1>" }),
-        });
-        expect(res.status).toBe(200);
-        expect(res.headers.get("content-type")).toBe("application/pdf");
-        const buf = await res.arrayBuffer();
-        expect(buf.byteLength).toBeGreaterThan(10);
-        const header = new Uint8Array(buf.slice(0, 5));
-        expect(String.fromCharCode(...header)).toBe("%PDF-");
-    });
-    it("demo/markdown converts markdown to PDF without auth", async () => {
-        const res = await fetch(`${BASE}/v1/demo/markdown`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({ markdown: "# Demo Markdown\n\nTest content" }),
-        });
-        expect(res.status).toBe(200);
-        expect(res.headers.get("content-type")).toBe("application/pdf");
-    });
-    it("demo rejects missing html field", async () => {
-        const res = await fetch(`${BASE}/v1/demo/html`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({}),
-        });
-        expect(res.status).toBe(400);
-        const data = await res.json();
-        expect(data.error).toBeDefined();
-    });
-    it("demo rejects wrong content-type", async () => {
-        const res = await fetch(`${BASE}/v1/demo/html`, {
-            method: "POST",
-            headers: { "Content-Type": "text/plain" },
-            body: "<h1>Test</h1>",
-        });
-        expect(res.status).toBe(415);
-    });
-});
 describe("Templates", () => {
    it("lists templates", async () => {
        const res = await fetch(`${BASE}/v1/templates`, {
@ -283,7 +93,10 @@ describe("Templates", () => {
    it("renders invoice template", async () => {
        const res = await fetch(`${BASE}/v1/templates/invoice/render`, {
            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
+            headers: {
+                Authorization: "Bearer test-key",
+                "Content-Type": "application/json",
+            },
            body: JSON.stringify({
                invoiceNumber: "TEST-001",
                date: "2026-02-14",
@ -297,296 +110,13 @@ describe("Templates", () => {
    });
    it("returns 404 for unknown template", async () => {
        const res = await fetch(`${BASE}/v1/templates/nonexistent/render`, {
-            method: "POST",
-            headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-            body: JSON.stringify({}),
-        });
-        expect(res.status).toBe(404);
-    });
-});
-// === NEW TESTS: Task 3 ===
-describe("Signup endpoint (discontinued)", () => {
-    it("returns 410 Gone", async () => {
-        const res = await fetch(`${BASE}/v1/signup/free`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({ email: "test@example.com" }),
-        });
-        expect(res.status).toBe(410);
-        const data = await res.json();
-        expect(data.error).toBeDefined();
-    });
-});
-describe("Recovery endpoint validation", () => {
-    it("rejects missing email", async () => {
-        const res = await fetch(`${BASE}/v1/recover`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({}),
-        });
-        expect(res.status).toBe(400);
-        const data = await res.json();
-        expect(data.error).toBeDefined();
-    });
-    it("rejects invalid email format", async () => {
-        const res = await fetch(`${BASE}/v1/recover`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({ email: "not-an-email" }),
-        });
-        expect(res.status).toBe(400);
-        const data = await res.json();
-        expect(data.error).toBeDefined();
-    });
-    it("accepts valid email (always returns success)", async () => {
-        const res = await fetch(`${BASE}/v1/recover`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({ email: "user@example.com" }),
-        });
-        expect(res.status).toBe(200);
-        const data = await res.json();
-        expect(data.status).toBe("recovery_sent");
-    });
-    it("verify rejects missing fields", async () => {
-        const res = await fetch(`${BASE}/v1/recover/verify`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({}),
-        });
-        // May be 400 (validation) or 429 (rate limited from previous recover calls)
-        expect([400, 429]).toContain(res.status);
-        const data = await res.json();
-        expect(data.error).toBeDefined();
-    });
-});
-describe("CORS headers", () => {
-    it("sets Access-Control-Allow-Origin to * for API routes", async () => {
-        const res = await fetch(`${BASE}/v1/convert/html`, {
-            method: "OPTIONS",
-        });
-        expect(res.status).toBe(204);
-        expect(res.headers.get("access-control-allow-origin")).toBe("*");
-    });
-    it("restricts CORS for signup/billing/demo routes to docfast.dev", async () => {
-        const res = await fetch(`${BASE}/v1/demo/html`, {
-            method: "OPTIONS",
-        });
-        expect(res.status).toBe(204);
-        expect(res.headers.get("access-control-allow-origin")).toBe("https://docfast.dev");
-    });
-    it("includes correct allowed methods", async () => {
-        const res = await fetch(`${BASE}/health`, { method: "OPTIONS" });
-        const methods = res.headers.get("access-control-allow-methods");
-        expect(methods).toContain("GET");
-        expect(methods).toContain("POST");
-    });
-});
-describe("Error response format consistency", () => {
-    it("401 returns {error: string}", async () => {
-        const res = await fetch(`${BASE}/v1/convert/html`, { method: "POST" });
-        expect(res.status).toBe(401);
-        const data = await res.json();
-        expect(typeof data.error).toBe("string");
-    });
-    it("403 returns {error: string}", async () => {
-        const res = await fetch(`${BASE}/v1/convert/html`, {
-            method: "POST",
-            headers: { Authorization: "Bearer bad-key" },
-        });
-        expect(res.status).toBe(403);
-        const data = await res.json();
-        expect(typeof data.error).toBe("string");
-    });
-    it("404 API returns {error: string}", async () => {
-        const res = await fetch(`${BASE}/v1/nonexistent`);
-        expect(res.status).toBe(404);
-        const data = await res.json();
-        expect(typeof data.error).toBe("string");
-    });
-    it("410 returns {error: string}", async () => {
-        const res = await fetch(`${BASE}/v1/signup/free`, { method: "POST" });
-        expect(res.status).toBe(410);
-        const data = await res.json();
-        expect(typeof data.error).toBe("string");
-    });
-});
-describe("Rate limiting (global)", () => {
-    it("includes rate limit headers", async () => {
-        const res = await fetch(`${BASE}/health`);
-        // express-rate-limit with standardHeaders:true uses RateLimit-* headers
-        const limit = res.headers.get("ratelimit-limit");
-        expect(limit).toBeDefined();
-    });
-});
-describe("API root", () => {
-    it("returns API info", async () => {
-        const res = await fetch(`${BASE}/api`);
-        expect(res.status).toBe(200);
-        const data = await res.json();
-        expect(data.name).toBe("DocFast API");
-        expect(data.version).toBeDefined();
-        expect(data.endpoints).toBeInstanceOf(Array);
-    });
-});
-describe("JS minification", () => {
-    it("serves minified JS files in homepage HTML", async () => {
-        const res = await fetch(`${BASE}/`);
-        expect(res.status).toBe(200);
-        const html = await res.text();
-        // Check that HTML references app.js and status.js
-        expect(html).toContain('src="/app.js"');
-        // Fetch the JS file and verify it's minified (no excessive whitespace)
-        const jsRes = await fetch(`${BASE}/app.js`);
-        expect(jsRes.status).toBe(200);
-        const jsContent = await jsRes.text();
-        // Minified JS should not have excessive whitespace or comments
-        // Basic check: line count should be reasonable for minified code
-        const lineCount = jsContent.split('\n').length;
-        expect(lineCount).toBeLessThan(50); // Original has ~400+ lines, minified should be much less
-        // Should not contain developer comments (/* ... */)
-        expect(jsContent).not.toMatch(/\/\*[\s\S]*?\*\//);
-    });
-});
-describe("Usage endpoint", () => {
-    it("requires authentication (401 without key)", async () => {
-        const res = await fetch(`${BASE}/v1/usage`);
-        expect(res.status).toBe(401);
-        const data = await res.json();
-        expect(data.error).toBeDefined();
-        expect(typeof data.error).toBe("string");
-    });
-    it("requires admin key (503 when not configured)", async () => {
-        const res = await fetch(`${BASE}/v1/usage`, {
-            headers: { Authorization: "Bearer test-key" },
-        });
-        expect(res.status).toBe(503);
-        const data = await res.json();
-        expect(data.error).toBeDefined();
-        expect(data.error).toContain("Admin access not configured");
-    });
-    it("returns usage data with admin key", async () => {
-        // This test will likely fail since we don't have an admin key set in test environment
-        // But it documents the expected behavior
-        const res = await fetch(`${BASE}/v1/usage`, {
-            headers: { Authorization: "Bearer admin-key" },
-        });
-        // Could be 503 (admin access not configured) or 403 (admin access required)
-        expect([403, 503]).toContain(res.status);
-    });
-});
-describe("Billing checkout", () => {
-    it("has rate limiting headers", async () => {
-        const res = await fetch(`${BASE}/v1/billing/checkout`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({}),
-        });
-        // Check rate limit headers are present (express-rate-limit should add these)
-        const limitHeader = res.headers.get("ratelimit-limit");
-        const remainingHeader = res.headers.get("ratelimit-remaining");
-        const resetHeader = res.headers.get("ratelimit-reset");
-        expect(limitHeader).toBeDefined();
-        expect(remainingHeader).toBeDefined();
-        expect(resetHeader).toBeDefined();
-    });
-    it("fails when Stripe not configured", async () => {
-        const res = await fetch(`${BASE}/v1/billing/checkout`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({}),
-        });
-        // Returns 500 due to missing STRIPE_SECRET_KEY in test environment
-        expect(res.status).toBe(500);
-        const data = await res.json();
-        expect(data.error).toBeDefined();
-    });
-});
-describe("Rate limit headers on PDF endpoints", () => {
-    it("includes rate limit headers on HTML conversion", async () => {
-        const res = await fetch(`${BASE}/v1/convert/html`, {
            method: "POST",
            headers: {
                Authorization: "Bearer test-key",
-                "Content-Type": "application/json"
+                "Content-Type": "application/json",
            },
-            body: JSON.stringify({ html: "<h1>Test</h1>" }),
+            body: JSON.stringify({}),
        });
-        expect(res.status).toBe(200);
-        // Check for rate limit headers
-        const limitHeader = res.headers.get("ratelimit-limit");
-        const remainingHeader = res.headers.get("ratelimit-remaining");
-        const resetHeader = res.headers.get("ratelimit-reset");
-        expect(limitHeader).toBeDefined();
-        expect(remainingHeader).toBeDefined();
-        expect(resetHeader).toBeDefined();
-    });
-    it("includes rate limit headers on demo endpoint", async () => {
-        const res = await fetch(`${BASE}/v1/demo/html`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body: JSON.stringify({ html: "<h1>Demo Test</h1>" }),
-        });
-        expect(res.status).toBe(200);
-        // Check for rate limit headers
-        const limitHeader = res.headers.get("ratelimit-limit");
-        const remainingHeader = res.headers.get("ratelimit-remaining");
-        const resetHeader = res.headers.get("ratelimit-reset");
-        expect(limitHeader).toBeDefined();
-        expect(remainingHeader).toBeDefined();
-        expect(resetHeader).toBeDefined();
-    });
-});
-describe("OpenAPI spec", () => {
-    it("returns a valid OpenAPI 3.0 spec with paths", async () => {
-        const res = await fetch(`${BASE}/openapi.json`);
-        expect(res.status).toBe(200);
-        const spec = await res.json();
-        expect(spec.openapi).toBe("3.0.3");
-        expect(spec.info).toBeDefined();
-        expect(spec.info.title).toBe("DocFast API");
-        expect(Object.keys(spec.paths).length).toBeGreaterThanOrEqual(8);
-    });
-    it("includes all major endpoint groups", async () => {
-        const res = await fetch(`${BASE}/openapi.json`);
-        const spec = await res.json();
-        const paths = Object.keys(spec.paths);
-        expect(paths).toContain("/v1/convert/html");
-        expect(paths).toContain("/v1/convert/markdown");
-        expect(paths).toContain("/health");
-    });
-    it("PdfOptions schema includes all valid format values and waitUntil field", async () => {
-        const res = await fetch(`${BASE}/openapi.json`);
-        const spec = await res.json();
-        const pdfOptions = spec.components.schemas.PdfOptions;
-        expect(pdfOptions).toBeDefined();
-        // Check that all 11 format values are included
-        const expectedFormats = ["Letter", "Legal", "Tabloid", "Ledger", "A0", "A1", "A2", "A3", "A4", "A5", "A6"];
-        expect(pdfOptions.properties.format.enum).toEqual(expectedFormats);
-        // Check that waitUntil field exists with correct enum values
-        expect(pdfOptions.properties.waitUntil).toBeDefined();
-        expect(pdfOptions.properties.waitUntil.enum).toEqual(["load", "domcontentloaded", "networkidle0", "networkidle2"]);
-        // Check that headerTemplate and footerTemplate descriptions mention 100KB limit
-        expect(pdfOptions.properties.headerTemplate.description).toContain("100KB");
-        expect(pdfOptions.properties.footerTemplate.description).toContain("100KB");
-    });
-});
-describe("404 handler", () => {
-    it("returns proper JSON error format for API routes", async () => {
-        const res = await fetch(`${BASE}/v1/nonexistent-endpoint`);
        expect(res.status).toBe(404);
-        const data = await res.json();
-        expect(typeof data.error).toBe("string");
-        expect(data.error).toContain("Not Found");
-        expect(data.error).toContain("GET");
-        expect(data.error).toContain("/v1/nonexistent-endpoint");
-    });
-    it("returns HTML 404 for non-API routes", async () => {
-        const res = await fetch(`${BASE}/nonexistent-page`);
-        expect(res.status).toBe(404);
-        const html = await res.text();
-        expect(html).toContain("<!DOCTYPE html>");
-        expect(html).toContain("404");
-        expect(html).toContain("Page Not Found");
    });
 });
--- a/dist/index.js
+++ b/dist/index.js
@ -1,9 +1,11 @@
 import express from "express";
 import { randomUUID } from "crypto";
-import "./types.js"; // Augments Express.Request with requestId, acquirePdfSlot, releasePdfSlot
+import { createRequire } from "module";
 import { compressionMiddleware } from "./middleware/compression.js";
 import logger from "./services/logger.js";
 import helmet from "helmet";
+const _require = createRequire(import.meta.url);
+const APP_VERSION = _require("../package.json").version;
 import path from "path";
 import { fileURLToPath } from "url";
 import rateLimit from "express-rate-limit";
@ -12,17 +14,16 @@ import { templatesRouter } from "./routes/templates.js";
 import { healthRouter } from "./routes/health.js";
 import { demoRouter } from "./routes/demo.js";
 import { recoverRouter } from "./routes/recover.js";
-import { emailChangeRouter } from "./routes/email-change.js";
 import { billingRouter } from "./routes/billing.js";
 import { authMiddleware } from "./middleware/auth.js";
-import { usageMiddleware, loadUsageData, flushDirtyEntries } from "./middleware/usage.js";
-import { pdfRateLimitMiddleware } from "./middleware/pdfRateLimit.js";
-import { adminRouter } from "./routes/admin.js";
+import { usageMiddleware, loadUsageData } from "./middleware/usage.js";
+import { getUsageStats } from "./middleware/usage.js";
+import { pdfRateLimitMiddleware, getConcurrencyStats } from "./middleware/pdfRateLimit.js";
 import { initBrowser, closeBrowser } from "./services/browser.js";
 import { loadKeys, getAllKeys } from "./services/keys.js";
-import { pagesRouter } from "./routes/pages.js";
-import { initDatabase, pool, cleanupStaleData } from "./services/db.js";
-import { startPeriodicCleanup, stopPeriodicCleanup } from "./utils/periodic-cleanup.js";
+import { verifyToken, loadVerifications } from "./services/verification.js";
+import { initDatabase, pool } from "./services/db.js";
+import { swaggerSpec } from "./swagger.js";
 const app = express();
 const PORT = parseInt(process.env.PORT || "3100", 10);
 app.use(helmet({ crossOriginResourcePolicy: { policy: "cross-origin" } }));
@ -47,30 +48,14 @@ app.use((_req, res, next) => {
 });
 // Compression
 app.use(compressionMiddleware);
-// Block search engine indexing on staging
-app.use((req, res, next) => {
-    if (req.hostname.includes("staging")) {
-        res.setHeader("X-Robots-Tag", "noindex, nofollow");
-    }
-    next();
-});
 // Differentiated CORS middleware
-const ALLOWED_ORIGINS = new Set(["https://docfast.dev", "https://staging.docfast.dev"]);
 app.use((req, res, next) => {
    const isAuthBillingRoute = req.path.startsWith('/v1/signup') ||
        req.path.startsWith('/v1/recover') ||
        req.path.startsWith('/v1/billing') ||
-        req.path.startsWith('/v1/demo') ||
-        req.path.startsWith('/v1/email-change');
+        req.path.startsWith('/v1/demo');
    if (isAuthBillingRoute) {
-        const origin = req.headers.origin;
-        if (origin && ALLOWED_ORIGINS.has(origin)) {
-            res.setHeader("Access-Control-Allow-Origin", origin);
-            res.setHeader("Vary", "Origin");
-        }
-        else {
-            res.setHeader("Access-Control-Allow-Origin", "https://docfast.dev");
-        }
+        res.setHeader("Access-Control-Allow-Origin", "https://docfast.dev");
    }
    else {
        res.setHeader("Access-Control-Allow-Origin", "*");
@ -86,8 +71,7 @@ app.use((req, res, next) => {
 });
 // Raw body for Stripe webhook signature verification
 app.use("/v1/billing/webhook", express.raw({ type: "application/json" }));
-// NOTE: No global express.json() here — route-specific parsers are applied
-// per-route below to enforce correct body size limits (BUG-101 fix).
+app.use(express.json({ limit: "2mb" }));
 app.use(express.text({ limit: "2mb", type: "text/*" }));
 // Trust nginx proxy
 app.set("trust proxy", 1);
@ -107,7 +91,6 @@ app.use("/v1/demo", express.json({ limit: "50kb" }), pdfRateLimitMiddleware, dem
 * /v1/signup/free:
 *   post:
 *     tags: [Account]
- *     deprecated: true
 *     summary: Request a free API key (discontinued)
 *     description: Free accounts have been discontinued. Use the demo endpoints or upgrade to Pro.
 *     responses:
@ -132,20 +115,105 @@ app.use("/v1/signup", (_req, res) => {
        pro_url: "https://docfast.dev/#pricing"
    });
 });
-// Default 2MB JSON parser for standard routes
-const defaultJsonParser = express.json({ limit: "2mb" });
-app.use("/v1/recover", defaultJsonParser, recoverRouter);
-app.use("/v1/email-change", defaultJsonParser, emailChangeRouter);
-app.use("/v1/billing", defaultJsonParser, billingRouter);
+app.use("/v1/recover", recoverRouter);
+app.use("/v1/billing", billingRouter);
 // Authenticated routes — conversion routes get tighter body limits (500KB)
 const convertBodyLimit = express.json({ limit: "500kb" });
 app.use("/v1/convert", convertBodyLimit, authMiddleware, usageMiddleware, pdfRateLimitMiddleware, convertRouter);
-app.use("/v1/templates", defaultJsonParser, authMiddleware, usageMiddleware, templatesRouter);
-// Admin + usage routes (extracted to routes/admin.ts)
-app.use(adminRouter);
-// Pages, favicon, docs, openapi.json, /api (extracted to routes/pages.ts)
+app.use("/v1/templates", authMiddleware, usageMiddleware, templatesRouter);
+// Admin: usage stats (admin key required)
+const adminAuth = (req, res, next) => {
+    const adminKey = process.env.ADMIN_API_KEY;
+    if (!adminKey) {
+        res.status(503).json({ error: "Admin access not configured" });
+        return;
+    }
+    if (req.apiKeyInfo?.key !== adminKey) {
+        res.status(403).json({ error: "Admin access required" });
+        return;
+    }
+    next();
+};
+app.get("/v1/usage", authMiddleware, adminAuth, (req, res) => {
+    res.json(getUsageStats(req.apiKeyInfo?.key));
+});
+// Admin: concurrency stats (admin key required)
+app.get("/v1/concurrency", authMiddleware, adminAuth, (_req, res) => {
+    res.json(getConcurrencyStats());
+});
+// Email verification endpoint
+app.get("/verify", (req, res) => {
+    const token = req.query.token;
+    if (!token) {
+        res.status(400).send(verifyPage("Invalid Link", "No verification token provided.", null));
+        return;
+    }
+    const result = verifyToken(token);
+    switch (result.status) {
+        case "ok":
+            res.send(verifyPage("Email Verified! 🚀", "Your DocFast API key is ready:", result.verification.apiKey));
+            break;
+        case "already_verified":
+            res.send(verifyPage("Already Verified", "This email was already verified. Here's your API key:", result.verification.apiKey));
+            break;
+        case "expired":
+            res.status(410).send(verifyPage("Link Expired", "This verification link has expired (24h). Please sign up again.", null));
+            break;
+        case "invalid":
+            res.status(404).send(verifyPage("Invalid Link", "This verification link is not valid.", null));
+            break;
+    }
+});
+function verifyPage(title, message, apiKey) {
+    return `<!DOCTYPE html>
+<html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>${title} — DocFast</title>
+<link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>⚡</text></svg>">
+<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700;800&display=swap" rel="stylesheet">
+<style>
+*{box-sizing:border-box;margin:0;padding:0}
+body{font-family:'Inter',sans-serif;background:#0b0d11;color:#e4e7ed;min-height:100vh;display:flex;align-items:center;justify-content:center;padding:24px}
+.card{background:#151922;border:1px solid #1e2433;border-radius:16px;padding:48px;max-width:520px;width:100%;text-align:center}
+h1{font-size:1.8rem;margin-bottom:12px;font-weight:800}
+p{color:#7a8194;margin-bottom:24px;line-height:1.6}
+.key-box{background:#0b0d11;border:1px solid #34d399;border-radius:8px;padding:16px;font-family:monospace;font-size:0.82rem;word-break:break-all;margin:16px 0;cursor:pointer;transition:background 0.2s;position:relative}
+.key-box:hover{background:#12151c}
+.key-box::after{content:'Click to copy';position:absolute;top:-24px;right:0;font-size:0.7rem;color:#7a8194;font-family:'Inter',sans-serif}
+.warning{background:rgba(251,191,36,0.06);border:1px solid rgba(251,191,36,0.15);border-radius:8px;padding:12px 16px;font-size:0.85rem;color:#fbbf24;margin-bottom:16px;text-align:left}
+.links{margin-top:24px;color:#7a8194;font-size:0.9rem}
+.links a{color:#34d399;text-decoration:none}
+.links a:hover{color:#5eead4}
+</style></head><body>
+<div class="card">
+<h1>${title}</h1>
+<p>${message}</p>
+${apiKey ? `
+<div class="warning">⚠️ Save your API key securely. You can recover it via email if needed.</div>
+<div class="key-box" onclick="navigator.clipboard.writeText('${apiKey}');this.style.borderColor='#5eead4';setTimeout(()=>this.style.borderColor='#34d399',1500)">${apiKey}</div>
+<div class="links">Upgrade to Pro for 5,000 PDFs/month · <a href="/docs">Read the docs →</a></div>
+` : `<div class="links"><a href="/">← Back to DocFast</a></div>`}
+</div></body></html>`;
+}
+// Landing page
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
-app.use(pagesRouter);
+// Favicon route
+app.get("/favicon.ico", (_req, res) => {
+    res.setHeader('Content-Type', 'image/svg+xml');
+    res.setHeader('Cache-Control', 'public, max-age=604800');
+    res.sendFile(path.join(__dirname, "../public/favicon.svg"));
+});
+// Dynamic OpenAPI spec — generated from @openapi JSDoc annotations at startup
+app.get("/openapi.json", (_req, res) => {
+    res.json(swaggerSpec);
+});
+// Docs page (clean URL)
+app.get("/docs", (_req, res) => {
+    // Swagger UI 5.x uses new Function() (via ajv) for JSON schema validation.
+    // Override helmet's default CSP to allow 'unsafe-eval' + blob: for Swagger UI.
+    res.setHeader("Content-Security-Policy", "default-src 'self';script-src 'self' 'unsafe-eval';style-src 'self' https: 'unsafe-inline';img-src 'self' data: blob:;font-src 'self' https: data:;connect-src 'self';worker-src 'self' blob:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none'");
+    res.setHeader('Cache-Control', 'public, max-age=86400');
+    res.sendFile(path.join(__dirname, "../public/docs.html"));
+});
 // Static asset cache headers middleware
 app.use((req, res, next) => {
    if (/\.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$/.test(req.path)) {
@ -157,6 +225,44 @@ app.use(express.static(path.join(__dirname, "../public"), {
    etag: true,
    cacheControl: false,
 }));
+// Legal pages (clean URLs)
+app.get("/impressum", (_req, res) => {
+    res.setHeader('Cache-Control', 'public, max-age=86400');
+    res.sendFile(path.join(__dirname, "../public/impressum.html"));
+});
+app.get("/privacy", (_req, res) => {
+    res.setHeader('Cache-Control', 'public, max-age=86400');
+    res.sendFile(path.join(__dirname, "../public/privacy.html"));
+});
+app.get("/terms", (_req, res) => {
+    res.setHeader('Cache-Control', 'public, max-age=86400');
+    res.sendFile(path.join(__dirname, "../public/terms.html"));
+});
+app.get("/examples", (_req, res) => {
+    res.setHeader('Cache-Control', 'public, max-age=86400');
+    res.sendFile(path.join(__dirname, "../public/examples.html"));
+});
+app.get("/status", (_req, res) => {
+    res.setHeader("Cache-Control", "public, max-age=60");
+    res.sendFile(path.join(__dirname, "../public/status.html"));
+});
+// API root
+app.get("/api", (_req, res) => {
+    res.json({
+        name: "DocFast API",
+        version: APP_VERSION,
+        endpoints: [
+            "POST /v1/demo/html — Try HTML→PDF (no auth, watermarked, 5/hour)",
+            "POST /v1/demo/markdown — Try Markdown→PDF (no auth, watermarked, 5/hour)",
+            "POST /v1/convert/html — HTML→PDF (requires API key)",
+            "POST /v1/convert/markdown — Markdown→PDF (requires API key)",
+            "POST /v1/convert/url — URL→PDF (requires API key)",
+            "POST /v1/templates/:id/render",
+            "GET  /v1/templates",
+            "POST /v1/billing/checkout — Start Pro subscription",
+        ],
+    });
+});
 // 404 handler - must be after all routes
 app.use((req, res) => {
    // Check if it's an API request
@ -199,57 +305,22 @@ app.use((req, res) => {
 </html>`);
    }
 });
-// Global error handler — must be after all routes
-app.use((err, req, res, _next) => {
-    const reqId = req.requestId || "unknown";
-    // Check if this is a JSON parse error from express.json()
-    if (err instanceof SyntaxError && 'status' in err && err.status === 400 && 'body' in err) {
-        logger.warn({ err, requestId: reqId, method: req.method, path: req.path }, "Invalid JSON body");
-        if (!res.headersSent) {
-            res.status(400).json({ error: "Invalid JSON in request body" });
-        }
-        return;
-    }
-    logger.error({ err, requestId: reqId, method: req.method, path: req.path }, "Unhandled route error");
-    if (!res.headersSent) {
-        const isApi = req.path.startsWith("/v1/") || req.path.startsWith("/health");
-        if (isApi) {
-            res.status(500).json({ error: "Internal server error" });
-        }
-        else {
-            res.status(500).send("Internal server error");
-        }
-    }
-});
 async function start() {
    // Initialize PostgreSQL
    await initDatabase();
    // Load data from PostgreSQL
    await loadKeys();
+    await loadVerifications();
    await loadUsageData();
    await initBrowser();
    logger.info(`Loaded ${getAllKeys().length} API keys`);
    const server = app.listen(PORT, () => logger.info(`DocFast API running on :${PORT}`));
-    // Run database cleanup 30 seconds after startup (non-blocking)
-    setTimeout(async () => {
-        try {
-            logger.info("Running scheduled database cleanup...");
-            await cleanupStaleData();
-        }
-        catch (err) {
-            logger.error({ err }, "Startup cleanup failed (non-fatal)");
-        }
-    }, 30_000);
-    // Run database cleanup every 6 hours (expired verifications, orphaned usage)
-    startPeriodicCleanup();
    let shuttingDown = false;
    const shutdown = async (signal) => {
        if (shuttingDown)
            return;
        shuttingDown = true;
        logger.info(`Received ${signal}, starting graceful shutdown...`);
-        // 0. Stop periodic cleanup timer
-        stopPeriodicCleanup();
        // 1. Stop accepting new connections, wait for in-flight requests (max 10s)
        await new Promise((resolve) => {
            const forceTimeout = setTimeout(() => {
@ -262,14 +333,6 @@ async function start() {
                resolve();
            });
        });
-        // 1.5. Flush dirty usage entries while DB pool is still alive
-        try {
-            await flushDirtyEntries();
-            logger.info("Usage data flushed");
-        }
-        catch (err) {
-            logger.error({ err }, "Error flushing usage data during shutdown");
-        }
        // 2. Close Puppeteer browser pool
        try {
            await closeBrowser();
@ -291,19 +354,9 @@ async function start() {
    };
    process.on("SIGTERM", () => shutdown("SIGTERM"));
    process.on("SIGINT", () => shutdown("SIGINT"));
-    process.on("uncaughtException", (err) => {
-        logger.fatal({ err }, "Uncaught exception — shutting down");
-        process.exit(1);
-    });
-    process.on("unhandledRejection", (reason) => {
-        logger.fatal({ err: reason }, "Unhandled rejection — shutting down");
-        process.exit(1);
-    });
-}
-if (process.env.NODE_ENV !== "test") {
-    start().catch((err) => {
-        logger.error({ err }, "Failed to start");
-        process.exit(1);
-    });
 }
+start().catch((err) => {
+    logger.error({ err }, "Failed to start");
+    process.exit(1);
+});
 export { app };
--- a/dist/middleware/pdfRateLimit.js
+++ b/dist/middleware/pdfRateLimit.js
@ -29,33 +29,17 @@ function checkRateLimit(apiKey) {
    const limit = getRateLimit(apiKey);
    const entry = rateLimitStore.get(apiKey);
    if (!entry || now >= entry.resetTime) {
-        const resetTime = now + RATE_WINDOW_MS;
        rateLimitStore.set(apiKey, {
            count: 1,
-            resetTime
+            resetTime: now + RATE_WINDOW_MS
        });
-        return {
-            allowed: true,
-            limit,
-            remaining: limit - 1,
-            resetTime
-        };
+        return true;
    }
    if (entry.count >= limit) {
-        return {
-            allowed: false,
-            limit,
-            remaining: 0,
-            resetTime: entry.resetTime
-        };
+        return false;
    }
    entry.count++;
-    return {
-        allowed: true,
-        limit,
-        remaining: limit - entry.count,
-        resetTime: entry.resetTime
-    };
+    return true;
 }
 function getQueuedCountForKey(apiKey) {
    return pdfQueue.filter(w => w.apiKey === apiKey).length;
@ -89,16 +73,10 @@ export function pdfRateLimitMiddleware(req, res, next) {
    const keyInfo = req.apiKeyInfo;
    const apiKey = keyInfo?.key || "unknown";
    // Check rate limit first
-    const rateLimitResult = checkRateLimit(apiKey);
-    // Set rate limit headers on ALL responses
-    res.set('X-RateLimit-Limit', String(rateLimitResult.limit));
-    res.set('X-RateLimit-Remaining', String(rateLimitResult.remaining));
-    res.set('X-RateLimit-Reset', String(Math.ceil(rateLimitResult.resetTime / 1000)));
-    if (!rateLimitResult.allowed) {
+    if (!checkRateLimit(apiKey)) {
+        const limit = getRateLimit(apiKey);
        const tier = isProKey(apiKey) ? "pro" : "free";
-        const retryAfterSeconds = Math.ceil((rateLimitResult.resetTime - Date.now()) / 1000);
-        res.set('Retry-After', String(retryAfterSeconds));
-        res.status(429).json({ error: `Rate limit exceeded: ${rateLimitResult.limit} PDFs/min allowed for ${tier} tier. Retry after ${retryAfterSeconds}s.` });
+        res.status(429).json({ error: `Rate limit exceeded: ${limit} PDFs/min allowed for ${tier} tier. Retry after 60s.` });
        return;
    }
    // Add concurrency control to the request (pass apiKey for fairness)
--- a/dist/middleware/usage.js
+++ b/dist/middleware/usage.js
@ -30,43 +30,53 @@ export async function loadUsageData() {
    }
 }
 // Batch flush dirty entries to DB (Audit #10 + #12)
-export async function flushDirtyEntries() {
+async function flushDirtyEntries() {
    if (dirtyKeys.size === 0)
        return;
    const keysToFlush = [...dirtyKeys];
-    for (const key of keysToFlush) {
-        const record = usage.get(key);
-        if (!record)
-            continue;
-        const client = await connectWithRetry();
-        try {
-            await client.query(`INSERT INTO usage (key, count, month_key) VALUES ($1, $2, $3)
-         ON CONFLICT (key) DO UPDATE SET count = $2, month_key = $3`, [key, record.count, record.monthKey]);
-            dirtyKeys.delete(key);
-            retryCount.delete(key);
-        }
-        catch (error) {
-            // Audit #12: retry logic for failed writes
-            const retries = (retryCount.get(key) || 0) + 1;
-            if (retries >= MAX_RETRIES) {
-                logger.error({ key: key.slice(0, 8) + "...", retries }, "CRITICAL: Usage write failed after max retries, data may diverge");
+    const client = await connectWithRetry();
+    try {
+        await client.query("BEGIN");
+        for (const key of keysToFlush) {
+            const record = usage.get(key);
+            if (!record)
+                continue;
+            try {
+                await client.query(`INSERT INTO usage (key, count, month_key) VALUES ($1, $2, $3)
+           ON CONFLICT (key) DO UPDATE SET count = $2, month_key = $3`, [key, record.count, record.monthKey]);
                dirtyKeys.delete(key);
                retryCount.delete(key);
            }
-            else {
-                retryCount.set(key, retries);
-                logger.warn({ key: key.slice(0, 8) + "...", retries }, "Usage write failed, will retry");
+            catch (error) {
+                // Audit #12: retry logic for failed writes
+                const retries = (retryCount.get(key) || 0) + 1;
+                if (retries >= MAX_RETRIES) {
+                    logger.error({ key: key.slice(0, 8) + "...", retries }, "CRITICAL: Usage write failed after max retries, data may diverge");
+                    dirtyKeys.delete(key);
+                    retryCount.delete(key);
+                }
+                else {
+                    retryCount.set(key, retries);
+                    logger.warn({ key: key.slice(0, 8) + "...", retries }, "Usage write failed, will retry");
+                }
            }
        }
-        finally {
-            client.release();
-        }
+        await client.query("COMMIT");
+    }
+    catch (error) {
+        await client.query("ROLLBACK").catch(() => { });
+        logger.error({ err: error }, "Failed to flush usage batch");
+        // Keep all keys dirty for retry
+    }
+    finally {
+        client.release();
    }
 }
 // Periodic flush
 setInterval(flushDirtyEntries, FLUSH_INTERVAL_MS);
-// Note: SIGTERM/SIGINT flush is handled by the shutdown orchestrator in index.ts
-// to avoid race conditions with pool.end().
+// Flush on process exit
+process.on("SIGTERM", () => { flushDirtyEntries().catch(() => { }); });
+process.on("SIGINT", () => { flushDirtyEntries().catch(() => { }); });
 export function usageMiddleware(req, res, next) {
    const keyInfo = req.apiKeyInfo;
    const key = keyInfo?.key || "unknown";
@ -83,7 +93,7 @@ export function usageMiddleware(req, res, next) {
    }
    const record = usage.get(key);
    if (record && record.monthKey === monthKey && record.count >= FREE_TIER_LIMIT) {
-        res.status(429).json({ error: "Account limit reached (100/month). Upgrade to Pro at https://docfast.dev/#pricing for 5,000 PDFs/month." });
+        res.status(429).json({ error: "Free tier limit reached (100/month). Upgrade to Pro at https://docfast.dev/#pricing for 5,000 PDFs/month." });
        return;
    }
    trackUsage(key, monthKey);
@ -103,14 +113,6 @@ function trackUsage(key, monthKey) {
        flushDirtyEntries().catch((err) => logger.error({ err }, "Threshold flush failed"));
    }
 }
-export function getUsageForKey(key) {
-    const monthKey = getMonthKey();
-    const record = usage.get(key);
-    if (record && record.monthKey === monthKey) {
-        return { count: record.count, monthKey };
-    }
-    return { count: 0, monthKey };
-}
 export function getUsageStats(apiKey) {
    const stats = {};
    if (apiKey) {
--- a/dist/routes/billing.js
+++ b/dist/routes/billing.js
@ -1,44 +1,24 @@
 import { Router } from "express";
-import rateLimit, { ipKeyGenerator } from "express-rate-limit";
+import rateLimit from "express-rate-limit";
 import Stripe from "stripe";
-import { createProKey, downgradeByCustomer, updateEmailByCustomer, findKeyByCustomerId } from "../services/keys.js";
+import { createProKey, downgradeByCustomer, updateEmailByCustomer } from "../services/keys.js";
 import logger from "../services/logger.js";
-import { renderSuccessPage, renderAlreadyProvisionedPage } from "../utils/billing-templates.js";
+function escapeHtml(s) {
+    return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
 let _stripe = null;
 function getStripe() {
    if (!_stripe) {
        const key = process.env.STRIPE_SECRET_KEY;
        if (!key)
            throw new Error("STRIPE_SECRET_KEY not configured");
-        // @ts-expect-error Stripe SDK types lag behind API versions
        _stripe = new Stripe(key, { apiVersion: "2025-01-27.acacia" });
    }
    return _stripe;
 }
 const router = Router();
-// Track provisioned session IDs with TTL to prevent duplicate key creation and memory leaks
-// Map<sessionId, timestamp> - entries older than 24h are periodically cleaned up
-const provisionedSessions = new Map();
-// TTL Configuration
-const SESSION_TTL_MS = 24 * 60 * 60 * 1000; // 24 hours
-const CLEANUP_INTERVAL_MS = 60 * 60 * 1000; // Clean up every 1 hour
-// Cleanup old provisioned session entries
-function cleanupOldSessions() {
-    const now = Date.now();
-    const cutoff = now - SESSION_TTL_MS;
-    let cleanedCount = 0;
-    for (const [sessionId, timestamp] of provisionedSessions.entries()) {
-        if (timestamp < cutoff) {
-            provisionedSessions.delete(sessionId);
-            cleanedCount++;
-        }
-    }
-    if (cleanedCount > 0) {
-        logger.info({ cleanedCount, remainingCount: provisionedSessions.size }, "Cleaned up expired provisioned sessions");
-    }
-}
-// Start periodic cleanup
-setInterval(cleanupOldSessions, CLEANUP_INTERVAL_MS);
+// Track provisioned session IDs to prevent duplicate key creation
+const provisionedSessions = new Set();
 const DOCFAST_PRODUCT_ID = "prod_TygeG8tQPtEAdE";
 // Returns true if the given Stripe subscription contains a DocFast product.
 // Used to filter webhook events — this Stripe account is shared with other projects.
@ -64,7 +44,7 @@ async function isDocFastSubscription(subscriptionId) {
 const checkoutLimiter = rateLimit({
    windowMs: 60 * 60 * 1000, // 1 hour
    max: 3,
-    keyGenerator: (req) => ipKeyGenerator(req.ip || req.socket.remoteAddress || "unknown"),
+    keyGenerator: (req) => req.ip || req.socket.remoteAddress || "unknown",
    standardHeaders: true,
    legacyHeaders: false,
    message: { error: "Too many checkout requests. Please try again later." },
@ -123,15 +103,13 @@ router.post("/checkout", checkoutLimiter, async (req, res) => {
        res.status(500).json({ error: "Failed to create checkout session" });
    }
 });
-// Success page — provision Pro API key after checkout (browser redirect, not a public API)
+// Success page — provision Pro API key after checkout
 router.get("/success", async (req, res) => {
    const sessionId = req.query.session_id;
    if (!sessionId) {
        res.status(400).json({ error: "Missing session_id" });
        return;
    }
-    // Clean up old sessions before checking duplicates
-    cleanupOldSessions();
    // Prevent duplicate provisioning from same session
    if (provisionedSessions.has(sessionId)) {
        res.status(409).json({ error: "This checkout session has already been used to provision a key. If you lost your key, use the key recovery feature." });
@ -145,23 +123,35 @@ router.get("/success", async (req, res) => {
            res.status(400).json({ error: "No customer found" });
            return;
        }
-        // Check DB for existing key (survives pod restarts, unlike provisionedSessions Map)
-        const existingKey = await findKeyByCustomerId(customerId);
-        if (existingKey) {
-            provisionedSessions.set(session.id, Date.now());
-            res.send(renderAlreadyProvisionedPage());
-            return;
-        }
        const keyInfo = await createProKey(email, customerId);
-        provisionedSessions.set(session.id, Date.now());
-        res.send(renderSuccessPage(keyInfo.key));
+        provisionedSessions.add(session.id);
+        // Return a nice HTML page instead of raw JSON
+        res.send(`<!DOCTYPE html>
+<html><head><title>Welcome to DocFast Pro!</title>
+<style>
+body { font-family: system-ui; background: #0a0a0a; color: #e8e8e8; display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; }
+.card { background: #141414; border: 1px solid #222; border-radius: 16px; padding: 48px; max-width: 500px; text-align: center; }
+h1 { color: #4f9; margin-bottom: 8px; }
+.key { background: #1a1a1a; border: 1px solid #333; border-radius: 8px; padding: 16px; margin: 24px 0; font-family: monospace; font-size: 0.9rem; word-break: break-all; cursor: pointer; }
+.key:hover { border-color: #4f9; }
+p { color: #888; line-height: 1.6; }
+a { color: #4f9; }
+</style></head><body>
+<div class="card">
+<h1>🎉 Welcome to Pro!</h1>
+<p>Your API key:</p>
+<div class="key" style="position:relative" data-key="${escapeHtml(keyInfo.key)}">${escapeHtml(keyInfo.key)}<button onclick="navigator.clipboard.writeText(this.parentElement.dataset.key);this.textContent='Copied!';setTimeout(()=>this.textContent='Copy',1500)" style="position:absolute;top:8px;right:8px;background:#4f9;color:#0a0a0a;border:none;border-radius:4px;padding:4px 12px;cursor:pointer;font-size:0.8rem;font-family:system-ui">Copy</button></div>
+<p><strong>Save this key!</strong> It won't be shown again.</p>
+<p>5,000 PDFs/month • All endpoints • Priority support</p>
+<p><a href="/docs">View API docs →</a></p>
+</div></body></html>`);
    }
    catch (err) {
        logger.error({ err }, "Success page error");
        res.status(500).json({ error: "Failed to retrieve session" });
    }
 });
-// Stripe webhook for subscription lifecycle events (internal, not in public API docs)
+// Stripe webhook for subscription lifecycle events
 router.post("/webhook", async (req, res) => {
    const sig = req.headers["stripe-signature"];
    const webhookSecret = process.env.STRIPE_WEBHOOK_SECRET;
@ -215,7 +205,7 @@ router.post("/webhook", async (req, res) => {
                break;
            }
            const keyInfo = await createProKey(email, customerId);
-            provisionedSessions.set(session.id, Date.now());
+            provisionedSessions.add(session.id);
            logger.info({ email, customerId }, "checkout.session.completed: provisioned pro key");
            break;
        }
--- a/dist/routes/convert.js
+++ b/dist/routes/convert.js
@ -2,9 +2,44 @@ import { Router } from "express";
 import { renderPdf, renderUrlPdf } from "../services/browser.js";
 import { markdownToHtml, wrapHtml } from "../services/markdown.js";
 import dns from "node:dns/promises";
-import { isPrivateIP } from "../utils/network.js";
-import { sanitizeFilename } from "../utils/sanitize.js";
-import { handlePdfRoute } from "../utils/pdf-handler.js";
+import logger from "../services/logger.js";
+import net from "node:net";
+function isPrivateIP(ip) {
+    // IPv6 loopback/unspecified
+    if (ip === "::1" || ip === "::")
+        return true;
+    // IPv6 link-local (fe80::/10)
+    if (ip.toLowerCase().startsWith("fe8") || ip.toLowerCase().startsWith("fe9") ||
+        ip.toLowerCase().startsWith("fea") || ip.toLowerCase().startsWith("feb"))
+        return true;
+    // IPv6 unique local (fc00::/7)
+    const lower = ip.toLowerCase();
+    if (lower.startsWith("fc") || lower.startsWith("fd"))
+        return true;
+    // IPv4-mapped IPv6
+    if (ip.startsWith("::ffff:"))
+        ip = ip.slice(7);
+    if (!net.isIPv4(ip))
+        return false;
+    const parts = ip.split(".").map(Number);
+    if (parts[0] === 0)
+        return true; // 0.0.0.0/8
+    if (parts[0] === 10)
+        return true; // 10.0.0.0/8
+    if (parts[0] === 127)
+        return true; // 127.0.0.0/8
+    if (parts[0] === 169 && parts[1] === 254)
+        return true; // 169.254.0.0/16
+    if (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31)
+        return true; // 172.16.0.0/12
+    if (parts[0] === 192 && parts[1] === 168)
+        return true; // 192.168.0.0/16
+    return false;
+}
+function sanitizeFilename(name) {
+    // Strip characters dangerous in Content-Disposition headers
+    return name.replace(/[\x00-\x1f"\\\r\n]/g, "").trim() || "document.pdf";
+}
 export const convertRouter = Router();
 /**
 * @openapi
@ -37,13 +72,6 @@ export const convertRouter = Router();
 *     responses:
 *       200:
 *         description: PDF document
- *         headers:
- *           X-RateLimit-Limit:
- *             $ref: '#/components/headers/X-RateLimit-Limit'
- *           X-RateLimit-Remaining:
- *             $ref: '#/components/headers/X-RateLimit-Remaining'
- *           X-RateLimit-Reset:
- *             $ref: '#/components/headers/X-RateLimit-Reset'
 *         content:
 *           application/pdf:
 *             schema:
@ -59,25 +87,56 @@ export const convertRouter = Router();
 *         description: Unsupported Content-Type (must be application/json)
 *       429:
 *         description: Rate limit or usage limit exceeded
- *         headers:
- *           Retry-After:
- *             $ref: '#/components/headers/Retry-After'
 *       500:
 *         description: PDF generation failed
 */
 convertRouter.post("/html", async (req, res) => {
-    await handlePdfRoute(req, res, async (sanitizedOptions) => {
+    let slotAcquired = false;
+    try {
+        // Reject non-JSON content types
+        const ct = req.headers["content-type"] || "";
+        if (!ct.includes("application/json")) {
+            res.status(415).json({ error: "Unsupported Content-Type. Use application/json." });
+            return;
+        }
        const body = typeof req.body === "string" ? { html: req.body } : req.body;
        if (!body.html) {
            res.status(400).json({ error: "Missing 'html' field" });
-            return null;
+            return;
        }
+        // Acquire concurrency slot
+        if (req.acquirePdfSlot) {
+            await req.acquirePdfSlot();
+            slotAcquired = true;
+        }
+        // Wrap bare HTML fragments
        const fullHtml = body.html.includes("<html")
            ? body.html
            : wrapHtml(body.html, body.css);
-        const { pdf, durationMs } = await renderPdf(fullHtml, { ...sanitizedOptions });
-        return { pdf, durationMs, filename: sanitizeFilename(body.filename || "document.pdf") };
-    });
+        const pdf = await renderPdf(fullHtml, {
+            format: body.format,
+            landscape: body.landscape,
+            margin: body.margin,
+            printBackground: body.printBackground,
+        });
+        const filename = sanitizeFilename(body.filename || "document.pdf");
+        res.setHeader("Content-Type", "application/pdf");
+        res.setHeader("Content-Disposition", `inline; filename="${filename}"`);
+        res.send(pdf);
+    }
+    catch (err) {
+        logger.error({ err }, "Convert HTML error");
+        if (err.message === "QUEUE_FULL") {
+            res.status(429).json({ error: "Server busy - too many concurrent PDF generations. Please try again in a few seconds." });
+            return;
+        }
+        res.status(500).json({ error: `PDF generation failed: ${err.message}` });
+    }
+    finally {
+        if (slotAcquired && req.releasePdfSlot) {
+            req.releasePdfSlot();
+        }
+    }
 });
 /**
 * @openapi
@ -109,13 +168,6 @@ convertRouter.post("/html", async (req, res) => {
 *     responses:
 *       200:
 *         description: PDF document
- *         headers:
- *           X-RateLimit-Limit:
- *             $ref: '#/components/headers/X-RateLimit-Limit'
- *           X-RateLimit-Remaining:
- *             $ref: '#/components/headers/X-RateLimit-Remaining'
- *           X-RateLimit-Reset:
- *             $ref: '#/components/headers/X-RateLimit-Reset'
 *         content:
 *           application/pdf:
 *             schema:
@ -131,23 +183,53 @@ convertRouter.post("/html", async (req, res) => {
 *         description: Unsupported Content-Type
 *       429:
 *         description: Rate limit or usage limit exceeded
- *         headers:
- *           Retry-After:
- *             $ref: '#/components/headers/Retry-After'
 *       500:
 *         description: PDF generation failed
 */
 convertRouter.post("/markdown", async (req, res) => {
-    await handlePdfRoute(req, res, async (sanitizedOptions) => {
+    let slotAcquired = false;
+    try {
+        // Reject non-JSON content types
+        const ct = req.headers["content-type"] || "";
+        if (!ct.includes("application/json")) {
+            res.status(415).json({ error: "Unsupported Content-Type. Use application/json." });
+            return;
+        }
        const body = typeof req.body === "string" ? { markdown: req.body } : req.body;
        if (!body.markdown) {
            res.status(400).json({ error: "Missing 'markdown' field" });
-            return null;
+            return;
+        }
+        // Acquire concurrency slot
+        if (req.acquirePdfSlot) {
+            await req.acquirePdfSlot();
+            slotAcquired = true;
        }
        const html = markdownToHtml(body.markdown, body.css);
-        const { pdf, durationMs } = await renderPdf(html, { ...sanitizedOptions });
-        return { pdf, durationMs, filename: sanitizeFilename(body.filename || "document.pdf") };
-    });
+        const pdf = await renderPdf(html, {
+            format: body.format,
+            landscape: body.landscape,
+            margin: body.margin,
+            printBackground: body.printBackground,
+        });
+        const filename = sanitizeFilename(body.filename || "document.pdf");
+        res.setHeader("Content-Type", "application/pdf");
+        res.setHeader("Content-Disposition", `inline; filename="${filename}"`);
+        res.send(pdf);
+    }
+    catch (err) {
+        logger.error({ err }, "Convert MD error");
+        if (err.message === "QUEUE_FULL") {
+            res.status(429).json({ error: "Server busy - too many concurrent PDF generations. Please try again in a few seconds." });
+            return;
+        }
+        res.status(500).json({ error: `PDF generation failed: ${err.message}` });
+    }
+    finally {
+        if (slotAcquired && req.releasePdfSlot) {
+            req.releasePdfSlot();
+        }
+    }
 });
 /**
 * @openapi
@ -184,13 +266,6 @@ convertRouter.post("/markdown", async (req, res) => {
 *     responses:
 *       200:
 *         description: PDF document
- *         headers:
- *           X-RateLimit-Limit:
- *             $ref: '#/components/headers/X-RateLimit-Limit'
- *           X-RateLimit-Remaining:
- *             $ref: '#/components/headers/X-RateLimit-Remaining'
- *           X-RateLimit-Reset:
- *             $ref: '#/components/headers/X-RateLimit-Reset'
 *         content:
 *           application/pdf:
 *             schema:
@ -206,18 +281,22 @@ convertRouter.post("/markdown", async (req, res) => {
 *         description: Unsupported Content-Type
 *       429:
 *         description: Rate limit or usage limit exceeded
- *         headers:
- *           Retry-After:
- *             $ref: '#/components/headers/Retry-After'
 *       500:
 *         description: PDF generation failed
 */
 convertRouter.post("/url", async (req, res) => {
-    await handlePdfRoute(req, res, async (sanitizedOptions) => {
+    let slotAcquired = false;
+    try {
+        // Reject non-JSON content types
+        const ct = req.headers["content-type"] || "";
+        if (!ct.includes("application/json")) {
+            res.status(415).json({ error: "Unsupported Content-Type. Use application/json." });
+            return;
+        }
        const body = req.body;
        if (!body.url) {
            res.status(400).json({ error: "Missing 'url' field" });
-            return null;
+            return;
        }
        // URL validation + SSRF protection
        let parsed;
@ -225,31 +304,56 @@ convertRouter.post("/url", async (req, res) => {
            parsed = new URL(body.url);
            if (!["http:", "https:"].includes(parsed.protocol)) {
                res.status(400).json({ error: "Only http/https URLs are supported" });
-                return null;
+                return;
            }
        }
        catch {
            res.status(400).json({ error: "Invalid URL" });
-            return null;
+            return;
        }
-        // DNS lookup to block private/reserved IPs + pin resolution
+        // DNS lookup to block private/reserved IPs + pin resolution to prevent DNS rebinding
        let resolvedAddress;
        try {
            const { address } = await dns.lookup(parsed.hostname);
            if (isPrivateIP(address)) {
                res.status(400).json({ error: "URL resolves to a private/internal IP address" });
-                return null;
+                return;
            }
            resolvedAddress = address;
        }
        catch {
            res.status(400).json({ error: "DNS lookup failed for URL hostname" });
-            return null;
+            return;
        }
-        const { pdf, durationMs } = await renderUrlPdf(body.url, {
-            ...sanitizedOptions,
+        // Acquire concurrency slot
+        if (req.acquirePdfSlot) {
+            await req.acquirePdfSlot();
+            slotAcquired = true;
+        }
+        const pdf = await renderUrlPdf(body.url, {
+            format: body.format,
+            landscape: body.landscape,
+            margin: body.margin,
+            printBackground: body.printBackground,
+            waitUntil: body.waitUntil,
            hostResolverRules: `MAP ${parsed.hostname} ${resolvedAddress}`,
        });
-        return { pdf, durationMs, filename: sanitizeFilename(body.filename || "page.pdf") };
-    });
+        const filename = sanitizeFilename(body.filename || "page.pdf");
+        res.setHeader("Content-Type", "application/pdf");
+        res.setHeader("Content-Disposition", `inline; filename="${filename}"`);
+        res.send(pdf);
+    }
+    catch (err) {
+        logger.error({ err }, "Convert URL error");
+        if (err.message === "QUEUE_FULL") {
+            res.status(429).json({ error: "Server busy - too many concurrent PDF generations. Please try again in a few seconds." });
+            return;
+        }
+        res.status(500).json({ error: `PDF generation failed: ${err.message}` });
+    }
+    finally {
+        if (slotAcquired && req.releasePdfSlot) {
+            req.releasePdfSlot();
+        }
+    }
 });
--- a/dist/routes/email-change.js
+++ b/dist/routes/email-change.js
@ -1,188 +1,82 @@
 import { Router } from "express";
-import rateLimit, { ipKeyGenerator } from "express-rate-limit";
+import rateLimit from "express-rate-limit";
 import { createPendingVerification, verifyCode } from "../services/verification.js";
 import { sendVerificationEmail } from "../services/email.js";
-import { queryWithRetry } from "../services/db.js";
+import { getAllKeys, updateKeyEmail } from "../services/keys.js";
 import logger from "../services/logger.js";
 const router = Router();
-const emailChangeLimiter = rateLimit({
+const changeLimiter = rateLimit({
    windowMs: 60 * 60 * 1000,
    max: 3,
-    message: { error: "Too many email change attempts. Please try again in 1 hour." },
+    message: { error: "Too many attempts. Please try again in 1 hour." },
    standardHeaders: true,
    legacyHeaders: false,
-    keyGenerator: (req) => req.body?.apiKey || ipKeyGenerator(req.ip || "unknown"),
 });
-const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-async function validateApiKey(apiKey) {
-    const result = await queryWithRetry(`SELECT key, email, tier FROM api_keys WHERE key = $1`, [apiKey]);
-    return result.rows[0] || null;
-}
-/**
- * @openapi
- * /v1/email-change:
- *   post:
- *     tags: [Account]
- *     summary: Request email change
- *     description: |
- *       Sends a 6-digit verification code to the new email address.
- *       Rate limited to 3 requests per hour per API key.
- *     requestBody:
- *       required: true
- *       content:
- *         application/json:
- *           schema:
- *             type: object
- *             required: [apiKey, newEmail]
- *             properties:
- *               apiKey:
- *                 type: string
- *               newEmail:
- *                 type: string
- *                 format: email
- *     responses:
- *       200:
- *         description: Verification code sent
- *         content:
- *           application/json:
- *             schema:
- *               type: object
- *               properties:
- *                 status:
- *                   type: string
- *                   example: verification_sent
- *                 message:
- *                   type: string
- *       400:
- *         description: Missing or invalid fields
- *       403:
- *         description: Invalid API key
- *       409:
- *         description: Email already taken
- *       429:
- *         description: Too many attempts
- */
-router.post("/", emailChangeLimiter, async (req, res) => {
-    try {
-        const { apiKey, newEmail } = req.body || {};
-        if (!apiKey || typeof apiKey !== "string") {
-            res.status(400).json({ error: "apiKey is required." });
-            return;
-        }
-        if (!newEmail || typeof newEmail !== "string") {
-            res.status(400).json({ error: "newEmail is required." });
-            return;
-        }
-        const cleanEmail = newEmail.trim().toLowerCase();
-        if (!EMAIL_RE.test(cleanEmail)) {
-            res.status(400).json({ error: "Invalid email format." });
-            return;
-        }
-        const keyRow = await validateApiKey(apiKey);
-        if (!keyRow) {
-            res.status(403).json({ error: "Invalid API key." });
-            return;
-        }
-        // Check if email is already taken by another key
-        const existing = await queryWithRetry(`SELECT key FROM api_keys WHERE email = $1 AND key != $2`, [cleanEmail, apiKey]);
-        if (existing.rows.length > 0) {
-            res.status(409).json({ error: "This email is already associated with another account." });
-            return;
-        }
-        const pending = await createPendingVerification(cleanEmail);
-        sendVerificationEmail(cleanEmail, pending.code).catch(err => {
-            logger.error({ err, email: cleanEmail }, "Failed to send email change verification");
-        });
-        res.json({ status: "verification_sent", message: "A verification code has been sent to your new email address." });
+router.post("/", changeLimiter, async (req, res) => {
+    const apiKey = req.headers.authorization?.replace(/^Bearer\s+/i, "") || req.body?.apiKey;
+    const newEmail = req.body?.newEmail;
+    if (!apiKey || typeof apiKey !== "string") {
+        res.status(400).json({ error: "API key is required (Authorization header or body)." });
+        return;
    }
-    catch (err) {
-        const reqId = req.requestId || "unknown";
-        logger.error({ err, requestId: reqId }, "Unhandled error in POST /email-change");
-        res.status(500).json({ error: "Internal server error" });
+    if (!newEmail || typeof newEmail !== "string" || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(newEmail)) {
+        res.status(400).json({ error: "A valid new email address is required." });
+        return;
    }
+    const cleanEmail = newEmail.trim().toLowerCase();
+    const keys = getAllKeys();
+    const userKey = keys.find((k) => k.key === apiKey);
+    if (!userKey) {
+        res.status(401).json({ error: "Invalid API key." });
+        return;
+    }
+    const existing = keys.find((k) => k.email === cleanEmail);
+    if (existing) {
+        res.status(409).json({ error: "This email is already associated with another account." });
+        return;
+    }
+    const pending = await createPendingVerification(cleanEmail);
+    sendVerificationEmail(cleanEmail, pending.code).catch((err) => {
+        logger.error({ err, email: cleanEmail }, "Failed to send email change verification");
+    });
+    res.json({ status: "verification_sent", message: "Verification code sent to your new email address." });
 });
-/**
- * @openapi
- * /v1/email-change/verify:
- *   post:
- *     tags: [Account]
- *     summary: Verify email change code
- *     description: Verifies the 6-digit code and updates the account email.
- *     requestBody:
- *       required: true
- *       content:
- *         application/json:
- *           schema:
- *             type: object
- *             required: [apiKey, newEmail, code]
- *             properties:
- *               apiKey:
- *                 type: string
- *               newEmail:
- *                 type: string
- *                 format: email
- *               code:
- *                 type: string
- *                 pattern: '^\d{6}$'
- *     responses:
- *       200:
- *         description: Email updated
- *         content:
- *           application/json:
- *             schema:
- *               type: object
- *               properties:
- *                 status:
- *                   type: string
- *                   example: ok
- *                 newEmail:
- *                   type: string
- *       400:
- *         description: Missing fields or invalid code
- *       403:
- *         description: Invalid API key
- *       410:
- *         description: Code expired
- *       429:
- *         description: Too many failed attempts
- */
-router.post("/verify", async (req, res) => {
-    try {
-        const { apiKey, newEmail, code } = req.body || {};
-        if (!apiKey || !newEmail || !code) {
-            res.status(400).json({ error: "apiKey, newEmail, and code are required." });
-            return;
-        }
-        const cleanEmail = newEmail.trim().toLowerCase();
-        const cleanCode = String(code).trim();
-        const keyRow = await validateApiKey(apiKey);
-        if (!keyRow) {
-            res.status(403).json({ error: "Invalid API key." });
-            return;
-        }
-        const result = await verifyCode(cleanEmail, cleanCode);
-        switch (result.status) {
-            case "ok": {
-                await queryWithRetry(`UPDATE api_keys SET email = $1 WHERE key = $2`, [cleanEmail, apiKey]);
-                logger.info({ apiKey: apiKey.slice(0, 10) + "...", newEmail: cleanEmail }, "Email changed");
-                res.json({ status: "ok", newEmail: cleanEmail });
-                break;
+router.post("/verify", changeLimiter, async (req, res) => {
+    const apiKey = req.headers.authorization?.replace(/^Bearer\s+/i, "") || req.body?.apiKey;
+    const { newEmail, code } = req.body || {};
+    if (!apiKey || !newEmail || !code) {
+        res.status(400).json({ error: "API key, new email, and code are required." });
+        return;
+    }
+    const cleanEmail = newEmail.trim().toLowerCase();
+    const cleanCode = String(code).trim();
+    const keys = getAllKeys();
+    const userKey = keys.find((k) => k.key === apiKey);
+    if (!userKey) {
+        res.status(401).json({ error: "Invalid API key." });
+        return;
+    }
+    const result = await verifyCode(cleanEmail, cleanCode);
+    switch (result.status) {
+        case "ok": {
+            const updated = await updateKeyEmail(apiKey, cleanEmail);
+            if (updated) {
+                res.json({ status: "updated", message: "Email address updated successfully.", newEmail: cleanEmail });
            }
-            case "expired":
-                res.status(410).json({ error: "Verification code has expired. Please request a new one." });
-                break;
-            case "max_attempts":
-                res.status(429).json({ error: "Too many failed attempts. Please request a new code." });
-                break;
-            case "invalid":
-                res.status(400).json({ error: "Invalid verification code." });
-                break;
+            else {
+                res.status(500).json({ error: "Failed to update email." });
+            }
+            break;
        }
-    }
-    catch (err) {
-        const reqId = req.requestId || "unknown";
-        logger.error({ err, requestId: reqId }, "Unhandled error in POST /email-change/verify");
-        res.status(500).json({ error: "Internal server error" });
+        case "expired":
+            res.status(410).json({ error: "Verification code has expired. Please request a new one." });
+            break;
+        case "max_attempts":
+            res.status(429).json({ error: "Too many failed attempts. Please request a new code." });
+            break;
+        case "invalid":
+            res.status(400).json({ error: "Invalid verification code." });
+            break;
    }
 });
 export { router as emailChangeRouter };
--- a/dist/routes/health.js
+++ b/dist/routes/health.js
@ -90,7 +90,7 @@ healthRouter.get("/", async (_req, res) => {
    catch (error) {
        databaseStatus = {
            status: "error",
-            message: error instanceof Error ? error.message : "Database connection failed"
+            message: error.message || "Database connection failed"
        };
        overallStatus = "degraded";
        httpStatus = 503;
--- a/dist/routes/recover.js
+++ b/dist/routes/recover.js
@ -3,7 +3,6 @@ import rateLimit from "express-rate-limit";
 import { createPendingVerification, verifyCode } from "../services/verification.js";
 import { sendVerificationEmail } from "../services/email.js";
 import { getAllKeys } from "../services/keys.js";
-import { queryWithRetry } from "../services/db.js";
 import logger from "../services/logger.js";
 const router = Router();
 const recoverLimiter = rateLimit({
@ -54,39 +53,23 @@ const recoverLimiter = rateLimit({
 *         description: Too many recovery attempts
 */
 router.post("/", recoverLimiter, async (req, res) => {
-    try {
-        const { email } = req.body || {};
-        if (!email || typeof email !== "string" || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
-            res.status(400).json({ error: "A valid email address is required." });
-            return;
-        }
-        const cleanEmail = email.trim().toLowerCase();
-        const keys = getAllKeys();
-        const userKey = keys.find(k => k.email === cleanEmail);
-        if (!userKey) {
-            // DB fallback: cache may be stale in multi-replica setups
-            const dbResult = await queryWithRetry("SELECT key FROM api_keys WHERE email = $1 LIMIT 1", [cleanEmail]);
-            if (dbResult.rows.length > 0) {
-                const pending = await createPendingVerification(cleanEmail);
-                sendVerificationEmail(cleanEmail, pending.code).catch(err => {
-                    logger.error({ err, email: cleanEmail }, "Failed to send recovery email");
-                });
-                logger.info({ email: cleanEmail }, "recover: cache miss, sent recovery via DB fallback");
-            }
-            res.json({ status: "recovery_sent", message: "If an account exists for this email, a verification code has been sent." });
-            return;
-        }
-        const pending = await createPendingVerification(cleanEmail);
-        sendVerificationEmail(cleanEmail, pending.code).catch(err => {
-            logger.error({ err, email: cleanEmail }, "Failed to send recovery email");
-        });
+    const { email } = req.body || {};
+    if (!email || typeof email !== "string" || !/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email)) {
+        res.status(400).json({ error: "A valid email address is required." });
+        return;
+    }
+    const cleanEmail = email.trim().toLowerCase();
+    const keys = getAllKeys();
+    const userKey = keys.find(k => k.email === cleanEmail);
+    if (!userKey) {
        res.json({ status: "recovery_sent", message: "If an account exists for this email, a verification code has been sent." });
+        return;
    }
-    catch (err) {
-        const reqId = req.requestId || "unknown";
-        logger.error({ err, requestId: reqId }, "Unhandled error in POST /recover");
-        res.status(500).json({ error: "Internal server error" });
-    }
+    const pending = await createPendingVerification(cleanEmail);
+    sendVerificationEmail(cleanEmail, pending.code).catch(err => {
+        logger.error({ err, email: cleanEmail }, "Failed to send recovery email");
+    });
+    res.json({ status: "recovery_sent", message: "If an account exists for this email, a verification code has been sent." });
 });
 /**
 * @openapi
@ -135,65 +118,43 @@ router.post("/", recoverLimiter, async (req, res) => {
 *         description: Too many failed attempts
 */
 router.post("/verify", recoverLimiter, async (req, res) => {
-    try {
-        const { email, code } = req.body || {};
-        if (!email || !code) {
-            res.status(400).json({ error: "Email and code are required." });
-            return;
-        }
-        const cleanEmail = email.trim().toLowerCase();
-        const cleanCode = String(code).trim();
-        const result = await verifyCode(cleanEmail, cleanCode);
-        switch (result.status) {
-            case "ok": {
-                const keys = getAllKeys();
-                let userKey = keys.find(k => k.email === cleanEmail);
-                // DB fallback: cache may be stale in multi-replica setups
-                if (!userKey) {
-                    logger.info({ email: cleanEmail }, "recover verify: cache miss, falling back to DB");
-                    const dbResult = await queryWithRetry("SELECT key, tier, email, created_at, stripe_customer_id FROM api_keys WHERE email = $1 LIMIT 1", [cleanEmail]);
-                    if (dbResult.rows.length > 0) {
-                        const row = dbResult.rows[0];
-                        userKey = {
-                            key: row.key,
-                            tier: row.tier,
-                            email: row.email,
-                            createdAt: row.created_at instanceof Date ? row.created_at.toISOString() : row.created_at,
-                            stripeCustomerId: row.stripe_customer_id || undefined,
-                        };
-                    }
-                }
-                if (userKey) {
-                    res.json({
-                        status: "recovered",
-                        apiKey: userKey.key,
-                        tier: userKey.tier,
-                        message: "Your API key has been recovered. Save it securely — it is shown only once.",
-                    });
-                }
-                else {
-                    res.json({
-                        status: "recovered",
-                        message: "No API key found for this email.",
-                    });
-                }
-                break;
-            }
-            case "expired":
-                res.status(410).json({ error: "Verification code has expired. Please request a new one." });
-                break;
-            case "max_attempts":
-                res.status(429).json({ error: "Too many failed attempts. Please request a new code." });
-                break;
-            case "invalid":
-                res.status(400).json({ error: "Invalid verification code." });
-                break;
-        }
+    const { email, code } = req.body || {};
+    if (!email || !code) {
+        res.status(400).json({ error: "Email and code are required." });
+        return;
    }
-    catch (err) {
-        const reqId = req.requestId || "unknown";
-        logger.error({ err, requestId: reqId }, "Unhandled error in POST /recover/verify");
-        res.status(500).json({ error: "Internal server error" });
+    const cleanEmail = email.trim().toLowerCase();
+    const cleanCode = String(code).trim();
+    const result = await verifyCode(cleanEmail, cleanCode);
+    switch (result.status) {
+        case "ok": {
+            const keys = getAllKeys();
+            const userKey = keys.find(k => k.email === cleanEmail);
+            if (userKey) {
+                res.json({
+                    status: "recovered",
+                    apiKey: userKey.key,
+                    tier: userKey.tier,
+                    message: "Your API key has been recovered. Save it securely — it is shown only once.",
+                });
+            }
+            else {
+                res.json({
+                    status: "recovered",
+                    message: "No API key found for this email.",
+                });
+            }
+            break;
+        }
+        case "expired":
+            res.status(410).json({ error: "Verification code has expired. Please request a new one." });
+            break;
+        case "max_attempts":
+            res.status(429).json({ error: "Too many failed attempts. Please request a new code." });
+            break;
+        case "invalid":
+            res.status(400).json({ error: "Invalid verification code." });
+            break;
    }
 });
 export { router as recoverRouter };
--- a/dist/routes/signup.js
+++ b/dist/routes/signup.js
@ -51,61 +51,6 @@ router.post("/free", rejectDuplicateEmail, signupLimiter, async (req, res) => {
        message: "Check your email for the verification code.",
    });
 });
-/**
- * @openapi
- * /v1/signup/verify:
- *   post:
- *     tags: [Account]
- *     summary: Verify email and get API key (discontinued)
- *     deprecated: true
- *     description: |
- *       **Discontinued.** Free accounts are no longer available. Try the demo at POST /v1/demo/html or upgrade to Pro at https://docfast.dev.
- *       Rate limited to 15 attempts per 15 minutes.
- *     requestBody:
- *       required: true
- *       content:
- *         application/json:
- *           schema:
- *             type: object
- *             required: [email, code]
- *             properties:
- *               email:
- *                 type: string
- *                 format: email
- *                 description: Email address used during signup
- *                 example: user@example.com
- *               code:
- *                 type: string
- *                 description: 6-digit verification code from email
- *                 example: "123456"
- *     responses:
- *       200:
- *         description: Email verified, API key issued
- *         content:
- *           application/json:
- *             schema:
- *               type: object
- *               properties:
- *                 status:
- *                   type: string
- *                   example: verified
- *                 message:
- *                   type: string
- *                 apiKey:
- *                   type: string
- *                   description: The provisioned API key
- *                 tier:
- *                   type: string
- *                   example: free
- *       400:
- *         description: Missing fields or invalid verification code
- *       409:
- *         description: Email already verified
- *       410:
- *         description: Verification code expired
- *       429:
- *         description: Too many failed attempts
- */
 // Step 2: Verify code — creates API key
 router.post("/verify", verifyLimiter, async (req, res) => {
    const { email, code } = req.body || {};
--- a/dist/routes/templates.js
+++ b/dist/routes/templates.js
@ -2,8 +2,9 @@ import { Router } from "express";
 import { renderPdf } from "../services/browser.js";
 import logger from "../services/logger.js";
 import { templates, renderTemplate } from "../services/templates.js";
-import { sanitizeFilename } from "../utils/sanitize.js";
-import { validatePdfOptions } from "../utils/pdf-options.js";
+function sanitizeFilename(name) {
+    return name.replace(/["\r\n\x00-\x1f]/g, "_").substring(0, 200);
+}
 export const templatesRouter = Router();
 /**
 * @openapi
@ -147,20 +148,11 @@ templatesRouter.post("/:id/render", async (req, res) => {
            });
            return;
        }
-        // Validate PDF options from underscore-prefixed fields (BUG-103)
-        const pdfOpts = {};
-        if (data._format !== undefined)
-            pdfOpts.format = data._format;
-        if (data._margin !== undefined)
-            pdfOpts.margin = data._margin;
-        const validation = validatePdfOptions(pdfOpts);
-        if (!validation.valid) {
-            res.status(400).json({ error: validation.error });
-            return;
-        }
-        const sanitizedPdf = { format: "A4", ...validation.sanitized };
        const html = renderTemplate(id, data);
-        const { pdf, durationMs } = await renderPdf(html, sanitizedPdf);
+        const pdf = await renderPdf(html, {
+            format: data._format || "A4",
+            margin: data._margin,
+        });
        const filename = sanitizeFilename(data._filename || `${id}.pdf`);
        res.setHeader("Content-Type", "application/pdf");
        res.setHeader("Content-Disposition", `inline; filename="${filename}"`);
@ -168,6 +160,6 @@ templatesRouter.post("/:id/render", async (req, res) => {
    }
    catch (err) {
        logger.error({ err }, "Template render error");
-        res.status(500).json({ error: "Template rendering failed" });
+        res.status(500).json({ error: "Template rendering failed", detail: err.message });
    }
 });
--- a/dist/services/browser.js
+++ b/dist/services/browser.js
@ -27,14 +27,11 @@ export function getPoolStats() {
        })),
    };
 }
-export async function recyclePage(page) {
+async function recyclePage(page) {
    try {
        const client = await page.createCDPSession();
        await client.send("Network.clearBrowserCache").catch(() => { });
        await client.detach().catch(() => { });
-        // Clean up request interception (set by renderUrlPdf for SSRF protection)
-        page.removeAllListeners("request");
-        await page.setRequestInterception(false).catch(() => { });
        const cookies = await page.cookies();
        if (cookies.length > 0) {
            await page.deleteCookie(...cookies);
@ -196,52 +193,28 @@ export async function closeBrowser() {
    }
    instances.length = 0;
 }
-/** Build a Puppeteer-compatible PDFOptions object from user-supplied render options. */
-export function buildPdfOptions(options) {
-    const result = {
-        format: options.format || "A4",
-        landscape: options.landscape || false,
-        printBackground: options.printBackground !== false,
-        margin: options.margin || { top: "0", right: "0", bottom: "0", left: "0" },
-    };
-    if (options.headerTemplate !== undefined)
-        result.headerTemplate = options.headerTemplate;
-    if (options.footerTemplate !== undefined)
-        result.footerTemplate = options.footerTemplate;
-    if (options.displayHeaderFooter !== undefined)
-        result.displayHeaderFooter = options.displayHeaderFooter;
-    if (options.scale !== undefined)
-        result.scale = options.scale;
-    if (options.pageRanges)
-        result.pageRanges = options.pageRanges;
-    if (options.preferCSSPageSize !== undefined)
-        result.preferCSSPageSize = options.preferCSSPageSize;
-    if (options.width)
-        result.width = options.width;
-    if (options.height)
-        result.height = options.height;
-    return result;
-}
 export async function renderPdf(html, options = {}) {
    const { page, instance } = await acquirePage();
    try {
        await page.setJavaScriptEnabled(false);
-        const startTime = Date.now();
-        let timeoutId;
        const result = await Promise.race([
            (async () => {
                await page.setContent(html, { waitUntil: "domcontentloaded", timeout: 15_000 });
                await page.addStyleTag({ content: "* { margin: 0; padding: 0; } body { margin: 0; }" });
-                const pdf = await page.pdf(buildPdfOptions(options));
+                const pdf = await page.pdf({
+                    format: options.format || "A4",
+                    landscape: options.landscape || false,
+                    printBackground: options.printBackground !== false,
+                    margin: options.margin || { top: "0", right: "0", bottom: "0", left: "0" },
+                    headerTemplate: options.headerTemplate,
+                    footerTemplate: options.footerTemplate,
+                    displayHeaderFooter: options.displayHeaderFooter || false,
+                });
                return Buffer.from(pdf);
            })(),
-            new Promise((_, reject) => {
-                timeoutId = setTimeout(() => reject(new Error("PDF_TIMEOUT")), 30_000);
-            }),
-        ]).finally(() => clearTimeout(timeoutId));
-        const durationMs = Date.now() - startTime;
-        logger.info(`PDF rendered in ${durationMs}ms (html, ${result.length} bytes)`);
-        return { pdf: result, durationMs };
+            new Promise((_, reject) => setTimeout(() => reject(new Error("PDF_TIMEOUT")), 30_000)),
+        ]);
+        return result;
    }
    finally {
        releasePage(page, instance);
@ -286,24 +259,23 @@ export async function renderUrlPdf(url, options = {}) {
                });
            }
        }
-        const startTime = Date.now();
-        let timeoutId;
        const result = await Promise.race([
            (async () => {
                await page.goto(url, {
                    waitUntil: options.waitUntil || "domcontentloaded",
                    timeout: 30_000,
                });
-                const pdf = await page.pdf(buildPdfOptions(options));
+                const pdf = await page.pdf({
+                    format: options.format || "A4",
+                    landscape: options.landscape || false,
+                    printBackground: options.printBackground !== false,
+                    margin: options.margin || { top: "0", right: "0", bottom: "0", left: "0" },
+                });
                return Buffer.from(pdf);
            })(),
-            new Promise((_, reject) => {
-                timeoutId = setTimeout(() => reject(new Error("PDF_TIMEOUT")), 30_000);
-            }),
-        ]).finally(() => clearTimeout(timeoutId));
-        const durationMs = Date.now() - startTime;
-        logger.info(`PDF rendered in ${durationMs}ms (url, ${result.length} bytes)`);
-        return { pdf: result, durationMs };
+            new Promise((_, reject) => setTimeout(() => reject(new Error("PDF_TIMEOUT")), 30_000)),
+        ]);
+        return result;
    }
    finally {
        releasePage(page, instance);
--- a/dist/services/db.js
+++ b/dist/services/db.js
@ -1,7 +1,20 @@
 import pg from "pg";
 import logger from "./logger.js";
-import { isTransientError, errorMessage, errorCode } from "../utils/errors.js";
 const { Pool } = pg;
+// Transient error codes from PgBouncer / PostgreSQL that warrant retry
+const TRANSIENT_ERRORS = new Set([
+    "ECONNRESET",
+    "ECONNREFUSED",
+    "EPIPE",
+    "ETIMEDOUT",
+    "CONNECTION_LOST",
+    "57P01", // admin_shutdown
+    "57P02", // crash_shutdown
+    "57P03", // cannot_connect_now
+    "08006", // connection_failure
+    "08003", // connection_does_not_exist
+    "08001", // sqlclient_unable_to_establish_sqlconnection
+]);
 const pool = new Pool({
    host: process.env.DATABASE_HOST || "172.17.0.1",
    port: parseInt(process.env.DATABASE_PORT || "5432", 10),
@ -20,7 +33,28 @@ const pool = new Pool({
 pool.on("error", (err, client) => {
    logger.error({ err }, "Unexpected error on idle PostgreSQL client — evicted from pool");
 });
-export { isTransientError } from "../utils/errors.js";
+/**
+ * Determine if an error is transient (PgBouncer failover, network blip)
+ */
+export function isTransientError(err) {
+    if (!err)
+        return false;
+    const code = err.code || "";
+    const msg = (err.message || "").toLowerCase();
+    if (TRANSIENT_ERRORS.has(code))
+        return true;
+    if (msg.includes("no available server"))
+        return true; // PgBouncer specific
+    if (msg.includes("connection terminated"))
+        return true;
+    if (msg.includes("connection refused"))
+        return true;
+    if (msg.includes("server closed the connection"))
+        return true;
+    if (msg.includes("timeout expired"))
+        return true;
+    return false;
+}
 /**
 * Execute a query with automatic retry on transient errors.
 *
@ -51,7 +85,7 @@ export async function queryWithRetry(queryText, params, maxRetries = 3) {
                throw err;
            }
            const delayMs = Math.min(1000 * Math.pow(2, attempt), 5000); // 1s, 2s, 4s (capped at 5s)
-            logger.warn({ err: errorMessage(err), code: errorCode(err), attempt: attempt + 1, maxRetries, delayMs }, "Transient DB error, destroying bad connection and retrying...");
+            logger.warn({ err: err.message, code: err.code, attempt: attempt + 1, maxRetries, delayMs }, "Transient DB error, destroying bad connection and retrying...");
            await new Promise(resolve => setTimeout(resolve, delayMs));
        }
    }
@ -81,7 +115,7 @@ export async function connectWithRetry(maxRetries = 3) {
                    throw validationErr;
                }
                const delayMs = Math.min(1000 * Math.pow(2, attempt), 5000);
-                logger.warn({ err: errorMessage(validationErr), code: errorCode(validationErr), attempt: attempt + 1 }, "Connection validation failed, destroying and retrying...");
+                logger.warn({ err: validationErr.message, code: validationErr.code, attempt: attempt + 1 }, "Connection validation failed, destroying and retrying...");
                await new Promise(resolve => setTimeout(resolve, delayMs));
                continue;
            }
@ -93,7 +127,7 @@ export async function connectWithRetry(maxRetries = 3) {
                throw err;
            }
            const delayMs = Math.min(1000 * Math.pow(2, attempt), 5000);
-            logger.warn({ err: errorMessage(err), code: errorCode(err), attempt: attempt + 1, maxRetries, delayMs }, "Transient DB connect error, retrying...");
+            logger.warn({ err: err.message, code: err.code, attempt: attempt + 1, maxRetries, delayMs }, "Transient DB connect error, retrying...");
            await new Promise(resolve => setTimeout(resolve, delayMs));
        }
    }
@ -112,8 +146,6 @@ export async function initDatabase() {
      );
      CREATE INDEX IF NOT EXISTS idx_api_keys_email ON api_keys(email);
      CREATE INDEX IF NOT EXISTS idx_api_keys_stripe ON api_keys(stripe_customer_id);
-      CREATE UNIQUE INDEX IF NOT EXISTS idx_api_keys_stripe_unique
-        ON api_keys(stripe_customer_id) WHERE stripe_customer_id IS NOT NULL;

      CREATE TABLE IF NOT EXISTS verifications (
        id SERIAL PRIMARY KEY,
@ -146,26 +178,5 @@ export async function initDatabase() {
        client.release();
    }
 }
-/**
- * Clean up stale database entries:
- * - Expired pending verifications
- * - Unverified free-tier API keys (never completed verification)
- * - Orphaned usage rows (key no longer exists)
- */
-export async function cleanupStaleData() {
-    const results = { expiredVerifications: 0, orphanedUsage: 0 };
-    // 1. Delete expired pending verifications
-    const pv = await queryWithRetry("DELETE FROM pending_verifications WHERE expires_at < NOW() RETURNING email");
-    results.expiredVerifications = pv.rowCount || 0;
-    // 2. Delete orphaned usage rows (key no longer exists in api_keys)
-    const ou = await queryWithRetry(`
-    DELETE FROM usage
-    WHERE key NOT IN (SELECT key FROM api_keys)
-    RETURNING key
-  `);
-    results.orphanedUsage = ou.rowCount || 0;
-    logger.info({ ...results }, `Database cleanup complete: ${results.expiredVerifications} expired verifications, ${results.orphanedUsage} orphaned usage rows removed`);
-    return results;
-}
 export { pool };
 export default pool;
--- a/dist/services/email.js
+++ b/dist/services/email.js
@ -14,8 +14,10 @@ const transportConfig = {
    greetingTimeout: 5000,
    socketTimeout: 10000,
    tls: { rejectUnauthorized: false },
-    ...(smtpUser && smtpPass ? { auth: { user: smtpUser, pass: smtpPass } } : {}),
 };
+if (smtpUser && smtpPass) {
+    transportConfig.auth = { user: smtpUser, pass: smtpPass };
+}
 const transporter = nodemailer.createTransport(transportConfig);
 export async function sendVerificationEmail(email, code) {
    try {
@ -23,34 +25,7 @@ export async function sendVerificationEmail(email, code) {
            from: smtpFrom,
            to: email,
            subject: "DocFast - Verify your email",
-            text: `Your DocFast verification code is: ${code}\n\nThis code expires in 15 minutes.\n\nIf you didn't request this, ignore this email.\n\n---\nDocFast — HTML to PDF API\nhttps://docfast.dev`,
-            html: `<!DOCTYPE html>
-<html><body style="margin:0;padding:0;background:#0a0a0a;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;">
-<table width="100%" cellpadding="0" cellspacing="0" style="background:#0a0a0a;padding:40px 0;">
-<tr><td align="center">
-<table width="480" cellpadding="0" cellspacing="0" style="background:#111;border-radius:12px;padding:40px;">
-<tr><td align="center" style="padding-bottom:24px;">
-  <h1 style="margin:0;font-size:28px;font-weight:700;color:#44ff99;letter-spacing:-0.5px;">DocFast</h1>
-</td></tr>
-<tr><td align="center" style="padding-bottom:8px;">
-  <p style="margin:0;font-size:16px;color:#e8e8e8;">Your verification code</p>
-</td></tr>
-<tr><td align="center" style="padding-bottom:24px;">
-  <div style="display:inline-block;background:#0a0a0a;border:2px solid #44ff99;border-radius:8px;padding:16px 32px;font-family:monospace;font-size:32px;letter-spacing:8px;color:#44ff99;font-weight:700;">${code}</div>
-</td></tr>
-<tr><td align="center" style="padding-bottom:8px;">
-  <p style="margin:0;font-size:14px;color:#999;">This code expires in 15 minutes.</p>
-</td></tr>
-<tr><td align="center" style="padding-bottom:24px;">
-  <p style="margin:0;font-size:14px;color:#999;">If you didn't request this, ignore this email.</p>
-</td></tr>
-<tr><td align="center" style="border-top:1px solid #222;padding-top:20px;">
-  <p style="margin:0;font-size:12px;color:#666;">DocFast — HTML to PDF API<br><a href="https://docfast.dev" style="color:#44ff99;text-decoration:none;">docfast.dev</a></p>
-</td></tr>
-</table>
-</td></tr>
-</table>
-</body></html>`,
+            text: `Your DocFast verification code is: ${code}\n\nThis code expires in 15 minutes.\n\nIf you didn't request this, ignore this email.`,
        });
        logger.info({ email, messageId: info.messageId }, "Verification email sent");
        return true;
--- a/dist/services/keys.js
+++ b/dist/services/keys.js
@ -3,20 +3,6 @@ import logger from "./logger.js";
 import { queryWithRetry } from "./db.js";
 // In-memory cache for fast lookups, synced with PostgreSQL
 let keysCache = [];
-/** Look up a key row in the DB by a given column. Returns null if not found. */
-export async function findKeyInCacheOrDb(column, value) {
-    const result = await queryWithRetry(`SELECT key, tier, email, created_at, stripe_customer_id FROM api_keys WHERE ${column} = $1 LIMIT 1`, [value]);
-    if (result.rows.length === 0)
-        return null;
-    const r = result.rows[0];
-    return {
-        key: r.key,
-        tier: r.tier,
-        email: r.email,
-        createdAt: r.created_at instanceof Date ? r.created_at.toISOString() : r.created_at,
-        stripeCustomerId: r.stripe_customer_id || undefined,
-    };
-}
 export async function loadKeys() {
    try {
        const result = await queryWithRetry("SELECT key, tier, email, created_at, stripe_customer_id FROM api_keys");
@ -74,37 +60,21 @@ export async function createFreeKey(email) {
    return entry;
 }
 export async function createProKey(email, stripeCustomerId) {
-    // Check in-memory cache first (fast path)
    const existing = keysCache.find((k) => k.stripeCustomerId === stripeCustomerId);
    if (existing) {
        existing.tier = "pro";
        await queryWithRetry("UPDATE api_keys SET tier = 'pro' WHERE key = $1", [existing.key]);
        return existing;
    }
-    // UPSERT: handles duplicate webhooks across pods via DB unique index
-    const newKey = generateKey("df_pro");
-    const now = new Date().toISOString();
-    const result = await queryWithRetry(`INSERT INTO api_keys (key, tier, email, created_at, stripe_customer_id)
-     VALUES ($1, $2, $3, $4, $5)
-     ON CONFLICT (stripe_customer_id) WHERE stripe_customer_id IS NOT NULL
-     DO UPDATE SET tier = 'pro'
-     RETURNING key, tier, email, created_at, stripe_customer_id`, [newKey, "pro", email, now, stripeCustomerId]);
-    const row = result.rows[0];
    const entry = {
-        key: row.key,
-        tier: row.tier,
-        email: row.email,
-        createdAt: row.created_at instanceof Date ? row.created_at.toISOString() : row.created_at,
-        stripeCustomerId: row.stripe_customer_id || undefined,
+        key: generateKey("df_pro"),
+        tier: "pro",
+        email,
+        createdAt: new Date().toISOString(),
+        stripeCustomerId,
    };
-    // Refresh in-memory cache
-    const cacheIdx = keysCache.findIndex((k) => k.stripeCustomerId === stripeCustomerId);
-    if (cacheIdx >= 0) {
-        keysCache[cacheIdx] = entry;
-    }
-    else {
-        keysCache.push(entry);
-    }
+    await queryWithRetry("INSERT INTO api_keys (key, tier, email, created_at, stripe_customer_id) VALUES ($1, $2, $3, $4, $5)", [entry.key, entry.tier, entry.email, entry.createdAt, entry.stripeCustomerId]);
+    keysCache.push(entry);
    return entry;
 }
 export async function downgradeByCustomer(stripeCustomerId) {
@ -114,62 +84,24 @@ export async function downgradeByCustomer(stripeCustomerId) {
        await queryWithRetry("UPDATE api_keys SET tier = 'free' WHERE stripe_customer_id = $1", [stripeCustomerId]);
        return true;
    }
-    // DB fallback: key may exist on another pod's cache or after a restart
-    logger.info({ stripeCustomerId }, "downgradeByCustomer: cache miss, falling back to DB");
-    const dbKey = await findKeyInCacheOrDb("stripe_customer_id", stripeCustomerId);
-    if (!dbKey) {
-        logger.warn({ stripeCustomerId }, "downgradeByCustomer: customer not found in cache or DB");
-        return false;
-    }
-    await queryWithRetry("UPDATE api_keys SET tier = 'free' WHERE stripe_customer_id = $1", [stripeCustomerId]);
-    dbKey.tier = "free";
-    keysCache.push(dbKey);
-    logger.info({ stripeCustomerId, key: dbKey.key }, "downgradeByCustomer: downgraded via DB fallback");
-    return true;
-}
-export async function findKeyByCustomerId(stripeCustomerId) {
-    return findKeyInCacheOrDb("stripe_customer_id", stripeCustomerId);
+    return false;
 }
 export function getAllKeys() {
    return [...keysCache];
 }
 export async function updateKeyEmail(apiKey, newEmail) {
    const entry = keysCache.find((k) => k.key === apiKey);
-    if (entry) {
-        entry.email = newEmail;
-        await queryWithRetry("UPDATE api_keys SET email = $1 WHERE key = $2", [newEmail, apiKey]);
-        return true;
-    }
-    // DB fallback: key may exist on another pod's cache or after a restart
-    logger.info({ apiKey: apiKey.slice(0, 10) + "..." }, "updateKeyEmail: cache miss, falling back to DB");
-    const dbKey = await findKeyInCacheOrDb("key", apiKey);
-    if (!dbKey) {
-        logger.warn({ apiKey: apiKey.slice(0, 10) + "..." }, "updateKeyEmail: key not found in cache or DB");
+    if (!entry)
        return false;
-    }
+    entry.email = newEmail;
    await queryWithRetry("UPDATE api_keys SET email = $1 WHERE key = $2", [newEmail, apiKey]);
-    dbKey.email = newEmail;
-    keysCache.push(dbKey);
-    logger.info({ apiKey: apiKey.slice(0, 10) + "..." }, "updateKeyEmail: updated via DB fallback");
    return true;
 }
 export async function updateEmailByCustomer(stripeCustomerId, newEmail) {
    const entry = keysCache.find(k => k.stripeCustomerId === stripeCustomerId);
-    if (entry) {
-        entry.email = newEmail;
-        await queryWithRetry("UPDATE api_keys SET email = $1 WHERE stripe_customer_id = $2", [newEmail, stripeCustomerId]);
-        return true;
-    }
-    // DB fallback: key may exist on another pod's cache or after a restart
-    logger.info({ stripeCustomerId }, "updateEmailByCustomer: cache miss, falling back to DB");
-    const dbKey = await findKeyInCacheOrDb("stripe_customer_id", stripeCustomerId);
-    if (!dbKey) {
-        logger.warn({ stripeCustomerId }, "updateEmailByCustomer: customer not found in cache or DB");
+    if (!entry)
        return false;
-    }
+    entry.email = newEmail;
    await queryWithRetry("UPDATE api_keys SET email = $1 WHERE stripe_customer_id = $2", [newEmail, stripeCustomerId]);
-    dbKey.email = newEmail;
-    keysCache.push(dbKey);
-    logger.info({ stripeCustomerId, key: dbKey.key }, "updateEmailByCustomer: updated via DB fallback");
    return true;
 }
--- a/dist/services/templates.js
+++ b/dist/services/templates.js
@ -35,8 +35,7 @@ function esc(s) {
        .replace(/&/g, "&amp;")
        .replace(/</g, "&lt;")
        .replace(/>/g, "&gt;")
-        .replace(/"/g, "&quot;")
-        .replace(/'/g, "&#39;");
+        .replace(/"/g, "&quot;");
 }
 function renderInvoice(d) {
    const cur = esc(d.currency || "€");
--- a/dist/services/verification.js
+++ b/dist/services/verification.js
@ -1,7 +1,64 @@
-import { randomInt, timingSafeEqual } from "crypto";
+import { randomBytes, randomInt, timingSafeEqual } from "crypto";
+import logger from "./logger.js";
 import { queryWithRetry } from "./db.js";
+const TOKEN_EXPIRY_MS = 24 * 60 * 60 * 1000;
 const CODE_EXPIRY_MS = 15 * 60 * 1000;
 const MAX_ATTEMPTS = 3;
+export async function createVerification(email, apiKey) {
+    // Check for existing unexpired, unverified
+    const existing = await queryWithRetry("SELECT * FROM verifications WHERE email = $1 AND verified_at IS NULL AND created_at > NOW() - INTERVAL '24 hours' LIMIT 1", [email]);
+    if (existing.rows.length > 0) {
+        const r = existing.rows[0];
+        return { email: r.email, token: r.token, apiKey: r.api_key, createdAt: r.created_at.toISOString(), verifiedAt: null };
+    }
+    // Remove old unverified
+    await queryWithRetry("DELETE FROM verifications WHERE email = $1 AND verified_at IS NULL", [email]);
+    const token = randomBytes(32).toString("hex");
+    const now = new Date().toISOString();
+    await queryWithRetry("INSERT INTO verifications (email, token, api_key, created_at) VALUES ($1, $2, $3, $4)", [email, token, apiKey, now]);
+    return { email, token, apiKey, createdAt: now, verifiedAt: null };
+}
+export function verifyToken(token) {
+    // Synchronous wrapper — we'll make it async-compatible
+    // Actually need to keep sync for the GET /verify route. Use sync query workaround or refactor.
+    // For simplicity, we'll cache verifications in memory too.
+    return verifyTokenSync(token);
+}
+// In-memory cache for verifications (loaded on startup, updated on changes)
+let verificationsCache = [];
+export async function loadVerifications() {
+    const result = await queryWithRetry("SELECT * FROM verifications");
+    verificationsCache = result.rows.map((r) => ({
+        email: r.email,
+        token: r.token,
+        apiKey: r.api_key,
+        createdAt: r.created_at instanceof Date ? r.created_at.toISOString() : r.created_at,
+        verifiedAt: r.verified_at ? (r.verified_at instanceof Date ? r.verified_at.toISOString() : r.verified_at) : null,
+    }));
+    // Cleanup expired entries every 15 minutes
+    setInterval(() => {
+        const cutoff = Date.now() - 24 * 60 * 60 * 1000;
+        const before = verificationsCache.length;
+        verificationsCache = verificationsCache.filter((v) => v.verifiedAt || new Date(v.createdAt).getTime() > cutoff);
+        const removed = before - verificationsCache.length;
+        if (removed > 0)
+            logger.info({ removed }, "Cleaned expired verification cache entries");
+    }, 15 * 60 * 1000);
+}
+function verifyTokenSync(token) {
+    const v = verificationsCache.find((v) => v.token === token);
+    if (!v)
+        return { status: "invalid" };
+    if (v.verifiedAt)
+        return { status: "already_verified", verification: v };
+    const age = Date.now() - new Date(v.createdAt).getTime();
+    if (age > TOKEN_EXPIRY_MS)
+        return { status: "expired" };
+    v.verifiedAt = new Date().toISOString();
+    // Update DB async
+    queryWithRetry("UPDATE verifications SET verified_at = $1 WHERE token = $2", [v.verifiedAt, token]).catch((err) => logger.error({ err }, "Failed to update verification"));
+    return { status: "ok", verification: v };
+}
 export async function createPendingVerification(email) {
    await queryWithRetry("DELETE FROM pending_verifications WHERE email = $1", [email]);
    const now = new Date();
@ -39,3 +96,11 @@ export async function verifyCode(email, code) {
    await queryWithRetry("DELETE FROM pending_verifications WHERE email = $1", [cleanEmail]);
    return { status: "ok" };
 }
+export async function isEmailVerified(email) {
+    const result = await queryWithRetry("SELECT 1 FROM verifications WHERE email = $1 AND verified_at IS NOT NULL LIMIT 1", [email]);
+    return result.rows.length > 0;
+}
+export async function getVerifiedApiKey(email) {
+    const result = await queryWithRetry("SELECT api_key FROM verifications WHERE email = $1 AND verified_at IS NOT NULL LIMIT 1", [email]);
+    return result.rows[0]?.api_key ?? null;
+}
--- a/package-lock.json
+++ b/package-lock.json
--- a/package.json
+++ b/package.json
@ -1,10 +1,10 @@
 {
  "name": "docfast-api",
-  "version": "0.5.2",
+  "version": "0.4.2",
  "description": "Markdown/HTML to PDF API with built-in invoice templates",
  "main": "dist/index.js",
  "scripts": {
-    "build:pages": "node scripts/build-html.cjs",
+    "build:pages": "node scripts/build-pages.js && npx terser public/app.js -o public/app.min.js --compress --mangle",
    "build": "node scripts/generate-openapi.mjs && npm run build:pages && tsc",
    "start": "node dist/index.js",
    "dev": "tsx src/index.ts",
@ -13,36 +13,30 @@
  },
  "dependencies": {
    "compression": "^1.8.1",
-    "express": "^5.1.0",
-    "express-rate-limit": "^8.3.1",
-    "helmet": "^8.1.0",
-    "marked": "^17.0.5",
-    "nanoid": "^5.1.6",
-    "nodemailer": "^8.0.2",
-    "pg": "^8.20.0",
+    "express": "^4.21.0",
+    "express-rate-limit": "^7.5.0",
+    "helmet": "^8.0.0",
+    "marked": "^15.0.0",
+    "nanoid": "^5.0.0",
+    "nodemailer": "^8.0.1",
+    "pg": "^8.13.0",
    "pino": "^10.3.1",
-    "puppeteer": "^24.39.1",
-    "stripe": "^20.4.1",
+    "puppeteer": "^24.0.0",
+    "stripe": "^20.3.1",
    "swagger-jsdoc": "^6.2.8",
-    "swagger-ui-dist": "^5.32.0"
+    "swagger-ui-dist": "^5.31.0"
  },
  "devDependencies": {
    "@types/compression": "^1.8.1",
-    "@types/express": "^5.0.6",
-    "@types/node": "^25.5.0",
-    "@types/nodemailer": "^7.0.11",
-    "@types/pg": "^8.20.0",
-    "@types/supertest": "^7.2.0",
+    "@types/express": "^5.0.0",
+    "@types/node": "^22.0.0",
+    "@types/nodemailer": "^7.0.9",
+    "@types/pg": "^8.11.0",
    "@types/swagger-jsdoc": "^6.0.4",
-    "@vitest/coverage-v8": "^4.1.0",
-    "supertest": "^7.2.2",
    "terser": "^5.46.0",
-    "tsx": "^4.21.0",
-    "typescript": "^5.9.3",
-    "vitest": "^4.1.0"
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0"
  },
-  "type": "module",
-  "overrides": {
-    "yauzl": "3.2.1"
-  }
+  "type": "module"
 }
--- a/public/app.js
+++ b/public/app.js
--- a/public/copy-helper.js
+++ b/public/copy-helper.js
@ -1,38 +0,0 @@
-// Copy helper for server-rendered pages
-// Attaches click handlers to all [data-copy] elements (CSP-compliant)
-
-document.addEventListener('DOMContentLoaded', function() {
-  // Handle buttons with data-copy attribute
-  document.querySelectorAll('button[data-copy]').forEach(function(btn) {
-    btn.addEventListener('click', function() {
-      const textToCopy = this.getAttribute('data-copy');
-      const originalText = this.textContent;
-      
-      navigator.clipboard.writeText(textToCopy).then(function() {
-        btn.textContent = 'Copied!';
-        setTimeout(function() {
-          btn.textContent = originalText;
-        }, 1500);
-      }).catch(function(err) {
-        console.error('Copy failed:', err);
-      });
-    });
-  });
-  
-  // Handle clickable divs with data-copy attribute (for key-box)
-  document.querySelectorAll('div[data-copy]').forEach(function(div) {
-    div.style.cursor = 'pointer';
-    div.addEventListener('click', function() {
-      const textToCopy = this.getAttribute('data-copy');
-      
-      navigator.clipboard.writeText(textToCopy).then(function() {
-        div.style.borderColor = '#5eead4';
-        setTimeout(function() {
-          div.style.borderColor = '#34d399';
-        }, 1500);
-      }).catch(function(err) {
-        console.error('Copy failed:', err);
-      });
-    });
-  });
-});
--- a/public/docs.html
+++ b/public/docs.html
@ -120,12 +120,6 @@
  </main>
  <footer style="padding:24px 0;border-top:1px solid #1e2433;text-align:center;">
    <div style="max-width:1200px;margin:0 auto;padding:0 24px;display:flex;justify-content:center;gap:24px;flex-wrap:wrap;">
-      <a href="/" style="color:#7a8194;font-size:0.85rem;text-decoration:none;font-family:'Inter',system-ui,sans-serif;">Home</a>
-      <a href="/docs" style="color:#7a8194;font-size:0.85rem;text-decoration:none;font-family:'Inter',system-ui,sans-serif;">Docs</a>
-      <a href="/examples" style="color:#7a8194;font-size:0.85rem;text-decoration:none;font-family:'Inter',system-ui,sans-serif;">Examples</a>
-      <a href="/status" style="color:#7a8194;font-size:0.85rem;text-decoration:none;font-family:'Inter',system-ui,sans-serif;">API Status</a>
-      <a href="mailto:support@docfast.dev" style="color:#7a8194;font-size:0.85rem;text-decoration:none;font-family:'Inter',system-ui,sans-serif;">Support</a>
-      <a href="/#change-email" class="open-email-change" style="color:#7a8194;font-size:0.85rem;text-decoration:none;font-family:'Inter',system-ui,sans-serif;">Change Email</a>
      <a href="/impressum" style="color:#7a8194;font-size:0.85rem;text-decoration:none;font-family:'Inter',system-ui,sans-serif;">Impressum</a>
      <a href="/privacy" style="color:#7a8194;font-size:0.85rem;text-decoration:none;font-family:'Inter',system-ui,sans-serif;">Privacy Policy</a>
      <a href="/terms" style="color:#7a8194;font-size:0.85rem;text-decoration:none;font-family:'Inter',system-ui,sans-serif;">Terms of Service</a>
--- a/public/examples.html
+++ b/public/examples.html
@ -4,7 +4,7 @@
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>Code Examples — DocFast HTML to PDF API</title>
-<meta name="description" content="Practical HTML to PDF API examples — generate PDFs from HTML, Markdown, and URLs. Code examples for Node.js, Python, Go, PHP, and cURL.">
+<meta name="description" content="Practical html to pdf api examples — generate pdf from html code, invoice pdf api, markdown to pdf, Node.js and Python integrations.">
 <meta property="og:title" content="Code Examples — DocFast HTML to PDF API">
 <meta property="og:description" content="Practical code examples for generating PDFs from HTML, Markdown, and more with the DocFast API.">
 <meta property="og:url" content="https://docfast.dev/examples">
@ -111,11 +111,8 @@ footer .container { display: flex; justify-content: space-between; align-items:
      <a href="#markdown">Markdown</a>
      <a href="#charts">Charts</a>
      <a href="#receipt">Receipt</a>
-      <a href="#url-to-pdf">URL to PDF</a>
      <a href="#nodejs">Node.js</a>
      <a href="#python">Python</a>
-      <a href="#go">Go</a>
-      <a href="#php">PHP</a>
    </nav>

    <!-- Invoice -->
@ -166,7 +163,7 @@ footer .container { display: flex; justify-content: space-between; align-items:

      <div class="code-block">
        <span class="code-label">curl</span>
-        <pre><code>curl -X POST https://docfast.dev/v1/convert/html \
+        <pre><code>curl -X POST https://api.docfast.dev/v1/convert/html \
  -H <span class="str">"Authorization: Bearer YOUR_API_KEY"</span> \
  -H <span class="str">"Content-Type: application/json"</span> \
  -d <span class="str">'{"html": "&lt;html&gt;...your invoice HTML...&lt;/html&gt;"}'</span> \
@ -181,7 +178,7 @@ footer .container { display: flex; justify-content: space-between; align-items:

      <div class="code-block">
        <span class="code-label">curl</span>
-        <pre><code>curl -X POST https://docfast.dev/v1/convert/markdown \
+        <pre><code>curl -X POST https://api.docfast.dev/v1/convert/markdown \
  -H <span class="str">"Authorization: Bearer YOUR_API_KEY"</span> \
  -H <span class="str">"Content-Type: application/json"</span> \
  -d '{
@ -220,7 +217,7 @@ footer .container { display: flex; justify-content: space-between; align-items:

      <div class="code-block">
        <span class="code-label">curl</span>
-        <pre><code>curl -X POST https://docfast.dev/v1/convert/html \
+        <pre><code>curl -X POST https://api.docfast.dev/v1/convert/html \
  -H <span class="str">"Authorization: Bearer YOUR_API_KEY"</span> \
  -H <span class="str">"Content-Type: application/json"</span> \
  -d @report.json \
@ -271,36 +268,6 @@ footer .container { display: flex; justify-content: space-between; align-items:
      </div>
    </section>

-    <!-- URL to PDF -->
-    <section id="url-to-pdf" class="example-section">
-      <h2>URL to PDF</h2>
-      <p>Capture a live webpage and convert it to PDF. Send a URL to the <code>/v1/convert/url</code> endpoint and get a rendered PDF back. JavaScript is disabled for security (SSRF protection), and private/internal URLs are blocked.</p>
-
-      <div class="code-block">
-        <span class="code-label">curl — basic</span>
-        <pre><code>curl -X POST https://docfast.dev/v1/convert/url \
-  -H <span class="str">"Authorization: Bearer YOUR_API_KEY"</span> \
-  -H <span class="str">"Content-Type: application/json"</span> \
-  -d <span class="str">'{"url": "https://example.com"}'</span> \
-  --output page.pdf</code></pre>
-      </div>
-
-      <div class="code-block">
-        <span class="code-label">curl — with options</span>
-        <pre><code>curl -X POST https://docfast.dev/v1/convert/url \
-  -H <span class="str">"Authorization: Bearer YOUR_API_KEY"</span> \
-  -H <span class="str">"Content-Type: application/json"</span> \
-  -d <span class="str">'{
-    "url": "https://example.com",
-    "format": "A4",
-    "margin": { "top": "20mm", "bottom": "20mm" },
-    "scale": 0.8,
-    "printBackground": true
-  }'</span> \
-  --output page.pdf</code></pre>
-      </div>
-    </section>
-
    <!-- Node.js -->
    <section id="nodejs" class="example-section">
      <h2>Node.js Integration</h2>
@ -313,7 +280,7 @@ footer .container { display: flex; justify-content: space-between; align-items:
  &lt;p&gt;Generated at ${</span><span class="kw">new</span> <span class="fn">Date</span>().<span class="fn">toISOString</span>()<span class="str">}&lt;/p&gt;
 `</span>;

-<span class="kw">const</span> res = <span class="kw">await</span> <span class="fn">fetch</span>(<span class="str">"https://docfast.dev/v1/convert/html"</span>, {
+<span class="kw">const</span> res = <span class="kw">await</span> <span class="fn">fetch</span>(<span class="str">"https://api.docfast.dev/v1/convert/html"</span>, {
  method: <span class="str">"POST"</span>,
  headers: {
    <span class="str">"Authorization"</span>: <span class="str">`Bearer ${process.env.DOCFAST_API_KEY}`</span>,
@ -354,7 +321,7 @@ html = <span class="str">"""
 """</span>

 response = requests.<span class="fn">post</span>(
-    <span class="str">"https://docfast.dev/v1/convert/html"</span>,
+    <span class="str">"https://api.docfast.dev/v1/convert/html"</span>,
    headers={
        <span class="str">"Authorization"</span>: <span class="str">f"Bearer {</span>os.environ[<span class="str">'DOCFAST_API_KEY'</span>]<span class="str">}"</span>,
        <span class="str">"Content-Type"</span>: <span class="str">"application/json"</span>,
@ -371,67 +338,6 @@ response.<span class="fn">raise_for_status</span>()
      </div>
    </section>

-    <!-- Go -->
-    <section id="go" class="example-section">
-      <h2>Go Integration</h2>
-      <p><strong>SDK coming soon.</strong> In the meantime, use the HTTP example below — it works with any HTTP client.</p>
-      <div class="code-block">
-        <span class="code-label">Go — generate-pdf.go</span>
-        <pre><code><span class="kw">package</span> main
-
-<span class="kw">import</span> (
-    <span class="str">"bytes"</span>
-    <span class="str">"encoding/json"</span>
-    <span class="str">"io"</span>
-    <span class="str">"net/http"</span>
-    <span class="str">"os"</span>
-)
-
-<span class="kw">func</span> <span class="fn">main</span>() {
-    body, _ := json.<span class="fn">Marshal</span>(<span class="kw">map</span>[<span class="kw">string</span>]<span class="kw">string</span>{
-        <span class="str">"html"</span>: <span class="str">"&lt;h1&gt;Hello&lt;/h1&gt;&lt;p&gt;Generated with DocFast&lt;/p&gt;"</span>,
-    })
-
-    req, _ := http.<span class="fn">NewRequest</span>(<span class="str">"POST"</span>, <span class="str">"https://docfast.dev/v1/convert/html"</span>, bytes.<span class="fn">NewReader</span>(body))
-    req.Header.<span class="fn">Set</span>(<span class="str">"Authorization"</span>, <span class="str">"Bearer "</span>+os.<span class="fn">Getenv</span>(<span class="str">"DOCFAST_API_KEY"</span>))
-    req.Header.<span class="fn">Set</span>(<span class="str">"Content-Type"</span>, <span class="str">"application/json"</span>)
-
-    resp, err := http.DefaultClient.<span class="fn">Do</span>(req)
-    <span class="kw">if</span> err != <span class="kw">nil</span> { <span class="fn">panic</span>(err) }
-    <span class="kw">defer</span> resp.Body.<span class="fn">Close</span>()
-
-    pdf, _ := io.<span class="fn">ReadAll</span>(resp.Body)
-    os.<span class="fn">WriteFile</span>(<span class="str">"output.pdf"</span>, pdf, <span class="num">0644</span>)
-}</code></pre>
-      </div>
-    </section>
-
-    <!-- PHP -->
-    <section id="php" class="example-section">
-      <h2>PHP Integration</h2>
-      <p><strong>SDK coming soon.</strong> In the meantime, use the HTTP example below — it works with any HTTP client. Laravel: Use this in any controller or Artisan command.</p>
-      <div class="code-block">
-        <span class="code-label">PHP — generate-pdf.php</span>
-        <pre><code><span class="kw">&lt;?php</span>
-$html = <span class="str">'&lt;h1&gt;Hello&lt;/h1&gt;&lt;p&gt;Generated with DocFast&lt;/p&gt;'</span>;
-
-$options = [
-    <span class="str">'http'</span> =&gt; [
-        <span class="str">'method'</span>  =&gt; <span class="str">'POST'</span>,
-        <span class="str">'header'</span>  =&gt; <span class="fn">implode</span>(<span class="str">"\r\n"</span>, [
-            <span class="str">'Authorization: Bearer '</span> . <span class="fn">getenv</span>(<span class="str">'DOCFAST_API_KEY'</span>),
-            <span class="str">'Content-Type: application/json'</span>,
-        ]),
-        <span class="str">'content'</span> =&gt; <span class="fn">json_encode</span>([<span class="str">'html'</span> =&gt; $html]),
-    ],
-];
-
-$pdf = <span class="fn">file_get_contents</span>(<span class="str">'https://docfast.dev/v1/convert/html'</span>, <span class="kw">false</span>, <span class="fn">stream_context_create</span>($options));
-<span class="fn">file_put_contents</span>(<span class="str">'output.pdf'</span>, $pdf);
-<span class="kw">echo</span> <span class="str">"✓ Saved output.pdf\n"</span>;</code></pre>
-      </div>
-    </section>
-
  </div>
 </main>

@ -441,10 +347,7 @@ $pdf = <span class="fn">file_get_contents</span>(<span class="str">'https://docf
    <div class="footer-links">
      <a href="/">Home</a>
      <a href="/docs">Docs</a>
-      <a href="/examples">Examples</a>
      <a href="/status">API Status</a>
-      <a href="mailto:support@docfast.dev">Support</a>
-      <a href="/#change-email" class="open-email-change">Change Email</a>
      <a href="/impressum">Impressum</a>
      <a href="/privacy">Privacy Policy</a>
      <a href="/terms">Terms of Service</a>
--- a/public/impressum.html
+++ b/public/impressum.html
@ -108,10 +108,7 @@ footer .container { display: flex; justify-content: space-between; align-items:
    <div class="footer-links">
      <a href="/">Home</a>
      <a href="/docs">Docs</a>
-      <a href="/examples">Examples</a>
      <a href="/status">API Status</a>
-      <a href="mailto:support@docfast.dev">Support</a>
-      <a href="/#change-email" class="open-email-change">Change Email</a>
      <a href="/impressum">Impressum</a>
      <a href="/privacy">Privacy Policy</a>
      <a href="/terms">Terms of Service</a>
--- a/public/index.html
+++ b/public/index.html
@ -16,55 +16,7 @@
 <meta name="twitter:image" content="https://docfast.dev/og-image.png">
 <link rel="canonical" href="https://docfast.dev">
 <script type="application/ld+json">
-{"@context":"https://schema.org","@type":"SoftwareApplication","name":"DocFast","url":"https://docfast.dev","applicationCategory":"DeveloperApplication","operatingSystem":"Web","description":"Convert HTML and Markdown to beautiful PDFs with a simple API call. Fast, reliable, developer-friendly.","offers":[{"@type":"Offer","price":"9","priceCurrency":"EUR","name":"Pro","description":"5,000 PDFs per month for production apps","billingIncrement":"P1M"}]}
-</script>
-<script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "FAQPage",
-  "mainEntity": [
-    {
-      "@type": "Question",
-      "name": "How do I convert HTML to PDF with an API?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Send a POST request to https://docfast.dev/v1/convert/html with your HTML content in the request body and your API key in the Authorization header. DocFast returns a ready-to-use PDF in under 1 second."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Does DocFast support Markdown to PDF?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Yes, DocFast supports converting Markdown to PDF through the /v1/convert/markdown endpoint. Simply send your Markdown content and receive a beautifully formatted PDF."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Where is DocFast hosted?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "DocFast is hosted exclusively in the EU, in Hetzner's Nuremberg, Germany datacenter. All data processing happens within EU borders and is fully GDPR compliant."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "How much does DocFast cost?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "DocFast Pro costs €9 per month and includes 5,000 PDF generations, all conversion endpoints, built-in templates, and priority email support."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Do you have official SDKs?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "DocFast provides code examples for Node.js, Python, Go, PHP, and cURL. Official SDK packages are coming soon. You can use the REST API directly with any HTTP client."
-      }
-    }
-  ]
-}
+{"@context":"https://schema.org","@type":"SoftwareApplication","name":"DocFast","url":"https://docfast.dev","applicationCategory":"DeveloperApplication","operatingSystem":"Web","description":"Convert HTML and Markdown to beautiful PDFs with a simple API call. Fast, reliable, developer-friendly.","offers":[{"@type":"Offer","price":"9","priceCurrency":"EUR","name":"Pro","description":"Unlimited PDF generation for production apps","billingIncrement":"P1M"}]}
 </script>
 <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>⚡</text></svg>">
 <style>
@ -380,7 +332,6 @@ html, body {
      <a href="#features">Features</a>
      <a href="#pricing">Pricing</a>
      <a href="/docs">Docs</a>
-      <a href="/examples">Examples</a>
    </div>
  </div>
 </nav>
@ -441,7 +392,7 @@ html, body {
    <div class="eu-badge">
      <div class="eu-icon">🇪🇺</div>
      <div class="eu-content">
-        <h2>Hosted in the EU</h2>
+        <h3>Hosted in the EU</h3>
        <p>Your data never leaves the EU • GDPR Compliant • Hetzner Germany (Nuremberg)</p>
      </div>
    </div>
@ -451,7 +402,7 @@ html, body {
 <section class="features" id="features">
  <div class="container">
    <h2 class="section-title">Everything you need</h2>
-    <p class="section-sub">Code examples for Node.js, Python, Go, PHP, and cURL. Official SDKs coming soon.</p>
+    <p class="section-sub">A complete PDF generation API. No SDKs, no dependencies, no setup.</p>
    <div class="features-grid">
      <div class="feature-card">
        <div class="feature-icon" aria-hidden="true">⚡</div>
@ -583,10 +534,8 @@ html, body {
    <div class="footer-links">
      <a href="/">Home</a>
      <a href="/docs">Docs</a>
-      <a href="/examples">Examples</a>
-      <a href="/status">API Status</a>
+      <a href="/health">API Status</a>
      <a href="mailto:support@docfast.dev">Support</a>
-      <a href="/#change-email" class="open-email-change">Change Email</a>
      <a href="/impressum">Impressum</a>
      <a href="/privacy">Privacy Policy</a>
      <a href="/terms">Terms of Service</a>
@ -603,7 +552,7 @@ html, body {
      <h2>Recover your API key</h2>
      <p>Enter the email you signed up with. We'll send a verification code.</p>
      <div class="signup-error" id="recoverError"></div>
-      <input type="email" id="recoverEmailInput" aria-label="Email address for key recovery" placeholder="your.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
+      <input type="email" id="recoverEmailInput" placeholder="your.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
      <button class="btn btn-primary" style="width:100%" id="recoverBtn">Send Verification Code →</button>
      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Your key will be shown here after verification — never sent via email</p>
    </div>
@ -617,7 +566,7 @@ html, body {
      <h2>Enter verification code</h2>
      <p>We sent a 6-digit code to <strong id="recoverEmailDisplay"></strong></p>
      <div class="signup-error" id="recoverVerifyError"></div>
-      <input type="text" id="recoverCode" aria-label="6-digit verification code" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
+      <input type="text" id="recoverCode" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
      <button class="btn btn-primary" style="width:100%" id="recoverVerifyBtn">Verify →</button>
      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Code expires in 15 minutes</p>
    </div>
@ -630,7 +579,7 @@ html, body {
      </div>
      <div style="background:var(--bg);border:1px solid var(--accent);border-radius:8px;padding:14px;font-family:monospace;font-size:0.82rem;word-break:break-all;margin:16px 0;position:relative;">
        <span id="recoveredKeyText"></span>
-        <button id="copyRecoveredBtn" style="position:absolute;top:8px;right:8px;background:var(--accent);color:var(--bg);border:none;border-radius:4px;padding:4px 12px;cursor:pointer;font-size:0.8rem;">Copy</button>
+        <button onclick="copyRecoveredKey()" id="copyRecoveredBtn" style="position:absolute;top:8px;right:8px;background:var(--accent);color:var(--bg);border:none;border-radius:4px;padding:4px 12px;cursor:pointer;font-size:0.8rem;">Copy</button>
      </div>
      <p style="margin-top:20px;color:var(--muted);font-size:0.9rem;"><a href="/docs">Read the docs →</a></p>
    </div>
@ -647,8 +596,8 @@ html, body {
      <h2>Change your email</h2>
      <p>Enter your API key and new email address.</p>
      <div class="signup-error" id="emailChangeError"></div>
-      <input type="text" id="emailChangeApiKey" aria-label="Your API key" placeholder="Your API key (df_pro_...)" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:12px;font-family:monospace;" required>
-      <input type="email" id="emailChangeNewEmail" aria-label="New email address" placeholder="new.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
+      <input type="text" id="emailChangeApiKey" placeholder="Your API key (df_free_... or df_pro_...)" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:12px;font-family:monospace;" required>
+      <input type="email" id="emailChangeNewEmail" placeholder="new.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
      <button class="btn btn-primary" style="width:100%" id="emailChangeBtn">Send Verification Code →</button>
      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">A verification code will be sent to your new email</p>
    </div>
@ -662,7 +611,7 @@ html, body {
      <h2>Enter verification code</h2>
      <p>We sent a 6-digit code to <strong id="emailChangeEmailDisplay"></strong></p>
      <div class="signup-error" id="emailChangeVerifyError"></div>
-      <input type="text" id="emailChangeCode" aria-label="6-digit verification code for email change" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
+      <input type="text" id="emailChangeCode" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
      <button class="btn btn-primary" style="width:100%" id="emailChangeVerifyBtn">Verify →</button>
      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Code expires in 15 minutes</p>
    </div>
@ -675,6 +624,6 @@ html, body {
  </div>
 </div>

-<script src="/app.js"></script>
+<script src="/app.min.js"></script>
 </body>
 </html>
--- a/public/openapi.json
+++ b/public/openapi.json
--- a/public/partials/_footer.html
+++ b/public/partials/_footer.html
@ -4,10 +4,7 @@
    <div class="footer-links">
      <a href="/">Home</a>
      <a href="/docs">Docs</a>
-      <a href="/examples">Examples</a>
      <a href="/status">API Status</a>
-      <a href="mailto:support@docfast.dev">Support</a>
-      <a href="/#change-email" class="open-email-change">Change Email</a>
      <a href="/impressum">Impressum</a>
      <a href="/privacy">Privacy Policy</a>
      <a href="/terms">Terms of Service</a>
--- a/public/partials/_modals.html
+++ b/public/partials/_modals.html
@ -36,7 +36,7 @@
      </div>
      <div style="background:var(--bg);border:1px solid var(--accent);border-radius:8px;padding:14px;font-family:monospace;font-size:0.82rem;word-break:break-all;margin:16px 0;position:relative;">
        <span id="apiKeyText"></span>
-        <button id="copyBtn" aria-label="Copy API key" style="position:absolute;top:8px;right:8px;background:var(--accent);color:var(--bg);border:none;border-radius:4px;padding:4px 12px;cursor:pointer;font-size:0.8rem;">Copy</button>
+        <button onclick="copyKey()" id="copyBtn" aria-label="Copy API key" style="position:absolute;top:8px;right:8px;background:var(--accent);color:var(--bg);border:none;border-radius:4px;padding:4px 12px;cursor:pointer;font-size:0.8rem;">Copy</button>
      </div>
      <p style="margin-top:20px;color:var(--muted);font-size:0.9rem;">100 free PDFs/month • <a href="/docs">Read the docs →</a></p>
    </div>
--- a/public/privacy.html
+++ b/public/privacy.html
@ -190,10 +190,7 @@ footer .container { display: flex; justify-content: space-between; align-items:
    <div class="footer-links">
      <a href="/">Home</a>
      <a href="/docs">Docs</a>
-      <a href="/examples">Examples</a>
      <a href="/status">API Status</a>
-      <a href="mailto:support@docfast.dev">Support</a>
-      <a href="/#change-email" class="open-email-change">Change Email</a>
      <a href="/impressum">Impressum</a>
      <a href="/privacy">Privacy Policy</a>
      <a href="/terms">Terms of Service</a>
--- a/public/sitemap.xml
+++ b/public/sitemap.xml
@ -1,10 +1,11 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
-  <url><loc>https://docfast.dev/</loc><lastmod>2026-03-02</lastmod><changefreq>weekly</changefreq><priority>1.0</priority></url>
-  <url><loc>https://docfast.dev/docs</loc><lastmod>2026-03-02</lastmod><changefreq>weekly</changefreq><priority>0.8</priority></url>
-  <url><loc>https://docfast.dev/examples</loc><lastmod>2026-03-02</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
-  <url><loc>https://docfast.dev/impressum</loc><lastmod>2026-03-02</lastmod><changefreq>monthly</changefreq><priority>0.3</priority></url>
-  <url><loc>https://docfast.dev/privacy</loc><lastmod>2026-03-02</lastmod><changefreq>monthly</changefreq><priority>0.3</priority></url>
-  <url><loc>https://docfast.dev/terms</loc><lastmod>2026-03-02</lastmod><changefreq>monthly</changefreq><priority>0.3</priority></url>
-  <url><loc>https://docfast.dev/status</loc><lastmod>2026-03-02</lastmod><changefreq>always</changefreq><priority>0.2</priority></url>
+  <url><loc>https://docfast.dev/</loc><lastmod>2026-02-20</lastmod><changefreq>weekly</changefreq><priority>1.0</priority></url>
+  <url><loc>https://docfast.dev/signup</loc><lastmod>2026-02-20</lastmod><changefreq>monthly</changefreq><priority>0.9</priority></url>
+  <url><loc>https://docfast.dev/docs</loc><lastmod>2026-02-20</lastmod><changefreq>weekly</changefreq><priority>0.8</priority></url>
+  <url><loc>https://docfast.dev/examples</loc><lastmod>2026-02-20</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
+  <url><loc>https://docfast.dev/impressum</loc><lastmod>2026-02-20</lastmod><changefreq>monthly</changefreq><priority>0.3</priority></url>
+  <url><loc>https://docfast.dev/privacy</loc><lastmod>2026-02-20</lastmod><changefreq>monthly</changefreq><priority>0.3</priority></url>
+  <url><loc>https://docfast.dev/terms</loc><lastmod>2026-02-20</lastmod><changefreq>monthly</changefreq><priority>0.3</priority></url>
+  <url><loc>https://docfast.dev/status</loc><lastmod>2026-02-20</lastmod><changefreq>always</changefreq><priority>0.2</priority></url>
 </urlset>
--- a/public/src/examples.html
+++ b/public/src/examples.html
@ -4,7 +4,7 @@
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>Code Examples — DocFast HTML to PDF API</title>
-<meta name="description" content="Practical HTML to PDF API examples — generate PDFs from HTML, Markdown, and URLs. Code examples for Node.js, Python, Go, PHP, and cURL.">
+<meta name="description" content="Practical html to pdf api examples — generate pdf from html code, invoice pdf api, markdown to pdf, Node.js and Python integrations.">
 <meta property="og:title" content="Code Examples — DocFast HTML to PDF API">
 <meta property="og:description" content="Practical code examples for generating PDFs from HTML, Markdown, and more with the DocFast API.">
 <meta property="og:url" content="https://docfast.dev/examples">
@ -60,11 +60,8 @@
      <a href="#markdown">Markdown</a>
      <a href="#charts">Charts</a>
      <a href="#receipt">Receipt</a>
-      <a href="#url-to-pdf">URL to PDF</a>
      <a href="#nodejs">Node.js</a>
      <a href="#python">Python</a>
-      <a href="#go">Go</a>
-      <a href="#php">PHP</a>
    </nav>

    <!-- Invoice -->
@ -115,7 +112,7 @@

      <div class="code-block">
        <span class="code-label">curl</span>
-        <pre><code>curl -X POST https://docfast.dev/v1/convert/html \
+        <pre><code>curl -X POST https://api.docfast.dev/v1/convert/html \
  -H <span class="str">"Authorization: Bearer YOUR_API_KEY"</span> \
  -H <span class="str">"Content-Type: application/json"</span> \
  -d <span class="str">'{"html": "&lt;html&gt;...your invoice HTML...&lt;/html&gt;"}'</span> \
@ -130,7 +127,7 @@

      <div class="code-block">
        <span class="code-label">curl</span>
-        <pre><code>curl -X POST https://docfast.dev/v1/convert/markdown \
+        <pre><code>curl -X POST https://api.docfast.dev/v1/convert/markdown \
  -H <span class="str">"Authorization: Bearer YOUR_API_KEY"</span> \
  -H <span class="str">"Content-Type: application/json"</span> \
  -d '{
@ -169,7 +166,7 @@

      <div class="code-block">
        <span class="code-label">curl</span>
-        <pre><code>curl -X POST https://docfast.dev/v1/convert/html \
+        <pre><code>curl -X POST https://api.docfast.dev/v1/convert/html \
  -H <span class="str">"Authorization: Bearer YOUR_API_KEY"</span> \
  -H <span class="str">"Content-Type: application/json"</span> \
  -d @report.json \
@ -220,36 +217,6 @@
      </div>
    </section>

-    <!-- URL to PDF -->
-    <section id="url-to-pdf" class="example-section">
-      <h2>URL to PDF</h2>
-      <p>Capture a live webpage and convert it to PDF. Send a URL to the <code>/v1/convert/url</code> endpoint and get a rendered PDF back. JavaScript is disabled for security (SSRF protection), and private/internal URLs are blocked.</p>
-
-      <div class="code-block">
-        <span class="code-label">curl — basic</span>
-        <pre><code>curl -X POST https://docfast.dev/v1/convert/url \
-  -H <span class="str">"Authorization: Bearer YOUR_API_KEY"</span> \
-  -H <span class="str">"Content-Type: application/json"</span> \
-  -d <span class="str">'{"url": "https://example.com"}'</span> \
-  --output page.pdf</code></pre>
-      </div>
-
-      <div class="code-block">
-        <span class="code-label">curl — with options</span>
-        <pre><code>curl -X POST https://docfast.dev/v1/convert/url \
-  -H <span class="str">"Authorization: Bearer YOUR_API_KEY"</span> \
-  -H <span class="str">"Content-Type: application/json"</span> \
-  -d <span class="str">'{
-    "url": "https://example.com",
-    "format": "A4",
-    "margin": { "top": "20mm", "bottom": "20mm" },
-    "scale": 0.8,
-    "printBackground": true
-  }'</span> \
-  --output page.pdf</code></pre>
-      </div>
-    </section>
-
    <!-- Node.js -->
    <section id="nodejs" class="example-section">
      <h2>Node.js Integration</h2>
@ -262,7 +229,7 @@
  &lt;p&gt;Generated at ${</span><span class="kw">new</span> <span class="fn">Date</span>().<span class="fn">toISOString</span>()<span class="str">}&lt;/p&gt;
 `</span>;

-<span class="kw">const</span> res = <span class="kw">await</span> <span class="fn">fetch</span>(<span class="str">"https://docfast.dev/v1/convert/html"</span>, {
+<span class="kw">const</span> res = <span class="kw">await</span> <span class="fn">fetch</span>(<span class="str">"https://api.docfast.dev/v1/convert/html"</span>, {
  method: <span class="str">"POST"</span>,
  headers: {
    <span class="str">"Authorization"</span>: <span class="str">`Bearer ${process.env.DOCFAST_API_KEY}`</span>,
@ -303,7 +270,7 @@ html = <span class="str">"""
 """</span>

 response = requests.<span class="fn">post</span>(
-    <span class="str">"https://docfast.dev/v1/convert/html"</span>,
+    <span class="str">"https://api.docfast.dev/v1/convert/html"</span>,
    headers={
        <span class="str">"Authorization"</span>: <span class="str">f"Bearer {</span>os.environ[<span class="str">'DOCFAST_API_KEY'</span>]<span class="str">}"</span>,
        <span class="str">"Content-Type"</span>: <span class="str">"application/json"</span>,
@ -320,67 +287,6 @@ response.<span class="fn">raise_for_status</span>()
      </div>
    </section>

-    <!-- Go -->
-    <section id="go" class="example-section">
-      <h2>Go Integration</h2>
-      <p><strong>SDK coming soon.</strong> In the meantime, use the HTTP example below — it works with any HTTP client.</p>
-      <div class="code-block">
-        <span class="code-label">Go — generate-pdf.go</span>
-        <pre><code><span class="kw">package</span> main
-
-<span class="kw">import</span> (
-    <span class="str">"bytes"</span>
-    <span class="str">"encoding/json"</span>
-    <span class="str">"io"</span>
-    <span class="str">"net/http"</span>
-    <span class="str">"os"</span>
-)
-
-<span class="kw">func</span> <span class="fn">main</span>() {
-    body, _ := json.<span class="fn">Marshal</span>(<span class="kw">map</span>[<span class="kw">string</span>]<span class="kw">string</span>{
-        <span class="str">"html"</span>: <span class="str">"&lt;h1&gt;Hello&lt;/h1&gt;&lt;p&gt;Generated with DocFast&lt;/p&gt;"</span>,
-    })
-
-    req, _ := http.<span class="fn">NewRequest</span>(<span class="str">"POST"</span>, <span class="str">"https://docfast.dev/v1/convert/html"</span>, bytes.<span class="fn">NewReader</span>(body))
-    req.Header.<span class="fn">Set</span>(<span class="str">"Authorization"</span>, <span class="str">"Bearer "</span>+os.<span class="fn">Getenv</span>(<span class="str">"DOCFAST_API_KEY"</span>))
-    req.Header.<span class="fn">Set</span>(<span class="str">"Content-Type"</span>, <span class="str">"application/json"</span>)
-
-    resp, err := http.DefaultClient.<span class="fn">Do</span>(req)
-    <span class="kw">if</span> err != <span class="kw">nil</span> { <span class="fn">panic</span>(err) }
-    <span class="kw">defer</span> resp.Body.<span class="fn">Close</span>()
-
-    pdf, _ := io.<span class="fn">ReadAll</span>(resp.Body)
-    os.<span class="fn">WriteFile</span>(<span class="str">"output.pdf"</span>, pdf, <span class="num">0644</span>)
-}</code></pre>
-      </div>
-    </section>
-
-    <!-- PHP -->
-    <section id="php" class="example-section">
-      <h2>PHP Integration</h2>
-      <p><strong>SDK coming soon.</strong> In the meantime, use the HTTP example below — it works with any HTTP client. Laravel: Use this in any controller or Artisan command.</p>
-      <div class="code-block">
-        <span class="code-label">PHP — generate-pdf.php</span>
-        <pre><code><span class="kw">&lt;?php</span>
-$html = <span class="str">'&lt;h1&gt;Hello&lt;/h1&gt;&lt;p&gt;Generated with DocFast&lt;/p&gt;'</span>;
-
-$options = [
-    <span class="str">'http'</span> =&gt; [
-        <span class="str">'method'</span>  =&gt; <span class="str">'POST'</span>,
-        <span class="str">'header'</span>  =&gt; <span class="fn">implode</span>(<span class="str">"\r\n"</span>, [
-            <span class="str">'Authorization: Bearer '</span> . <span class="fn">getenv</span>(<span class="str">'DOCFAST_API_KEY'</span>),
-            <span class="str">'Content-Type: application/json'</span>,
-        ]),
-        <span class="str">'content'</span> =&gt; <span class="fn">json_encode</span>([<span class="str">'html'</span> =&gt; $html]),
-    ],
-];
-
-$pdf = <span class="fn">file_get_contents</span>(<span class="str">'https://docfast.dev/v1/convert/html'</span>, <span class="kw">false</span>, <span class="fn">stream_context_create</span>($options));
-<span class="fn">file_put_contents</span>(<span class="str">'output.pdf'</span>, $pdf);
-<span class="kw">echo</span> <span class="str">"✓ Saved output.pdf\n"</span>;</code></pre>
-      </div>
-    </section>
-
  </div>
 </main>

--- a/public/src/index.html
+++ b/public/src/index.html
@ -16,55 +16,7 @@
 <meta name="twitter:image" content="https://docfast.dev/og-image.png">
 <link rel="canonical" href="https://docfast.dev">
 <script type="application/ld+json">
-{"@context":"https://schema.org","@type":"SoftwareApplication","name":"DocFast","url":"https://docfast.dev","applicationCategory":"DeveloperApplication","operatingSystem":"Web","description":"Convert HTML and Markdown to beautiful PDFs with a simple API call. Fast, reliable, developer-friendly.","offers":[{"@type":"Offer","price":"9","priceCurrency":"EUR","name":"Pro","description":"5,000 PDFs per month for production apps","billingIncrement":"P1M"}]}
-</script>
-<script type="application/ld+json">
-{
-  "@context": "https://schema.org",
-  "@type": "FAQPage",
-  "mainEntity": [
-    {
-      "@type": "Question",
-      "name": "How do I convert HTML to PDF with an API?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Send a POST request to https://docfast.dev/v1/convert/html with your HTML content in the request body and your API key in the Authorization header. DocFast returns a ready-to-use PDF in under 1 second."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Does DocFast support Markdown to PDF?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "Yes, DocFast supports converting Markdown to PDF through the /v1/convert/markdown endpoint. Simply send your Markdown content and receive a beautifully formatted PDF."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Where is DocFast hosted?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "DocFast is hosted exclusively in the EU, in Hetzner's Nuremberg, Germany datacenter. All data processing happens within EU borders and is fully GDPR compliant."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "How much does DocFast cost?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "DocFast Pro costs €9 per month and includes 5,000 PDF generations, all conversion endpoints, built-in templates, and priority email support."
-      }
-    },
-    {
-      "@type": "Question",
-      "name": "Do you have official SDKs?",
-      "acceptedAnswer": {
-        "@type": "Answer",
-        "text": "DocFast provides code examples for Node.js, Python, Go, PHP, and cURL. Official SDK packages are coming soon. You can use the REST API directly with any HTTP client."
-      }
-    }
-  ]
-}
+{"@context":"https://schema.org","@type":"SoftwareApplication","name":"DocFast","url":"https://docfast.dev","applicationCategory":"DeveloperApplication","operatingSystem":"Web","description":"Convert HTML and Markdown to beautiful PDFs with a simple API call. Fast, reliable, developer-friendly.","offers":[{"@type":"Offer","price":"9","priceCurrency":"EUR","name":"Pro","description":"Unlimited PDF generation for production apps","billingIncrement":"P1M"}]}
 </script>
 <link rel="icon" href="data:image/svg+xml,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'><text y='.9em' font-size='90'>⚡</text></svg>">
 <style>
@ -380,7 +332,6 @@ html, body {
      <a href="#features">Features</a>
      <a href="#pricing">Pricing</a>
      <a href="/docs">Docs</a>
-      <a href="/examples">Examples</a>
    </div>
  </div>
 </nav>
@ -441,7 +392,7 @@ html, body {
    <div class="eu-badge">
      <div class="eu-icon">🇪🇺</div>
      <div class="eu-content">
-        <h2>Hosted in the EU</h2>
+        <h3>Hosted in the EU</h3>
        <p>Your data never leaves the EU • GDPR Compliant • Hetzner Germany (Nuremberg)</p>
      </div>
    </div>
@ -451,7 +402,7 @@ html, body {
 <section class="features" id="features">
  <div class="container">
    <h2 class="section-title">Everything you need</h2>
-    <p class="section-sub">Code examples for Node.js, Python, Go, PHP, and cURL. Official SDKs coming soon.</p>
+    <p class="section-sub">A complete PDF generation API. No SDKs, no dependencies, no setup.</p>
    <div class="features-grid">
      <div class="feature-card">
        <div class="feature-icon" aria-hidden="true">⚡</div>
@ -583,10 +534,8 @@ html, body {
    <div class="footer-links">
      <a href="/">Home</a>
      <a href="/docs">Docs</a>
-      <a href="/examples">Examples</a>
-      <a href="/status">API Status</a>
+      <a href="/health">API Status</a>
      <a href="mailto:support@docfast.dev">Support</a>
-      <a href="/#change-email" class="open-email-change">Change Email</a>
      <a href="/impressum">Impressum</a>
      <a href="/privacy">Privacy Policy</a>
      <a href="/terms">Terms of Service</a>
@ -595,15 +544,15 @@ html, body {
 </footer>

 <!-- Recovery Modal -->
-<div class="modal-overlay" id="recoverModal" role="dialog" aria-modal="true" aria-label="Recover API key">
+<div class="modal-overlay" id="recoverModal" role="dialog" aria-label="Recover API key">
  <div class="modal">
-    <button class="close" id="btn-close-recover" aria-label="Close">&times;</button>
+    <button class="close" id="btn-close-recover">&times;</button>

    <div id="recoverInitial" class="active">
      <h2>Recover your API key</h2>
      <p>Enter the email you signed up with. We'll send a verification code.</p>
      <div class="signup-error" id="recoverError"></div>
-      <input type="email" id="recoverEmailInput" aria-label="Email address for key recovery" placeholder="your.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
+      <input type="email" id="recoverEmailInput" placeholder="your.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
      <button class="btn btn-primary" style="width:100%" id="recoverBtn">Send Verification Code →</button>
      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Your key will be shown here after verification — never sent via email</p>
    </div>
@ -617,7 +566,7 @@ html, body {
      <h2>Enter verification code</h2>
      <p>We sent a 6-digit code to <strong id="recoverEmailDisplay"></strong></p>
      <div class="signup-error" id="recoverVerifyError"></div>
-      <input type="text" id="recoverCode" aria-label="6-digit verification code" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
+      <input type="text" id="recoverCode" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
      <button class="btn btn-primary" style="width:100%" id="recoverVerifyBtn">Verify →</button>
      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Code expires in 15 minutes</p>
    </div>
@ -630,7 +579,7 @@ html, body {
      </div>
      <div style="background:var(--bg);border:1px solid var(--accent);border-radius:8px;padding:14px;font-family:monospace;font-size:0.82rem;word-break:break-all;margin:16px 0;position:relative;">
        <span id="recoveredKeyText"></span>
-        <button id="copyRecoveredBtn" style="position:absolute;top:8px;right:8px;background:var(--accent);color:var(--bg);border:none;border-radius:4px;padding:4px 12px;cursor:pointer;font-size:0.8rem;">Copy</button>
+        <button onclick="copyRecoveredKey()" id="copyRecoveredBtn" style="position:absolute;top:8px;right:8px;background:var(--accent);color:var(--bg);border:none;border-radius:4px;padding:4px 12px;cursor:pointer;font-size:0.8rem;">Copy</button>
      </div>
      <p style="margin-top:20px;color:var(--muted);font-size:0.9rem;"><a href="/docs">Read the docs →</a></p>
    </div>
@ -639,16 +588,16 @@ html, body {


 <!-- Email Change Modal -->
-<div class="modal-overlay" id="emailChangeModal" role="dialog" aria-modal="true" aria-label="Change email">
+<div class="modal-overlay" id="emailChangeModal" role="dialog" aria-label="Change email">
  <div class="modal">
-    <button class="close" id="btn-close-email-change" aria-label="Close">&times;</button>
+    <button class="close" id="btn-close-email-change">&times;</button>

    <div id="emailChangeInitial" class="active">
      <h2>Change your email</h2>
      <p>Enter your API key and new email address.</p>
      <div class="signup-error" id="emailChangeError"></div>
-      <input type="text" id="emailChangeApiKey" aria-label="Your API key" placeholder="Your API key (df_pro_...)" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:12px;font-family:monospace;" required>
-      <input type="email" id="emailChangeNewEmail" aria-label="New email address" placeholder="new.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
+      <input type="text" id="emailChangeApiKey" placeholder="Your API key (df_free_... or df_pro_...)" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:12px;font-family:monospace;" required>
+      <input type="email" id="emailChangeNewEmail" placeholder="new.email@example.com" style="width:100%;padding:12px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:0.9rem;margin-bottom:16px;" required>
      <button class="btn btn-primary" style="width:100%" id="emailChangeBtn">Send Verification Code →</button>
      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">A verification code will be sent to your new email</p>
    </div>
@ -662,7 +611,7 @@ html, body {
      <h2>Enter verification code</h2>
      <p>We sent a 6-digit code to <strong id="emailChangeEmailDisplay"></strong></p>
      <div class="signup-error" id="emailChangeVerifyError"></div>
-      <input type="text" id="emailChangeCode" aria-label="6-digit verification code for email change" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
+      <input type="text" id="emailChangeCode" placeholder="123456" maxlength="6" pattern="[0-9]{6}" inputmode="numeric" style="width:100%;padding:14px;border:1px solid var(--border);background:var(--bg);color:var(--fg);border-radius:8px;font-size:1.4rem;letter-spacing:0.3em;text-align:center;margin-bottom:16px;font-family:monospace;" required>
      <button class="btn btn-primary" style="width:100%" id="emailChangeVerifyBtn">Verify →</button>
      <p style="margin-top:16px;color:var(--muted);font-size:0.8rem;text-align:center;">Code expires in 15 minutes</p>
    </div>
@ -675,6 +624,6 @@ html, body {
  </div>
 </div>

-<script src="/app.js"></script>
+<script src="/app.min.js"></script>
 </body>
 </html>
--- a/public/src/status.html
+++ b/public/src/status.html
@ -49,6 +49,6 @@

 {{> footer}}

-<script src="/status.js"></script>
+<script src="/status.min.js"></script>
 </body>
 </html>
--- a/public/src/terms.html
+++ b/public/src/terms.html
@ -41,13 +41,12 @@

    <h2>2. Service Plans</h2>
    
-    <h3>2.1 Demo (Free)</h3>
+    <h3>2.1 Free Tier</h3>
    <ul>
-      <li><strong>No account required</strong></li>
-      <li><strong>Rate limit:</strong> 5 requests per hour</li>
-      <li><strong>Purpose:</strong> Testing and evaluation only</li>
-      <li><strong>Endpoints:</strong> <code>/v1/demo/html</code> and <code>/v1/demo/markdown</code></li>
-      <li><strong>Support:</strong> Documentation only, no SLA</li>
+      <li><strong>Monthly limit:</strong> 100 PDF conversions</li>
+      <li><strong>Rate limit:</strong> 10 requests per minute</li>
+      <li><strong>Fair use policy:</strong> Personal and small business use</li>
+      <li><strong>Support:</strong> Community documentation</li>
    </ul>

    <h3>2.2 Pro Tier</h3>
@ -98,7 +97,7 @@
    
    <h3>5.1 Uptime</h3>
    <ul>
-      <li><strong>Target:</strong> 99.5% uptime (best effort, no SLA for demo usage)</li>
+      <li><strong>Target:</strong> 99.5% uptime (best effort, no SLA for free tier)</li>
      <li><strong>Maintenance:</strong> Scheduled maintenance with advance notice</li>
      <li><strong>Status page:</strong> <a href="/status">https://docfast.dev/status</a></li>
    </ul>
--- a/public/status.html
+++ b/public/status.html
@ -104,10 +104,7 @@ footer .container { display: flex; justify-content: space-between; align-items:
    <div class="footer-links">
      <a href="/">Home</a>
      <a href="/docs">Docs</a>
-      <a href="/examples">Examples</a>
      <a href="/status">API Status</a>
-      <a href="mailto:support@docfast.dev">Support</a>
-      <a href="/#change-email" class="open-email-change">Change Email</a>
      <a href="/impressum">Impressum</a>
      <a href="/privacy">Privacy Policy</a>
      <a href="/terms">Terms of Service</a>
@ -115,6 +112,6 @@ footer .container { display: flex; justify-content: space-between; align-items:
  </div>
 </footer>

-<script src="/status.js"></script>
+<script src="/status.min.js"></script>
 </body>
 </html>
--- a/public/status.js
+++ b/public/status.js
@ -1 +1,48 @@
-async function fetchStatus(){const s=document.getElementById("status-content");try{const a=await fetch("/health"),t=await a.json(),e="ok"===t.status,l="degraded"===t.status,o=e?"ok":l?"degraded":"error",n=e?"All Systems Operational":l?"Degraded Performance":"Service Disruption",i=(new Date).toLocaleTimeString();s.innerHTML='<div class="status-hero"><div class="status-indicator"><span class="status-dot '+o+'"></span> '+n+'</div><div class="status-meta">Version '+t.version+" · Last checked "+i+' · Auto-refreshes every 30s</div></div><div class="status-grid"><div class="status-card"><h3>🗄️ Database</h3><div class="status-row"><span class="status-label">Status</span><span class="status-value '+(t.database&&"ok"===t.database.status?"ok":"err")+'">'+(t.database&&"ok"===t.database.status?"Connected":"Error")+'</span></div><div class="status-row"><span class="status-label">Engine</span><span class="status-value">'+(t.database?t.database.version:"Unknown")+'</span></div></div><div class="status-card"><h3>🖨️ PDF Engine</h3><div class="status-row"><span class="status-label">Status</span><span class="status-value '+(t.pool&&t.pool.available>0?"ok":"warn")+'">'+(t.pool&&t.pool.available>0?"Ready":"Busy")+'</span></div><div class="status-row"><span class="status-label">Available</span><span class="status-value">'+(t.pool?t.pool.available:0)+" / "+(t.pool?t.pool.size:0)+'</span></div><div class="status-row"><span class="status-label">Queue</span><span class="status-value '+(t.pool&&t.pool.queueDepth>0?"warn":"ok")+'">'+(t.pool?t.pool.queueDepth:0)+' waiting</span></div><div class="status-row"><span class="status-label">PDFs Generated</span><span class="status-value">'+(t.pool?t.pool.pdfCount.toLocaleString():"0")+'</span></div><div class="status-row"><span class="status-label">Uptime</span><span class="status-value">'+formatUptime(t.pool?t.pool.uptimeSeconds:0)+'</span></div></div></div><div style="text-align:center;margin-top:16px;"><a href="/health" style="font-size:0.8rem;color:var(--muted);">Raw JSON endpoint →</a></div>'}catch(a){s.innerHTML='<div class="status-hero"><div class="status-indicator"><span class="status-dot error"></span> Unable to reach API</div><div class="status-meta">The service may be temporarily unavailable. Please try again shortly.</div></div>'}}function formatUptime(s){return s||0===s?s<60?s+"s":s<3600?Math.floor(s/60)+"m "+s%60+"s":Math.floor(s/3600)+"h "+Math.floor(s%3600/60)+"m":"Unknown"}fetchStatus(),setInterval(fetchStatus,3e4);
+async function fetchStatus() {
+  const el = document.getElementById("status-content");
+  try {
+    const res = await fetch("/health");
+    const d = await res.json();
+    const isOk = d.status === "ok";
+    const isDegraded = d.status === "degraded";
+    const dotClass = isOk ? "ok" : isDegraded ? "degraded" : "error";
+    const label = isOk ? "All Systems Operational" : isDegraded ? "Degraded Performance" : "Service Disruption";
+    const now = new Date().toLocaleTimeString();
+
+    el.innerHTML =
+      "<div class=\"status-hero\">" +
+        "<div class=\"status-indicator\"><span class=\"status-dot " + dotClass + "\"></span> " + label + "</div>" +
+        "<div class=\"status-meta\">Version " + d.version + " · Last checked " + now + " · Auto-refreshes every 30s</div>" +
+      "</div>" +
+      "<div class=\"status-grid\">" +
+        "<div class=\"status-card\">" +
+          "<h3>🗄️ Database</h3>" +
+          "<div class=\"status-row\"><span class=\"status-label\">Status</span><span class=\"status-value " + (d.database && d.database.status === "ok" ? "ok" : "err") + "\">" + (d.database && d.database.status === "ok" ? "Connected" : "Error") + "</span></div>" +
+          "<div class=\"status-row\"><span class=\"status-label\">Engine</span><span class=\"status-value\">" + (d.database ? d.database.version : "Unknown") + "</span></div>" +
+        "</div>" +
+        "<div class=\"status-card\">" +
+          "<h3>🖨️ PDF Engine</h3>" +
+          "<div class=\"status-row\"><span class=\"status-label\">Status</span><span class=\"status-value " + (d.pool && d.pool.available > 0 ? "ok" : "warn") + "\">" + (d.pool && d.pool.available > 0 ? "Ready" : "Busy") + "</span></div>" +
+          "<div class=\"status-row\"><span class=\"status-label\">Available</span><span class=\"status-value\">" + (d.pool ? d.pool.available : 0) + " / " + (d.pool ? d.pool.size : 0) + "</span></div>" +
+          "<div class=\"status-row\"><span class=\"status-label\">Queue</span><span class=\"status-value " + (d.pool && d.pool.queueDepth > 0 ? "warn" : "ok") + "\">" + (d.pool ? d.pool.queueDepth : 0) + " waiting</span></div>" +
+          "<div class=\"status-row\"><span class=\"status-label\">PDFs Generated</span><span class=\"status-value\">" + (d.pool ? d.pool.pdfCount.toLocaleString() : "0") + "</span></div>" +
+          "<div class=\"status-row\"><span class=\"status-label\">Uptime</span><span class=\"status-value\">" + formatUptime(d.pool ? d.pool.uptimeSeconds : 0) + "</span></div>" +
+        "</div>" +
+      "</div>" +
+      "<div style=\"text-align:center;margin-top:16px;\"><a href=\"/health\" style=\"font-size:0.8rem;color:var(--muted);\">Raw JSON endpoint →</a></div>";
+  } catch (e) {
+    el.innerHTML = "<div class=\"status-hero\"><div class=\"status-indicator\"><span class=\"status-dot error\"></span> Unable to reach API</div><div class=\"status-meta\">The service may be temporarily unavailable. Please try again shortly.</div></div>";
+  }
+}
+
+function formatUptime(s) {
+  if (!s && s !== 0) return "Unknown";
+  if (s < 60) return s + "s";
+  if (s < 3600) return Math.floor(s/60) + "m " + (s%60) + "s";
+  var h = Math.floor(s/3600);
+  var m = Math.floor((s%3600)/60);
+  return h + "h " + m + "m";
+}
+
+fetchStatus();
+setInterval(fetchStatus, 30000);
--- a/public/terms.html
+++ b/public/terms.html
@ -92,13 +92,12 @@ footer .container { display: flex; justify-content: space-between; align-items:

    <h2>2. Service Plans</h2>
    
-    <h3>2.1 Demo (Free)</h3>
+    <h3>2.1 Free Tier</h3>
    <ul>
-      <li><strong>No account required</strong></li>
-      <li><strong>Rate limit:</strong> 5 requests per hour</li>
-      <li><strong>Purpose:</strong> Testing and evaluation only</li>
-      <li><strong>Endpoints:</strong> <code>/v1/demo/html</code> and <code>/v1/demo/markdown</code></li>
-      <li><strong>Support:</strong> Documentation only, no SLA</li>
+      <li><strong>Monthly limit:</strong> 100 PDF conversions</li>
+      <li><strong>Rate limit:</strong> 10 requests per minute</li>
+      <li><strong>Fair use policy:</strong> Personal and small business use</li>
+      <li><strong>Support:</strong> Community documentation</li>
    </ul>

    <h3>2.2 Pro Tier</h3>
@ -149,7 +148,7 @@ footer .container { display: flex; justify-content: space-between; align-items:
    
    <h3>5.1 Uptime</h3>
    <ul>
-      <li><strong>Target:</strong> 99.5% uptime (best effort, no SLA for demo usage)</li>
+      <li><strong>Target:</strong> 99.5% uptime (best effort, no SLA for free tier)</li>
      <li><strong>Maintenance:</strong> Scheduled maintenance with advance notice</li>
      <li><strong>Status page:</strong> <a href="/status">https://docfast.dev/status</a></li>
    </ul>
@ -263,10 +262,7 @@ footer .container { display: flex; justify-content: space-between; align-items:
    <div class="footer-links">
      <a href="/">Home</a>
      <a href="/docs">Docs</a>
-      <a href="/examples">Examples</a>
      <a href="/status">API Status</a>
-      <a href="mailto:support@docfast.dev">Support</a>
-      <a href="/#change-email" class="open-email-change">Change Email</a>
      <a href="/impressum">Impressum</a>
      <a href="/privacy">Privacy Policy</a>
      <a href="/terms">Terms of Service</a>
--- a/scripts/build-html.cjs
+++ b/scripts/build-html.cjs
@ -47,18 +47,18 @@ for (const file of files) {
 }
 console.log('Done.');

-// JS Minification (overwrite original files)
+// JS Minification (requires terser)
 const { execSync } = require("child_process");
-const jsFiles = ["public/app.js", "public/status.js"];
+const jsFiles = [
+  { src: "public/app.js", out: "public/app.min.js" },
+  { src: "public/status.js", out: "public/status.min.js" },
+];
 console.log("Minifying JS...");
-for (const jsFile of jsFiles) {
-  const filePath = path.join(__dirname, "..", jsFile);
-  if (fs.existsSync(filePath)) {
-    // Create backup, minify, then overwrite original
-    const backupPath = filePath + ".bak";
-    fs.copyFileSync(filePath, backupPath);
-    execSync(`npx terser ${filePath} -o ${filePath} -c -m`, { stdio: "inherit" });
-    fs.unlinkSync(backupPath); // Clean up backup
-    console.log(`  Minified: ${jsFile} (overwritten)`);
+for (const { src, out } of jsFiles) {
+  const srcPath = path.join(__dirname, "..", src);
+  const outPath = path.join(__dirname, "..", out);
+  if (fs.existsSync(srcPath)) {
+    execSync(`npx terser ${srcPath} -o ${outPath} -c -m`, { stdio: "inherit" });
+    console.log(`  Minified: ${src} → ${out}`);
  }
 }
--- a/scripts/build-pages.js
+++ b/scripts/build-pages.js
@ -0,0 +1,75 @@
+#!/usr/bin/env node
+/**
+ * Build-time HTML templating system for DocFast.
+ * No dependencies — uses only Node.js built-ins.
+ *
+ * - Reads page sources from templates/pages/*.html
+ * - Reads partials from templates/partials/*.html
+ * - Replaces {{> partial_name}} with partial content
+ * - Supports <!-- key: value --> metadata comments at top of page files
+ * - Replaces {{key}} variables with extracted metadata
+ * - Writes output to public/
+ */
+
+import { readFileSync, writeFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = fileURLToPath(new URL('.', import.meta.url));
+const ROOT = join(__dirname, '..');
+const PAGES_DIR = join(ROOT, 'templates', 'pages');
+const PARTIALS_DIR = join(ROOT, 'templates', 'partials');
+const OUTPUT_DIR = join(ROOT, 'public');
+
+// Load all partials
+const partials = {};
+for (const file of readdirSync(PARTIALS_DIR)) {
+  if (!file.endsWith('.html')) continue;
+  const name = file.replace('.html', '');
+  partials[name] = readFileSync(join(PARTIALS_DIR, file), 'utf-8');
+}
+
+console.log(`Loaded ${Object.keys(partials).length} partials: ${Object.keys(partials).join(', ')}`);
+
+// Process each page
+const pages = readdirSync(PAGES_DIR).filter(f => f.endsWith('.html'));
+console.log(`Processing ${pages.length} pages...`);
+
+for (const file of pages) {
+  let content = readFileSync(join(PAGES_DIR, file), 'utf-8');
+
+  // Extract all <!-- key: value --> metadata comments from the top
+  const vars = {};
+  while (true) {
+    const m = content.match(/^<!--\s*([a-zA-Z_-]+):\s*(.+?)\s*-->\n?/);
+    if (!m) break;
+    vars[m[1]] = m[2];
+    content = content.slice(m[0].length);
+  }
+
+  // Replace {{> partial_name}} with partial content (support nested partials)
+  let maxDepth = 5;
+  while (maxDepth-- > 0 && content.includes('{{>')) {
+    content = content.replace(/\{\{>\s*([a-zA-Z0-9_-]+)\s*\}\}/g, (match, name) => {
+      if (!(name in partials)) {
+        console.warn(`  Warning: partial "${name}" not found in ${file}`);
+        return match;
+      }
+      return partials[name];
+    });
+  }
+
+  // Replace {{variable}} with extracted metadata
+  content = content.replace(/\{\{([a-zA-Z_-]+)\}\}/g, (match, key) => {
+    if (key in vars) return vars[key];
+    console.warn(`  Warning: variable "${key}" not defined in ${file}`);
+    return match;
+  });
+
+  // Write output
+  const outPath = join(OUTPUT_DIR, file);
+  writeFileSync(outPath, content);
+  console.log(`  ✓ ${file} (${(content.length / 1024).toFixed(1)}KB)`);
+}
+
+console.log('Done!');
--- a/scripts/generate-openapi.mjs
+++ b/scripts/generate-openapi.mjs
@ -29,8 +29,6 @@ Try the API without signing up! Demo endpoints are public (no API key needed) bu
 - Demo: 5 PDFs/hour per IP (watermarked)
 - Pro tier: 5,000 PDFs/month, 30 req/min

-All rate-limited endpoints return \`X-RateLimit-Limit\`, \`X-RateLimit-Remaining\`, and \`X-RateLimit-Reset\` headers. On \`429\`, a \`Retry-After\` header indicates seconds until the next allowed request.
-
 ## Getting Started
 1. Try the demo at \`POST /v1/demo/html\` — no signup needed
 2. Subscribe to Pro at [docfast.dev](https://docfast.dev/#pricing) for clean PDFs
@ -66,36 +64,6 @@ All rate-limited endpoints return \`X-RateLimit-Limit\`, \`X-RateLimit-Remaining
          description: 'API key via X-API-Key header'
        }
      },
-      headers: {
-        'X-RateLimit-Limit': {
-          description: 'The maximum number of requests allowed in the current time window',
-          schema: {
-            type: 'integer',
-            example: 30
-          }
-        },
-        'X-RateLimit-Remaining': {
-          description: 'The number of requests remaining in the current time window',
-          schema: {
-            type: 'integer',
-            example: 29
-          }
-        },
-        'X-RateLimit-Reset': {
-          description: 'Unix timestamp (seconds since epoch) when the rate limit window resets',
-          schema: {
-            type: 'integer',
-            example: 1679875200
-          }
-        },
-        'Retry-After': {
-          description: 'Number of seconds to wait before retrying the request (returned on 429 responses)',
-          schema: {
-            type: 'integer',
-            example: 60
-          }
-        }
-      },
      schemas: {
        PdfOptions: {
          type: 'object',
--- a/sdk/go/README.md
+++ b/sdk/go/README.md
@ -1,151 +0,0 @@
-# DocFast Go SDK
-
-Official Go client for the [DocFast](https://docfast.dev) HTML/Markdown to PDF API.
-
-## Installation
-
-```bash
-go get github.com/docfast/docfast-go
-```
-
-## Quick Start
-
-```go
-package main
-
-import (
-	"os"
-	docfast "github.com/docfast/docfast-go"
-)
-
-func main() {
-	client := docfast.New("df_pro_your_api_key")
-
-	// HTML to PDF
-	pdf, err := client.HTML("<h1>Hello World</h1><p>Generated with DocFast</p>", nil)
-	if err != nil {
-		panic(err)
-	}
-	os.WriteFile("output.pdf", pdf, 0644)
-}
-```
-
-## Usage
-
-### HTML to PDF
-
-```go
-pdf, err := client.HTML("<h1>Hello</h1>", &docfast.PDFOptions{
-	Format:    "A4",
-	Landscape: true,
-	Margin:    &docfast.Margin{Top: "20mm", Bottom: "20mm"},
-})
-```
-
-### HTML with custom CSS
-
-```go
-pdf, err := client.HTMLWithCSS(
-	"<h1>Styled</h1>",
-	"h1 { color: navy; font-family: Georgia; }",
-	nil,
-)
-```
-
-### Markdown to PDF
-
-```go
-pdf, err := client.Markdown("# Report\n\nGenerated **automatically**.", nil)
-```
-
-### URL to PDF
-
-```go
-pdf, err := client.URL("https://example.com", &docfast.PDFOptions{
-	Format:          "Letter",
-	PrintBackground: docfast.Bool(true),
-})
-```
-
-### Headers and Footers
-
-```go
-pdf, err := client.HTML(html, &docfast.PDFOptions{
-	DisplayHeaderFooter: true,
-	HeaderTemplate:      `<div style="font-size:10px;text-align:center;width:100%">My Document</div>`,
-	FooterTemplate:      `<div style="font-size:10px;text-align:center;width:100%">Page <span class="pageNumber"></span> of <span class="totalPages"></span></div>`,
-	Margin:              &docfast.Margin{Top: "40mm", Bottom: "20mm"},
-})
-```
-
-### Custom Page Size
-
-```go
-pdf, err := client.HTML(html, &docfast.PDFOptions{
-	Width:  "8.5in",
-	Height: "11in",
-	Scale:  0.8,
-})
-```
-
-### Templates
-
-```go
-// List available templates
-templates, err := client.Templates()
-
-// Render a template
-pdf, err := client.RenderTemplate("invoice", map[string]interface{}{
-	"company":  "Acme Corp",
-	"items":    []map[string]interface{}{{"name": "Widget", "price": 9.99}},
-	"_format":  "A4",
-})
-```
-
-## PDF Options
-
-| Option | Type | Default | Description |
-|--------|------|---------|-------------|
-| `Format` | string | `"A4"` | Page size: A4, Letter, Legal, A3, A5, Tabloid |
-| `Landscape` | bool | `false` | Landscape orientation |
-| `Margin` | *Margin | `nil` | Page margins (CSS units) |
-| `PrintBackground` | *bool | `true` | Print background graphics |
-| `Filename` | string | `""` | Suggested filename |
-| `HeaderTemplate` | string | `""` | HTML header template |
-| `FooterTemplate` | string | `""` | HTML footer template |
-| `DisplayHeaderFooter` | bool | `false` | Show header/footer |
-| `Scale` | float64 | `1` | Rendering scale (0.1–2.0) |
-| `PageRanges` | string | `""` | Pages to print (e.g. "1-3,5") |
-| `PreferCSSPageSize` | bool | `false` | Prefer CSS @page size |
-| `Width` | string | `""` | Custom paper width |
-| `Height` | string | `""` | Custom paper height |
-
-## Error Handling
-
-```go
-pdf, err := client.HTML("<h1>Test</h1>", nil)
-if err != nil {
-	var apiErr *docfast.Error
-	if errors.As(err, &apiErr) {
-		fmt.Printf("API error: %s (status %d)\n", apiErr.Message, apiErr.StatusCode)
-	}
-}
-```
-
-## Configuration
-
-```go
-// Custom base URL (e.g. for self-hosted or staging)
-client := docfast.New("key", docfast.WithBaseURL("https://staging.docfast.dev"))
-
-// Custom HTTP client
-client := docfast.New("key", docfast.WithHTTPClient(&http.Client{
-	Timeout: 120 * time.Second,
-}))
-```
-
-## Links
-
- [Documentation](https://docfast.dev/docs)
- [API Reference](https://docfast.dev/openapi.json)
- [Get an API Key](https://docfast.dev)
--- a/sdk/go/docfast.go
+++ b/sdk/go/docfast.go
@ -1,293 +0,0 @@
-// Package docfast provides a Go client for the DocFast HTML/Markdown to PDF API.
-//
-// Usage:
-//
-//	client := docfast.New("df_pro_your_key")
-//	pdf, err := client.HTML("<h1>Hello</h1>", nil)
-package docfast
-
-import (
-	"bytes"
-	"encoding/json"
-	"fmt"
-	"io"
-	"net/http"
-	"time"
-)
-
-const defaultBaseURL = "https://docfast.dev"
-
-// Margin defines PDF page margins using CSS units (e.g. "20mm", "1in").
-type Margin struct {
-	Top    string `json:"top,omitempty"`
-	Bottom string `json:"bottom,omitempty"`
-	Left   string `json:"left,omitempty"`
-	Right  string `json:"right,omitempty"`
-}
-
-// PDFOptions configures PDF generation. All fields are optional.
-type PDFOptions struct {
-	// Page size: A4, Letter, Legal, A3, A5, Tabloid. Ignored if Width/Height set.
-	Format string `json:"format,omitempty"`
-	// Landscape orientation.
-	Landscape bool `json:"landscape,omitempty"`
-	// Page margins.
-	Margin *Margin `json:"margin,omitempty"`
-	// Print background graphics and colors. Default: true.
-	PrintBackground *bool `json:"printBackground,omitempty"`
-	// Suggested filename for the PDF download.
-	Filename string `json:"filename,omitempty"`
-	// HTML template for page header. Requires DisplayHeaderFooter: true.
-	// Supports CSS classes: date, title, url, pageNumber, totalPages.
-	HeaderTemplate string `json:"headerTemplate,omitempty"`
-	// HTML template for page footer. Same classes as HeaderTemplate.
-	FooterTemplate string `json:"footerTemplate,omitempty"`
-	// Show header and footer templates.
-	DisplayHeaderFooter bool `json:"displayHeaderFooter,omitempty"`
-	// Scale of webpage rendering (0.1 to 2.0). Default: 1.
-	Scale float64 `json:"scale,omitempty"`
-	// Paper ranges to print, e.g. "1-3,5".
-	PageRanges string `json:"pageRanges,omitempty"`
-	// Give CSS @page size priority over Format.
-	PreferCSSPageSize bool `json:"preferCSSPageSize,omitempty"`
-	// Paper width with units (e.g. "8.5in"). Overrides Format.
-	Width string `json:"width,omitempty"`
-	// Paper height with units (e.g. "11in"). Overrides Format.
-	Height string `json:"height,omitempty"`
-}
-
-// Template describes an available PDF template.
-type Template struct {
-	ID          string `json:"id"`
-	Name        string `json:"name"`
-	Description string `json:"description,omitempty"`
-}
-
-// Error is returned when the API responds with an error.
-type Error struct {
-	StatusCode int
-	Message    string
-	Code       string
-}
-
-func (e *Error) Error() string {
-	if e.Code != "" {
-		return fmt.Sprintf("docfast: %s (code=%s, status=%d)", e.Message, e.Code, e.StatusCode)
-	}
-	return fmt.Sprintf("docfast: %s (status=%d)", e.Message, e.StatusCode)
-}
-
-// ClientOption configures the Client.
-type ClientOption func(*Client)
-
-// WithBaseURL sets a custom API base URL.
-func WithBaseURL(url string) ClientOption {
-	return func(c *Client) { c.baseURL = url }
-}
-
-// WithHTTPClient sets a custom http.Client.
-func WithHTTPClient(hc *http.Client) ClientOption {
-	return func(c *Client) { c.httpClient = hc }
-}
-
-// Client is the DocFast API client.
-type Client struct {
-	apiKey     string
-	baseURL    string
-	httpClient *http.Client
-}
-
-// New creates a new DocFast client.
-func New(apiKey string, opts ...ClientOption) *Client {
-	c := &Client{
-		apiKey:  apiKey,
-		baseURL: defaultBaseURL,
-		httpClient: &http.Client{
-			Timeout: 60 * time.Second,
-		},
-	}
-	for _, o := range opts {
-		o(c)
-	}
-	return c
-}
-
-func (c *Client) post(path string, body map[string]interface{}) ([]byte, error) {
-	data, err := json.Marshal(body)
-	if err != nil {
-		return nil, fmt.Errorf("docfast: marshal error: %w", err)
-	}
-
-	req, err := http.NewRequest("POST", c.baseURL+path, bytes.NewReader(data))
-	if err != nil {
-		return nil, fmt.Errorf("docfast: request error: %w", err)
-	}
-	req.Header.Set("Authorization", "Bearer "+c.apiKey)
-	req.Header.Set("Content-Type", "application/json")
-
-	resp, err := c.httpClient.Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("docfast: request failed: %w", err)
-	}
-	defer resp.Body.Close()
-
-	respBody, err := io.ReadAll(resp.Body)
-	if err != nil {
-		return nil, fmt.Errorf("docfast: read error: %w", err)
-	}
-
-	if resp.StatusCode >= 400 {
-		apiErr := &Error{StatusCode: resp.StatusCode, Message: fmt.Sprintf("HTTP %d", resp.StatusCode)}
-		var errResp struct {
-			Error string `json:"error"`
-			Code  string `json:"code"`
-		}
-		if json.Unmarshal(respBody, &errResp) == nil {
-			if errResp.Error != "" {
-				apiErr.Message = errResp.Error
-			}
-			apiErr.Code = errResp.Code
-		}
-		return nil, apiErr
-	}
-
-	return respBody, nil
-}
-
-func (c *Client) get(path string) ([]byte, error) {
-	req, err := http.NewRequest("GET", c.baseURL+path, nil)
-	if err != nil {
-		return nil, fmt.Errorf("docfast: request error: %w", err)
-	}
-	req.Header.Set("Authorization", "Bearer "+c.apiKey)
-
-	resp, err := c.httpClient.Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("docfast: request failed: %w", err)
-	}
-	defer resp.Body.Close()
-
-	respBody, err := io.ReadAll(resp.Body)
-	if err != nil {
-		return nil, fmt.Errorf("docfast: read error: %w", err)
-	}
-
-	if resp.StatusCode >= 400 {
-		apiErr := &Error{StatusCode: resp.StatusCode, Message: fmt.Sprintf("HTTP %d", resp.StatusCode)}
-		var errResp struct {
-			Error string `json:"error"`
-			Code  string `json:"code"`
-		}
-		if json.Unmarshal(respBody, &errResp) == nil && errResp.Error != "" {
-			apiErr.Message = errResp.Error
-			apiErr.Code = errResp.Code
-		}
-		return nil, apiErr
-	}
-
-	return respBody, nil
-}
-
-func mergeOptions(body map[string]interface{}, opts *PDFOptions) {
-	if opts == nil {
-		return
-	}
-	if opts.Format != "" {
-		body["format"] = opts.Format
-	}
-	if opts.Landscape {
-		body["landscape"] = true
-	}
-	if opts.Margin != nil {
-		body["margin"] = opts.Margin
-	}
-	if opts.PrintBackground != nil {
-		body["printBackground"] = *opts.PrintBackground
-	}
-	if opts.Filename != "" {
-		body["filename"] = opts.Filename
-	}
-	if opts.HeaderTemplate != "" {
-		body["headerTemplate"] = opts.HeaderTemplate
-	}
-	if opts.FooterTemplate != "" {
-		body["footerTemplate"] = opts.FooterTemplate
-	}
-	if opts.DisplayHeaderFooter {
-		body["displayHeaderFooter"] = true
-	}
-	if opts.Scale != 0 {
-		body["scale"] = opts.Scale
-	}
-	if opts.PageRanges != "" {
-		body["pageRanges"] = opts.PageRanges
-	}
-	if opts.PreferCSSPageSize {
-		body["preferCSSPageSize"] = true
-	}
-	if opts.Width != "" {
-		body["width"] = opts.Width
-	}
-	if opts.Height != "" {
-		body["height"] = opts.Height
-	}
-}
-
-// HTML converts HTML content to PDF. Returns the raw PDF bytes.
-func (c *Client) HTML(html string, opts *PDFOptions) ([]byte, error) {
-	body := map[string]interface{}{"html": html}
-	mergeOptions(body, opts)
-	return c.post("/v1/convert/html", body)
-}
-
-// HTMLWithCSS converts an HTML fragment with optional CSS to PDF.
-func (c *Client) HTMLWithCSS(html, css string, opts *PDFOptions) ([]byte, error) {
-	body := map[string]interface{}{"html": html, "css": css}
-	mergeOptions(body, opts)
-	return c.post("/v1/convert/html", body)
-}
-
-// Markdown converts Markdown content to PDF.
-func (c *Client) Markdown(markdown string, opts *PDFOptions) ([]byte, error) {
-	body := map[string]interface{}{"markdown": markdown}
-	mergeOptions(body, opts)
-	return c.post("/v1/convert/markdown", body)
-}
-
-// MarkdownWithCSS converts Markdown with optional CSS to PDF.
-func (c *Client) MarkdownWithCSS(markdown, css string, opts *PDFOptions) ([]byte, error) {
-	body := map[string]interface{}{"markdown": markdown, "css": css}
-	mergeOptions(body, opts)
-	return c.post("/v1/convert/markdown", body)
-}
-
-// URL converts a web page at the given URL to PDF.
-func (c *Client) URL(url string, opts *PDFOptions) ([]byte, error) {
-	body := map[string]interface{}{"url": url}
-	mergeOptions(body, opts)
-	return c.post("/v1/convert/url", body)
-}
-
-// Templates returns the list of available PDF templates.
-func (c *Client) Templates() ([]Template, error) {
-	data, err := c.get("/v1/templates")
-	if err != nil {
-		return nil, err
-	}
-	var result struct {
-		Templates []Template `json:"templates"`
-	}
-	if err := json.Unmarshal(data, &result); err != nil {
-		return nil, fmt.Errorf("docfast: decode error: %w", err)
-	}
-	return result.Templates, nil
-}
-
-// RenderTemplate renders a template with the given data and returns PDF bytes.
-func (c *Client) RenderTemplate(templateID string, data map[string]interface{}) ([]byte, error) {
-	body := map[string]interface{}{"data": data}
-	return c.post("/v1/templates/"+templateID, body)
-}
-
-// Bool is a helper to create a *bool for PDFOptions.PrintBackground.
-func Bool(v bool) *bool { return &v }
--- a/sdk/go/go.mod
+++ b/sdk/go/go.mod
@ -1,3 +0,0 @@
-module github.com/docfast/docfast-go
-
-go 1.21
--- a/sdk/laravel/README.md
+++ b/sdk/laravel/README.md
@ -1,114 +0,0 @@
-# DocFast for Laravel
-
-Official Laravel integration for the [DocFast](https://docfast.dev) HTML/Markdown to PDF API.
-
-## Installation
-
-```bash
-composer require docfast/laravel
-```
-
-Add your API key to `.env`:
-
-```env
-DOCFAST_API_KEY=df_pro_your_api_key
-```
-
-Publish the config (optional):
-
-```bash
-php artisan vendor:publish --tag=docfast-config
-```
-
-## Usage
-
-### Via Facade
-
-```php
-use DocFast\Laravel\Facades\DocFast;
-
-// HTML to PDF
-$pdf = DocFast::html('<h1>Invoice</h1><p>Total: €99.00</p>');
-return response($pdf)
-    ->header('Content-Type', 'application/pdf')
-    ->header('Content-Disposition', 'inline; filename="invoice.pdf"');
-```
-
-### Via Dependency Injection
-
-```php
-use DocFast\Client;
-
-class InvoiceController extends Controller
-{
-    public function download(Client $docfast)
-    {
-        $pdf = $docfast->html(view('invoice')->render());
-        return response($pdf)
-            ->header('Content-Type', 'application/pdf');
-    }
-}
-```
-
-### Markdown to PDF
-
-```php
-$pdf = DocFast::markdown('# Report\n\nGenerated at ' . now());
-```
-
-### URL to PDF
-
-```php
-$pdf = DocFast::url('https://example.com');
-```
-
-### With PDF Options
-
-```php
-use DocFast\PdfOptions;
-
-$options = new PdfOptions();
-$options->format = 'Letter';
-$options->landscape = true;
-$options->margin = ['top' => '20mm', 'bottom' => '20mm'];
-
-$pdf = DocFast::html($html, null, $options);
-```
-
-### Headers and Footers
-
-```php
-$options = new PdfOptions();
-$options->displayHeaderFooter = true;
-$options->footerTemplate = '<div style="font-size:9px;text-align:center;width:100%">Page <span class="pageNumber"></span></div>';
-$options->margin = ['top' => '10mm', 'bottom' => '20mm'];
-
-$pdf = DocFast::html(view('report')->render(), null, $options);
-```
-
-### Templates
-
-```php
-$pdf = DocFast::renderTemplate('invoice', [
-    'company' => 'Acme Corp',
-    'items' => [['name' => 'Widget', 'price' => 9.99]],
-]);
-```
-
-## Configuration
-
-```php
-// config/docfast.php
-return [
-    'api_key' => env('DOCFAST_API_KEY'),
-    'base_url' => env('DOCFAST_BASE_URL', 'https://docfast.dev'),
-    'timeout' => env('DOCFAST_TIMEOUT', 60),
-];
-```
-
-## Links
-
- [PHP SDK](../php/) — standalone PHP client
- [Documentation](https://docfast.dev/docs)
- [API Reference](https://docfast.dev/openapi.json)
- [Get an API Key](https://docfast.dev)
--- a/sdk/laravel/composer.json
+++ b/sdk/laravel/composer.json
@ -1,34 +0,0 @@
-{
-  "name": "docfast/laravel",
-  "description": "Laravel integration for the DocFast HTML/Markdown to PDF API",
-  "type": "library",
-  "license": "MIT",
-  "homepage": "https://docfast.dev",
-  "keywords": ["pdf", "html-to-pdf", "laravel", "docfast"],
-  "require": {
-    "php": "^8.1",
-    "illuminate/support": "^10.0|^11.0|^12.0",
-    "docfast/docfast-php": "^1.0"
-  },
-  "autoload": {
-    "psr-4": {
-      "DocFast\\Laravel\\": "src/"
-    }
-  },
-  "extra": {
-    "laravel": {
-      "providers": [
-        "DocFast\\Laravel\\DocFastServiceProvider"
-      ],
-      "aliases": {
-        "DocFast": "DocFast\\Laravel\\Facades\\DocFast"
-      }
-    }
-  },
-  "authors": [
-    {
-      "name": "DocFast",
-      "homepage": "https://docfast.dev"
-    }
-  ]
-}
--- a/sdk/laravel/config/docfast.php
+++ b/sdk/laravel/config/docfast.php
@ -1,33 +0,0 @@
-<?php
-
-return [
-    /*
-    |--------------------------------------------------------------------------
-    | DocFast API Key
-    |--------------------------------------------------------------------------
-    |
-    | Your DocFast Pro API key. Get one at https://docfast.dev
-    |
-    */
-    'api_key' => env('DOCFAST_API_KEY'),
-
-    /*
-    |--------------------------------------------------------------------------
-    | Base URL
-    |--------------------------------------------------------------------------
-    |
-    | The DocFast API base URL. Change for staging or self-hosted instances.
-    |
-    */
-    'base_url' => env('DOCFAST_BASE_URL', 'https://docfast.dev'),
-
-    /*
-    |--------------------------------------------------------------------------
-    | Timeout
-    |--------------------------------------------------------------------------
-    |
-    | Request timeout in seconds for PDF generation.
-    |
-    */
-    'timeout' => env('DOCFAST_TIMEOUT', 60),
-];
--- a/sdk/laravel/src/DocFastServiceProvider.php
+++ b/sdk/laravel/src/DocFastServiceProvider.php
@ -1,34 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace DocFast\Laravel;
-
-use DocFast\Client;
-use Illuminate\Support\ServiceProvider;
-
-class DocFastServiceProvider extends ServiceProvider
-{
-    public function register(): void
-    {
-        $this->mergeConfigFrom(__DIR__ . '/../config/docfast.php', 'docfast');
-
-        $this->app->singleton(Client::class, function ($app) {
-            $config = $app['config']['docfast'];
-            return new Client(
-                $config['api_key'] ?? '',
-                $config['base_url'] ?? 'https://docfast.dev',
-                $config['timeout'] ?? 60,
-            );
-        });
-
-        $this->app->alias(Client::class, 'docfast');
-    }
-
-    public function boot(): void
-    {
-        $this->publishes([
-            __DIR__ . '/../config/docfast.php' => config_path('docfast.php'),
-        ], 'docfast-config');
-    }
-}
--- a/sdk/laravel/src/Facades/DocFast.php
+++ b/sdk/laravel/src/Facades/DocFast.php
@ -1,25 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace DocFast\Laravel\Facades;
-
-use DocFast\Client;
-use Illuminate\Support\Facades\Facade;
-
-/**
- * @method static string html(string $html, ?string $css = null, ?\DocFast\PdfOptions $options = null)
- * @method static string markdown(string $markdown, ?string $css = null, ?\DocFast\PdfOptions $options = null)
- * @method static string url(string $url, ?\DocFast\PdfOptions $options = null)
- * @method static array templates()
- * @method static string renderTemplate(string $templateId, array $data = [])
- *
- * @see \DocFast\Client
- */
-class DocFast extends Facade
-{
-    protected static function getFacadeAccessor(): string
-    {
-        return Client::class;
-    }
-}
--- a/sdk/nodejs/README.md
+++ b/sdk/nodejs/README.md
@ -1,95 +0,0 @@
-# DocFast Node.js SDK
-
-Official Node.js client for the [DocFast](https://docfast.dev) HTML-to-PDF API.
-
-## Install
-
-```bash
-npm install docfast
-```
-
-Requires Node.js 18+ (uses native `fetch`). Zero runtime dependencies.
-
-## Quick Start
-
-```typescript
-import DocFast from 'docfast';
-
-const client = new DocFast('df_pro_your_api_key');
-
-// HTML to PDF
-const pdf = await client.html('<h1>Hello World</h1>');
-fs.writeFileSync('output.pdf', pdf);
-
-// Markdown to PDF
-const pdf2 = await client.markdown('# Hello\n\nThis is **bold**.');
-fs.writeFileSync('doc.pdf', pdf2);
-
-// URL to PDF
-const pdf3 = await client.url('https://example.com');
-fs.writeFileSync('page.pdf', pdf3);
-```
-
-## API
-
-### `new DocFast(apiKey, options?)`
-
-| Parameter | Type | Description |
-|-----------|------|-------------|
-| `apiKey` | `string` | Your DocFast API key |
-| `options.baseUrl` | `string` | API base URL (default: `https://docfast.dev`) |
-
-### `client.html(html, options?)`
-
-Convert an HTML string to PDF. Returns `Promise<Buffer>`.
-
-### `client.markdown(markdown, options?)`
-
-Convert a Markdown string to PDF. Returns `Promise<Buffer>`.
-
-### `client.url(url, options?)`
-
-Convert a webpage URL to PDF. Returns `Promise<Buffer>`.
-
-### `client.templates()`
-
-List available templates. Returns `Promise<Template[]>`.
-
-### `client.renderTemplate(id, data, options?)`
-
-Render a template with data. Returns `Promise<Buffer>`.
-
-### PDF Options
-
-All conversion methods accept an optional `options` object:
-
-```typescript
-{
-  format: 'A4' | 'Letter' | 'Legal' | 'A3' | 'A5' | 'Tabloid',
-  landscape: boolean,
-  margin: { top: '20mm', bottom: '20mm', left: '15mm', right: '15mm' },
-  header: { content: '<div>Header HTML</div>', height: '30mm' },
-  footer: { content: '<div>Footer HTML</div>', height: '20mm' },
-  scale: 1.0,
-  printBackground: true,
-}
-```
-
-## Error Handling
-
-```typescript
-import DocFast, { DocFastError } from 'docfast';
-
-try {
-  const pdf = await client.html('<h1>Test</h1>');
-} catch (err) {
-  if (err instanceof DocFastError) {
-    console.error(err.message);  // "Invalid API key"
-    console.error(err.status);   // 403
-  }
-}
-```
-
-## License
-
-MIT
--- a/sdk/nodejs/package.json
+++ b/sdk/nodejs/package.json
@ -1,24 +0,0 @@
-{
-  "name": "docfast",
-  "version": "0.1.0",
-  "description": "Official Node.js client for the DocFast HTML-to-PDF API",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
-  "files": ["dist"],
-  "engines": { "node": ">=18.0.0" },
-  "scripts": {
-    "build": "tsc",
-    "prepublishOnly": "npm run build"
-  },
-  "keywords": ["pdf", "html-to-pdf", "markdown-to-pdf", "docfast", "api", "document"],
-  "author": "DocFast <support@docfast.dev>",
-  "license": "MIT",
-  "homepage": "https://docfast.dev",
-  "repository": {
-    "type": "git",
-    "url": "https://git.cloonar.com/openclawd/docfast"
-  },
-  "devDependencies": {
-    "typescript": "^5.0.0"
-  }
-}
--- a/sdk/nodejs/src/index.ts
+++ b/sdk/nodejs/src/index.ts
@ -1,129 +0,0 @@
-/**
- * DocFast — Official Node.js SDK
- * https://docfast.dev
- */
-
-export interface PdfMargin {
-  top?: string;
-  bottom?: string;
-  left?: string;
-  right?: string;
-}
-
-export interface HeaderFooter {
-  content?: string;
-  height?: string;
-}
-
-export interface PdfOptions {
-  format?: 'A4' | 'Letter' | 'Legal' | 'A3' | 'A5' | 'Tabloid';
-  landscape?: boolean;
-  margin?: PdfMargin;
-  header?: HeaderFooter;
-  footer?: HeaderFooter;
-  scale?: number;
-  printBackground?: boolean;
-}
-
-export interface Template {
-  id: string;
-  name: string;
-  description?: string;
-}
-
-export interface DocFastOptions {
-  baseUrl?: string;
-}
-
-export class DocFastError extends Error {
-  readonly status: number;
-  readonly code?: string;
-
-  constructor(message: string, status: number, code?: string) {
-    super(message);
-    this.name = 'DocFastError';
-    this.status = status;
-    this.code = code;
-  }
-}
-
-export class DocFast {
-  private readonly apiKey: string;
-  private readonly baseUrl: string;
-
-  constructor(apiKey: string, options?: DocFastOptions) {
-    if (!apiKey) throw new Error('API key is required');
-    this.apiKey = apiKey;
-    this.baseUrl = options?.baseUrl?.replace(/\/+$/, '') ?? 'https://docfast.dev';
-  }
-
-  private async request(path: string, body: Record<string, unknown>): Promise<Buffer> {
-    const res = await fetch(`${this.baseUrl}${path}`, {
-      method: 'POST',
-      headers: {
-        'Authorization': `Bearer ${this.apiKey}`,
-        'Content-Type': 'application/json',
-      },
-      body: JSON.stringify(body),
-    });
-
-    if (!res.ok) {
-      let message = `HTTP ${res.status}`;
-      let code: string | undefined;
-      try {
-        const err = await res.json() as { error?: string; code?: string };
-        if (err.error) message = err.error;
-        code = err.code;
-      } catch {}
-      throw new DocFastError(message, res.status, code);
-    }
-
-    const arrayBuffer = await res.arrayBuffer();
-    return Buffer.from(arrayBuffer);
-  }
-
-  private async requestJson<T>(method: string, path: string): Promise<T> {
-    const res = await fetch(`${this.baseUrl}${path}`, {
-      method,
-      headers: { 'Authorization': `Bearer ${this.apiKey}` },
-    });
-
-    if (!res.ok) {
-      let message = `HTTP ${res.status}`;
-      try {
-        const err = await res.json() as { error?: string };
-        if (err.error) message = err.error;
-      } catch {}
-      throw new DocFastError(message, res.status);
-    }
-
-    return res.json() as Promise<T>;
-  }
-
-  /** Convert HTML to PDF */
-  async html(html: string, options?: PdfOptions): Promise<Buffer> {
-    return this.request('/v1/convert/html', { html, options });
-  }
-
-  /** Convert Markdown to PDF */
-  async markdown(markdown: string, options?: PdfOptions): Promise<Buffer> {
-    return this.request('/v1/convert/markdown', { markdown, options });
-  }
-
-  /** Convert a URL to PDF */
-  async url(url: string, options?: PdfOptions): Promise<Buffer> {
-    return this.request('/v1/convert/url', { url, options });
-  }
-
-  /** List available templates */
-  async templates(): Promise<Template[]> {
-    return this.requestJson<Template[]>('GET', '/v1/templates');
-  }
-
-  /** Render a template to PDF */
-  async renderTemplate(id: string, data: Record<string, unknown>, options?: PdfOptions): Promise<Buffer> {
-    return this.request(`/v1/templates/${encodeURIComponent(id)}/render`, { data, options });
-  }
-}
-
-export default DocFast;
--- a/sdk/nodejs/tsconfig.json
+++ b/sdk/nodejs/tsconfig.json
@ -1,16 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "Node16",
-    "moduleResolution": "Node16",
-    "lib": ["ES2022"],
-    "outDir": "dist",
-    "rootDir": "src",
-    "declaration": true,
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true
-  },
-  "include": ["src"]
-}
--- a/sdk/php/README.md
+++ b/sdk/php/README.md
@ -1,156 +0,0 @@
-# DocFast PHP SDK
-
-Official PHP client for the [DocFast](https://docfast.dev) HTML/Markdown to PDF API.
-
-## Requirements
-
- PHP 8.1+
- ext-curl
- ext-json
-
-## Installation
-
-```bash
-composer require docfast/docfast-php
-```
-
-## Quick Start
-
-```php
-use DocFast\Client;
-
-$client = new Client('df_pro_your_api_key');
-
-// HTML to PDF
-$pdf = $client->html('<h1>Hello World</h1>');
-file_put_contents('output.pdf', $pdf);
-```
-
-## Usage
-
-### HTML to PDF
-
-```php
-$pdf = $client->html('<h1>Hello</h1><p>My document</p>');
-```
-
-### HTML with CSS
-
-```php
-$pdf = $client->html(
-    '<h1>Styled</h1>',
-    'h1 { color: navy; font-family: Georgia; }'
-);
-```
-
-### HTML with PDF Options
-
-```php
-use DocFast\PdfOptions;
-
-$options = new PdfOptions();
-$options->format = 'Letter';
-$options->landscape = true;
-$options->margin = ['top' => '20mm', 'bottom' => '20mm', 'left' => '15mm', 'right' => '15mm'];
-$options->printBackground = true;
-
-$pdf = $client->html('<h1>Report</h1>', null, $options);
-```
-
-### Markdown to PDF
-
-```php
-$pdf = $client->markdown('# Hello World\n\nThis is **bold** text.');
-```
-
-### URL to PDF
-
-```php
-$pdf = $client->url('https://example.com');
-```
-
-### Headers and Footers
-
-```php
-$options = new PdfOptions();
-$options->displayHeaderFooter = true;
-$options->headerTemplate = '<div style="font-size:10px;text-align:center;width:100%">My Document</div>';
-$options->footerTemplate = '<div style="font-size:10px;text-align:center;width:100%">Page <span class="pageNumber"></span>/<span class="totalPages"></span></div>';
-$options->margin = ['top' => '40mm', 'bottom' => '20mm'];
-
-$pdf = $client->html($html, null, $options);
-```
-
-### Custom Page Size
-
-```php
-$options = new PdfOptions();
-$options->width = '8.5in';
-$options->height = '11in';
-$options->scale = 0.8;
-
-$pdf = $client->html($html, null, $options);
-```
-
-### Templates
-
-```php
-// List templates
-$templates = $client->templates();
-
-// Render a template
-$pdf = $client->renderTemplate('invoice', [
-    'company' => 'Acme Corp',
-    'items' => [['name' => 'Widget', 'price' => 9.99]],
-]);
-```
-
-## PDF Options
-
-| Option | Type | Default | Description |
-|--------|------|---------|-------------|
-| `format` | string | `"A4"` | Page size: A4, Letter, Legal, A3, A5, Tabloid |
-| `landscape` | bool | `false` | Landscape orientation |
-| `margin` | array | `null` | Margins with top/bottom/left/right keys (CSS units) |
-| `printBackground` | bool | `true` | Print background graphics |
-| `filename` | string | `null` | Suggested filename |
-| `headerTemplate` | string | `null` | HTML header template |
-| `footerTemplate` | string | `null` | HTML footer template |
-| `displayHeaderFooter` | bool | `false` | Show header/footer |
-| `scale` | float | `1` | Rendering scale (0.1–2.0) |
-| `pageRanges` | string | `null` | Pages to print (e.g. "1-3,5") |
-| `preferCSSPageSize` | bool | `false` | Prefer CSS @page size |
-| `width` | string | `null` | Custom paper width |
-| `height` | string | `null` | Custom paper height |
-
-## Error Handling
-
-```php
-use DocFast\DocFastException;
-
-try {
-    $pdf = $client->html('<h1>Test</h1>');
-} catch (DocFastException $e) {
-    echo "Error: {$e->getMessage()} (status: {$e->statusCode})\n";
-}
-```
-
-## Configuration
-
-```php
-// Custom base URL
-$client = new Client('key', 'https://staging.docfast.dev');
-
-// Custom timeout (seconds)
-$client = new Client('key', 'https://docfast.dev', 120);
-```
-
-## Laravel Integration
-
-See the [DocFast Laravel package](../laravel/) for a dedicated Laravel integration with facades, config, and service provider.
-
-## Links
-
- [Documentation](https://docfast.dev/docs)
- [API Reference](https://docfast.dev/openapi.json)
- [Get an API Key](https://docfast.dev)
--- a/sdk/php/composer.json
+++ b/sdk/php/composer.json
@ -1,24 +0,0 @@
-{
-  "name": "docfast/docfast-php",
-  "description": "Official PHP SDK for the DocFast HTML/Markdown to PDF API",
-  "type": "library",
-  "license": "MIT",
-  "homepage": "https://docfast.dev",
-  "keywords": ["pdf", "html-to-pdf", "markdown-to-pdf", "api", "docfast"],
-  "require": {
-    "php": "^8.1",
-    "ext-json": "*",
-    "ext-curl": "*"
-  },
-  "autoload": {
-    "psr-4": {
-      "DocFast\\": "src/"
-    }
-  },
-  "authors": [
-    {
-      "name": "DocFast",
-      "homepage": "https://docfast.dev"
-    }
-  ]
-}
--- a/sdk/php/src/Client.php
+++ b/sdk/php/src/Client.php
@ -1,183 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace DocFast;
-
-/**
- * DocFast API client for HTML/Markdown to PDF conversion.
- *
- * @see https://docfast.dev/docs
- */
-class Client
-{
-    private string $apiKey;
-    private string $baseUrl;
-    private int $timeout;
-
-    public function __construct(string $apiKey, string $baseUrl = 'https://docfast.dev', int $timeout = 60)
-    {
-        if (empty($apiKey)) {
-            throw new \InvalidArgumentException('API key is required');
-        }
-        $this->apiKey = $apiKey;
-        $this->baseUrl = rtrim($baseUrl, '/');
-        $this->timeout = $timeout;
-    }
-
-    /**
-     * Convert HTML to PDF.
-     *
-     * @param string $html HTML content
-     * @param string|null $css Optional CSS to inject
-     * @param PdfOptions|null $options PDF options
-     * @return string Raw PDF bytes
-     * @throws DocFastException
-     */
-    public function html(string $html, ?string $css = null, ?PdfOptions $options = null): string
-    {
-        $body = ['html' => $html];
-        if ($css !== null) {
-            $body['css'] = $css;
-        }
-        return $this->convert('/v1/convert/html', $body, $options);
-    }
-
-    /**
-     * Convert Markdown to PDF.
-     *
-     * @param string $markdown Markdown content
-     * @param string|null $css Optional CSS to inject
-     * @param PdfOptions|null $options PDF options
-     * @return string Raw PDF bytes
-     * @throws DocFastException
-     */
-    public function markdown(string $markdown, ?string $css = null, ?PdfOptions $options = null): string
-    {
-        $body = ['markdown' => $markdown];
-        if ($css !== null) {
-            $body['css'] = $css;
-        }
-        return $this->convert('/v1/convert/markdown', $body, $options);
-    }
-
-    /**
-     * Convert a URL to PDF.
-     *
-     * @param string $url URL to convert
-     * @param PdfOptions|null $options PDF options
-     * @return string Raw PDF bytes
-     * @throws DocFastException
-     */
-    public function url(string $url, ?PdfOptions $options = null): string
-    {
-        return $this->convert('/v1/convert/url', ['url' => $url], $options);
-    }
-
-    /**
-     * List available templates.
-     *
-     * @return array<array{id: string, name: string, description?: string}>
-     * @throws DocFastException
-     */
-    public function templates(): array
-    {
-        $data = $this->get('/v1/templates');
-        $result = json_decode($data, true);
-        return $result['templates'] ?? [];
-    }
-
-    /**
-     * Render a template to PDF.
-     *
-     * @param string $templateId Template ID
-     * @param array $data Template data
-     * @return string Raw PDF bytes
-     * @throws DocFastException
-     */
-    public function renderTemplate(string $templateId, array $data = []): string
-    {
-        return $this->post('/v1/templates/' . urlencode($templateId), ['data' => $data]);
-    }
-
-    private function convert(string $path, array $body, ?PdfOptions $options): string
-    {
-        if ($options !== null) {
-            $body = array_merge($body, $options->toArray());
-        }
-        return $this->post($path, $body);
-    }
-
-    private function post(string $path, array $body): string
-    {
-        $ch = curl_init($this->baseUrl . $path);
-        curl_setopt_array($ch, [
-            CURLOPT_POST => true,
-            CURLOPT_POSTFIELDS => json_encode($body),
-            CURLOPT_RETURNTRANSFER => true,
-            CURLOPT_TIMEOUT => $this->timeout,
-            CURLOPT_HTTPHEADER => [
-                'Authorization: Bearer ' . $this->apiKey,
-                'Content-Type: application/json',
-                'Accept: application/pdf',
-            ],
-        ]);
-
-        $response = curl_exec($ch);
-        $statusCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-        $error = curl_error($ch);
-        curl_close($ch);
-
-        if ($response === false) {
-            throw new DocFastException('Request failed: ' . $error, 0);
-        }
-
-        if ($statusCode >= 400) {
-            $this->handleError($response, $statusCode);
-        }
-
-        return $response;
-    }
-
-    private function get(string $path): string
-    {
-        $ch = curl_init($this->baseUrl . $path);
-        curl_setopt_array($ch, [
-            CURLOPT_RETURNTRANSFER => true,
-            CURLOPT_TIMEOUT => $this->timeout,
-            CURLOPT_HTTPHEADER => [
-                'Authorization: Bearer ' . $this->apiKey,
-                'Accept: application/json',
-            ],
-        ]);
-
-        $response = curl_exec($ch);
-        $statusCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-        $error = curl_error($ch);
-        curl_close($ch);
-
-        if ($response === false) {
-            throw new DocFastException('Request failed: ' . $error, 0);
-        }
-
-        if ($statusCode >= 400) {
-            $this->handleError($response, $statusCode);
-        }
-
-        return $response;
-    }
-
-    private function handleError(string $response, int $statusCode): never
-    {
-        $message = "HTTP $statusCode";
-        $code = null;
-
-        $data = json_decode($response, true);
-        if (is_array($data)) {
-            $message = $data['error'] ?? $message;
-            $code = $data['code'] ?? null;
-        }
-
-        throw new DocFastException($message, $statusCode, $code);
-    }
-}
--- a/sdk/php/src/DocFastException.php
+++ b/sdk/php/src/DocFastException.php
@ -1,18 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace DocFast;
-
-class DocFastException extends \RuntimeException
-{
-    public readonly int $statusCode;
-    public readonly ?string $errorCode;
-
-    public function __construct(string $message, int $statusCode, ?string $errorCode = null, ?\Throwable $previous = null)
-    {
-        $this->statusCode = $statusCode;
-        $this->errorCode = $errorCode;
-        parent::__construct($message, $statusCode, $previous);
-    }
-}
--- a/sdk/php/src/PdfOptions.php
+++ b/sdk/php/src/PdfOptions.php
@ -1,65 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace DocFast;
-
-/**
- * PDF generation options.
- */
-class PdfOptions
-{
-    /** Page size: A4, Letter, Legal, A3, A5, Tabloid. Ignored if width/height set. */
-    public ?string $format = null;
-
-    /** Landscape orientation. */
-    public ?bool $landscape = null;
-
-    /** Page margins using CSS units (e.g. "20mm"). */
-    public ?array $margin = null;
-
-    /** Print background graphics and colors. */
-    public ?bool $printBackground = null;
-
-    /** Suggested filename for the PDF download. */
-    public ?string $filename = null;
-
-    /** HTML template for page header. Requires displayHeaderFooter: true. */
-    public ?string $headerTemplate = null;
-
-    /** HTML template for page footer. */
-    public ?string $footerTemplate = null;
-
-    /** Show header and footer templates. */
-    public ?bool $displayHeaderFooter = null;
-
-    /** Scale of webpage rendering (0.1 to 2.0). */
-    public ?float $scale = null;
-
-    /** Paper ranges to print, e.g. "1-3,5". */
-    public ?string $pageRanges = null;
-
-    /** Give CSS @page size priority over format. */
-    public ?bool $preferCSSPageSize = null;
-
-    /** Paper width with units (e.g. "8.5in"). Overrides format. */
-    public ?string $width = null;
-
-    /** Paper height with units (e.g. "11in"). Overrides format. */
-    public ?string $height = null;
-
-    public function toArray(): array
-    {
-        $data = [];
-        foreach ([
-            'format', 'landscape', 'margin', 'printBackground', 'filename',
-            'headerTemplate', 'footerTemplate', 'displayHeaderFooter',
-            'scale', 'pageRanges', 'preferCSSPageSize', 'width', 'height',
-        ] as $key) {
-            if ($this->$key !== null) {
-                $data[$key] = $this->$key;
-            }
-        }
-        return $data;
-    }
-}
--- a/sdk/python/README.md
+++ b/sdk/python/README.md
@ -1,103 +0,0 @@
-# DocFast Python SDK
-
-Official Python client for the [DocFast](https://docfast.dev) HTML-to-PDF API.
-
-## Install
-
-```bash
-pip install docfast
-```
-
-Requires Python 3.8+.
-
-## Quick Start
-
-```python
-from docfast import DocFast
-
-client = DocFast("df_pro_your_api_key")
-
-# HTML to PDF
-pdf = client.html("<h1>Hello World</h1>")
-with open("output.pdf", "wb") as f:
-    f.write(pdf)
-
-# Markdown to PDF
-pdf = client.markdown("# Hello\n\nThis is **bold**.")
-
-# URL to PDF
-pdf = client.url("https://example.com")
-```
-
-## Async Usage
-
-```python
-from docfast import AsyncDocFast
-
-async with AsyncDocFast("df_pro_your_api_key") as client:
-    pdf = await client.html("<h1>Hello</h1>")
-```
-
-## API
-
-### `DocFast(api_key, *, base_url=None)`
-
-Create a synchronous client. Use as a context manager or call `client.close()`.
-
-### `AsyncDocFast(api_key, *, base_url=None)`
-
-Create an async client. Use as an async context manager.
-
-### Conversion Methods
-
-All methods return PDF bytes and accept optional keyword arguments:
-
-| Method | Input | Description |
-|--------|-------|-------------|
-| `client.html(html, **opts)` | HTML string | Convert HTML to PDF |
-| `client.markdown(markdown, **opts)` | Markdown string | Convert Markdown to PDF |
-| `client.url(url, **opts)` | URL string | Convert webpage to PDF |
-| `client.templates()` | — | List available templates |
-| `client.render_template(id, data, **opts)` | Template ID + data dict | Render template to PDF |
-
-### PDF Options
-
-Pass as keyword arguments to any conversion method:
-
-```python
-pdf = client.html(
-    "<h1>Report</h1>",
-    format="A4",
-    landscape=True,
-    margin={"top": "20mm", "bottom": "20mm"},
-    print_background=True,
-)
-```
-
-| Option | Type | Default | Description |
-|--------|------|---------|-------------|
-| `format` | str | `"A4"` | Page size: A4, Letter, Legal, A3, A5, Tabloid |
-| `landscape` | bool | `False` | Landscape orientation |
-| `margin` | dict | — | `{top, bottom, left, right}` in CSS units |
-| `header` | dict | — | `{content, height}` for page header |
-| `footer` | dict | — | `{content, height}` for page footer |
-| `scale` | float | `1.0` | Render scale |
-| `print_background` | bool | `False` | Include background colors/images |
-
-## Error Handling
-
-```python
-from docfast import DocFast, DocFastError
-
-client = DocFast("df_pro_your_api_key")
-
-try:
-    pdf = client.html("<h1>Test</h1>")
-except DocFastError as e:
-    print(e)          # "Invalid API key"
-    print(e.status)   # 403
-```
-
-## License
-
-MIT
--- a/sdk/python/docfast/init.py
+++ b/sdk/python/docfast/init.py
@ -1,6 +0,0 @@
-"""DocFast — Official Python SDK for the HTML-to-PDF API."""
-
-from .client import DocFast, AsyncDocFast, DocFastError
-
-__all__ = ["DocFast", "AsyncDocFast", "DocFastError"]
-__version__ = "0.1.0"
--- a/sdk/python/docfast/client.py
+++ b/sdk/python/docfast/client.py
@ -1,148 +0,0 @@
-"""DocFast API clients (sync and async)."""
-
-from __future__ import annotations
-
-from typing import Any, Dict, List, Optional
-from urllib.parse import quote
-
-import httpx
-
-
-class DocFastError(Exception):
-    """Error returned by the DocFast API."""
-
-    def __init__(self, message: str, status: int, code: Optional[str] = None):
-        super().__init__(message)
-        self.status = status
-        self.code = code
-
-
-_KEY_MAP = {"print_background": "printBackground"}
-
-
-def _build_body(key: str, value: str, options: Optional[Dict[str, Any]]) -> Dict[str, Any]:
-    body: Dict[str, Any] = {key: value}
-    if options:
-        body["options"] = {_KEY_MAP.get(k, k): v for k, v in options.items()}
-    return body
-
-
-def _handle_error(response: httpx.Response) -> None:
-    if response.is_success:
-        return
-    message = f"HTTP {response.status_code}"
-    code = None
-    try:
-        data = response.json()
-        if "error" in data:
-            message = data["error"]
-        code = data.get("code")
-    except Exception:
-        pass
-    raise DocFastError(message, response.status_code, code)
-
-
-class DocFast:
-    """Synchronous DocFast client."""
-
-    def __init__(self, api_key: str, *, base_url: Optional[str] = None):
-        if not api_key:
-            raise ValueError("API key is required")
-        self._base_url = (base_url or "https://docfast.dev").rstrip("/")
-        self._client = httpx.Client(
-            base_url=self._base_url,
-            headers={"Authorization": f"Bearer {api_key}"},
-            timeout=120.0,
-        )
-
-    def __enter__(self) -> "DocFast":
-        return self
-
-    def __exit__(self, *args: Any) -> None:
-        self.close()
-
-    def close(self) -> None:
-        self._client.close()
-
-    def _convert(self, path: str, body: Dict[str, Any]) -> bytes:
-        r = self._client.post(path, json=body)
-        _handle_error(r)
-        return r.content
-
-    def html(self, html: str, **options: Any) -> bytes:
-        """Convert HTML to PDF."""
-        return self._convert("/v1/convert/html", _build_body("html", html, options or None))
-
-    def markdown(self, markdown: str, **options: Any) -> bytes:
-        """Convert Markdown to PDF."""
-        return self._convert("/v1/convert/markdown", _build_body("markdown", markdown, options or None))
-
-    def url(self, url: str, **options: Any) -> bytes:
-        """Convert a URL to PDF."""
-        return self._convert("/v1/convert/url", _build_body("url", url, options or None))
-
-    def templates(self) -> List[Dict[str, Any]]:
-        """List available templates."""
-        r = self._client.get("/v1/templates")
-        _handle_error(r)
-        return r.json()
-
-    def render_template(self, template_id: str, data: Dict[str, Any], **options: Any) -> bytes:
-        """Render a template to PDF."""
-        body: Dict[str, Any] = {"data": data}
-        if options:
-            body["options"] = options
-        return self._convert(f"/v1/templates/{quote(template_id, safe='')}/render", body)
-
-
-class AsyncDocFast:
-    """Asynchronous DocFast client."""
-
-    def __init__(self, api_key: str, *, base_url: Optional[str] = None):
-        if not api_key:
-            raise ValueError("API key is required")
-        self._base_url = (base_url or "https://docfast.dev").rstrip("/")
-        self._client = httpx.AsyncClient(
-            base_url=self._base_url,
-            headers={"Authorization": f"Bearer {api_key}"},
-            timeout=120.0,
-        )
-
-    async def __aenter__(self) -> "AsyncDocFast":
-        return self
-
-    async def __aexit__(self, *args: Any) -> None:
-        await self.close()
-
-    async def close(self) -> None:
-        await self._client.aclose()
-
-    async def _convert(self, path: str, body: Dict[str, Any]) -> bytes:
-        r = await self._client.post(path, json=body)
-        _handle_error(r)
-        return r.content
-
-    async def html(self, html: str, **options: Any) -> bytes:
-        """Convert HTML to PDF."""
-        return await self._convert("/v1/convert/html", _build_body("html", html, options or None))
-
-    async def markdown(self, markdown: str, **options: Any) -> bytes:
-        """Convert Markdown to PDF."""
-        return await self._convert("/v1/convert/markdown", _build_body("markdown", markdown, options or None))
-
-    async def url(self, url: str, **options: Any) -> bytes:
-        """Convert a URL to PDF."""
-        return await self._convert("/v1/convert/url", _build_body("url", url, options or None))
-
-    async def templates(self) -> List[Dict[str, Any]]:
-        """List available templates."""
-        r = await self._client.get("/v1/templates")
-        _handle_error(r)
-        return r.json()
-
-    async def render_template(self, template_id: str, data: Dict[str, Any], **options: Any) -> bytes:
-        """Render a template to PDF."""
-        body: Dict[str, Any] = {"data": data}
-        if options:
-            body["options"] = options
-        return await self._convert(f"/v1/templates/{quote(template_id, safe='')}/render", body)
--- a/sdk/python/pyproject.toml
+++ b/sdk/python/pyproject.toml
@ -1,26 +0,0 @@
-[build-system]
-requires = ["hatchling"]
-build-backend = "hatchling.build"
-
-[project]
-name = "docfast"
-version = "0.1.0"
-description = "Official Python client for the DocFast HTML-to-PDF API"
-readme = "README.md"
-license = "MIT"
-requires-python = ">=3.8"
-authors = [{ name = "DocFast", email = "support@docfast.dev" }]
-keywords = ["pdf", "html-to-pdf", "markdown-to-pdf", "docfast", "api"]
-classifiers = [
-    "Development Status :: 4 - Beta",
-    "Intended Audience :: Developers",
-    "License :: OSI Approved :: MIT License",
-    "Programming Language :: Python :: 3",
-    "Topic :: Software Development :: Libraries",
-]
-dependencies = ["httpx>=0.24.0"]
-
-[project.urls]
-Homepage = "https://docfast.dev"
-Documentation = "https://docfast.dev/docs"
-Repository = "https://git.cloonar.com/openclawd/docfast"
--- a/sessions.md
+++ b/sessions.md
@ -0,0 +1,37 @@
+# DocFast Sessions Log
+
+## 2026-02-14 22:14 UTC — Deployment + QA Session
+
+**Trigger:** Latest code changes (Swagger UI, key recovery UI, email change) were not deployed despite being in the working tree.
+
+**Actions:**
+1. SSH'd into server (167.235.156.214)
+2. Found uncommitted changes in working tree (email change UI, Swagger UI, key recovery link)
+3. Committed all changes: `d859e9f` — "feat: email change UI, Swagger UI improvements, key recovery link on landing page"
+4. Pushed to Forgejo (openclawd/docfast)
+5. Rebuilt container with `docker compose build --no-cache`
+6. Restarted: `docker compose up -d`
+7. Verified server healthy: 15-page browser pool, version 0.2.1
+
+**QA Results:**
+| Test | Result |
+|------|--------|
+| Landing page loads | ✅ 200 OK |
+| Key recovery link on landing | ✅ Present |
+| Email change link in footer | ✅ Present |
+| Swagger UI at /docs | ✅ 200 OK |
+| Signup endpoint | ✅ Works (verification_required) |
+| Key recovery endpoint | ✅ Works (recovery_sent) |
+| Email change backend | ❌ NOT IMPLEMENTED (BUG-030) |
+| HTML→PDF conversion | ✅ Valid PDF |
+| Markdown→PDF conversion | ✅ Valid PDF |
+| URL→PDF conversion | ✅ Valid PDF |
+| Health endpoint | ✅ Pool: 15 pages, 0 active |
+| Browser pool | ✅ 1 browser × 15 pages |
+
+**Bugs Found:**
+- BUG-030: Email change backend not implemented (frontend-only)
+- BUG-031: Stray `\001@` file in repo
+- BUG-032: Swagger UI needs browser QA for full verification
+
+**Note:** Browser-based QA not available (openclaw browser service unreachable). Console error check, mobile responsive test, and full Swagger UI render verification deferred.
--- a/src/tests/admin-integration.test.ts
+++ b/src/tests/admin-integration.test.ts
@ -1,187 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-import express from "express";
-import request from "supertest";
-
-// Mock all heavy dependencies
-vi.mock("../services/browser.js", () => ({
-  renderPdf: vi.fn(),
-  renderUrlPdf: vi.fn(),
-  initBrowser: vi.fn(),
-  closeBrowser: vi.fn(),
-}));
-
-vi.mock("../services/keys.js", () => ({
-  loadKeys: vi.fn(),
-  getAllKeys: vi.fn().mockReturnValue([]),
-  isValidKey: vi.fn(),
-  getKeyInfo: vi.fn(),
-  isProKey: vi.fn(),
-  keyStore: new Map(),
-}));
-
-vi.mock("../services/db.js", () => ({
-  initDatabase: vi.fn(),
-  pool: { query: vi.fn(), end: vi.fn() },
-  queryWithRetry: vi.fn(),
-  connectWithRetry: vi.fn(),
-  cleanupStaleData: vi.fn(),
-}));
-
-vi.mock("../services/verification.js", () => ({
-  verifyToken: vi.fn(),
-  loadVerifications: vi.fn(),
-}));
-
-vi.mock("../middleware/usage.js", () => ({
-  usageMiddleware: (_req: any, _res: any, next: any) => next(),
-  loadUsageData: vi.fn(),
-  getUsageStats: vi.fn().mockReturnValue({ "test-key": { count: 42, month: "2026-03" } }),
-  getUsageForKey: vi.fn().mockReturnValue({ count: 10, monthKey: "2026-03" }),
-  flushDirtyEntries: vi.fn(),
-}));
-
-vi.mock("../middleware/pdfRateLimit.js", () => ({
-  pdfRateLimitMiddleware: (_req: any, _res: any, next: any) => next(),
-  getConcurrencyStats: vi.fn().mockReturnValue({ active: 2, queued: 0, maxConcurrent: 10 }),
-}));
-
-const TEST_KEY = "test-key-123";
-const ADMIN_KEY = "admin-key-456";
-
-describe("Admin integration tests", () => {
-  let app: express.Express;
-  let originalAdminKey: string | undefined;
-
-  beforeEach(async () => {
-    vi.clearAllMocks();
-    vi.resetModules();
-
-    originalAdminKey = process.env.ADMIN_API_KEY;
-    process.env.ADMIN_API_KEY = ADMIN_KEY;
-
-    // Set up key mocks
-    const keys = await import("../services/keys.js");
-    vi.mocked(keys.isValidKey).mockImplementation((k: string) => k === TEST_KEY || k === ADMIN_KEY);
-    vi.mocked(keys.getKeyInfo).mockImplementation((k: string) => {
-      if (k === TEST_KEY) return { key: TEST_KEY, tier: "free" as const, email: "test@test.com", createdAt: "2026-01-01" };
-      if (k === ADMIN_KEY) return { key: ADMIN_KEY, tier: "pro" as const, email: "admin@test.com", createdAt: "2026-01-01" };
-      return undefined;
-    });
-    vi.mocked(keys.isProKey).mockImplementation((k: string) => k === ADMIN_KEY);
-
-    const { adminRouter } = await import("../routes/admin.js");
-    app = express();
-    app.use(express.json());
-    app.use(adminRouter);
-  });
-
-  afterEach(() => {
-    if (originalAdminKey !== undefined) {
-      process.env.ADMIN_API_KEY = originalAdminKey;
-    } else {
-      delete process.env.ADMIN_API_KEY;
-    }
-  });
-
-  describe("GET /v1/usage/me", () => {
-    it("returns 401 without auth", async () => {
-      const res = await request(app).get("/v1/usage/me");
-      expect(res.status).toBe(401);
-    });
-
-    it("returns 403 with invalid key", async () => {
-      const res = await request(app).get("/v1/usage/me").set("X-API-Key", "bad-key");
-      expect(res.status).toBe(403);
-    });
-
-    it("returns usage stats with Bearer auth", async () => {
-      const res = await request(app).get("/v1/usage/me").set("Authorization", `Bearer ${TEST_KEY}`);
-      expect(res.status).toBe(200);
-      expect(res.body).toMatchObject({
-        used: 10,
-        limit: 100,
-        plan: "demo",
-        month: "2026-03",
-      });
-    });
-
-    it("returns usage stats with X-API-Key auth", async () => {
-      const res = await request(app).get("/v1/usage/me").set("X-API-Key", TEST_KEY);
-      expect(res.status).toBe(200);
-      expect(res.body.plan).toBe("demo");
-    });
-
-    it("returns pro plan for pro key", async () => {
-      const res = await request(app).get("/v1/usage/me").set("X-API-Key", ADMIN_KEY);
-      expect(res.status).toBe(200);
-      expect(res.body).toMatchObject({
-        plan: "pro",
-        limit: 5000,
-      });
-    });
-  });
-
-  describe("GET /v1/usage (admin)", () => {
-    it("returns 401 without auth", async () => {
-      const res = await request(app).get("/v1/usage");
-      expect(res.status).toBe(401);
-    });
-
-    it("returns 403 with non-admin key", async () => {
-      const res = await request(app).get("/v1/usage").set("X-API-Key", TEST_KEY);
-      expect(res.status).toBe(403);
-      expect(res.body.error).toBe("Admin access required");
-    });
-
-    it("returns usage stats with admin key", async () => {
-      const res = await request(app).get("/v1/usage").set("X-API-Key", ADMIN_KEY);
-      expect(res.status).toBe(200);
-      expect(res.body).toHaveProperty("test-key");
-    });
-
-    it("returns 503 when ADMIN_API_KEY not set", async () => {
-      delete process.env.ADMIN_API_KEY;
-      const res = await request(app).get("/v1/usage").set("X-API-Key", ADMIN_KEY);
-      expect(res.status).toBe(503);
-      expect(res.body.error).toBe("Admin access not configured");
-    });
-  });
-
-  describe("GET /v1/concurrency (admin)", () => {
-    it("returns 403 with non-admin key", async () => {
-      const res = await request(app).get("/v1/concurrency").set("X-API-Key", TEST_KEY);
-      expect(res.status).toBe(403);
-    });
-
-    it("returns concurrency stats with admin key", async () => {
-      const res = await request(app).get("/v1/concurrency").set("X-API-Key", ADMIN_KEY);
-      expect(res.status).toBe(200);
-      expect(res.body).toMatchObject({ active: 2, queued: 0, maxConcurrent: 10 });
-    });
-  });
-
-  describe("POST /admin/cleanup (admin)", () => {
-    it("returns 403 with non-admin key", async () => {
-      const res = await request(app).post("/admin/cleanup").set("X-API-Key", TEST_KEY);
-      expect(res.status).toBe(403);
-    });
-
-    it("returns cleanup results with admin key", async () => {
-      const { cleanupStaleData } = await import("../services/db.js");
-      vi.mocked(cleanupStaleData).mockResolvedValue({ deletedRows: 5 } as any);
-
-      const res = await request(app).post("/admin/cleanup").set("X-API-Key", ADMIN_KEY);
-      expect(res.status).toBe(200);
-      expect(res.body).toMatchObject({ status: "ok", cleaned: { deletedRows: 5 } });
-    });
-
-    it("returns 500 when cleanup fails", async () => {
-      const { cleanupStaleData } = await import("../services/db.js");
-      vi.mocked(cleanupStaleData).mockRejectedValue(new Error("DB error"));
-
-      const res = await request(app).post("/admin/cleanup").set("X-API-Key", ADMIN_KEY);
-      expect(res.status).toBe(500);
-      expect(res.body.error).toBe("Cleanup failed");
-    });
-  });
-});
--- a/src/tests/admin-routes.test.ts
+++ b/src/tests/admin-routes.test.ts
@ -1,19 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { adminRouter } from "../routes/admin.js";
-
-describe("admin router extraction", () => {
-  it("exports adminRouter", () => {
-    expect(adminRouter).toBeDefined();
-  });
-
-  it("adminRouter is an Express Router", () => {
-    // Express routers have a stack property
-    expect((adminRouter as any).stack).toBeDefined();
-    expect(Array.isArray((adminRouter as any).stack)).toBe(true);
-  });
-
-  it("has routes registered", () => {
-    const stack = (adminRouter as any).stack;
-    expect(stack.length).toBeGreaterThan(0);
-  });
-});
--- a/src/tests/api.test.ts
+++ b/src/tests/api.test.ts
@ -1,25 +1,30 @@
-import { describe, it, expect, beforeAll, afterAll, vi } from "vitest";
+import { describe, it, expect, beforeAll, afterAll } from "vitest";
+import express from "express";
 import { app } from "../index.js";
-import type { Server } from "http";
+
+// Note: These tests require Puppeteer/Chrome to be available
+// For CI, use the Dockerfile which includes Chrome

 const BASE = "http://localhost:3199";
-let server: Server;
+let server: any;

 beforeAll(async () => {
+  process.env.API_KEYS = "test-key";
+  process.env.PORT = "3199";
+  // Import fresh to pick up env
  server = app.listen(3199);
-  await new Promise((r) => setTimeout(r, 200));
+  // Wait for browser init
+  await new Promise((r) => setTimeout(r, 2000));
 });

 afterAll(async () => {
-  await new Promise<void>((resolve) => server?.close(() => resolve()));
+  server?.close();
 });

 describe("Auth", () => {
  it("rejects requests without API key", async () => {
    const res = await fetch(`${BASE}/v1/convert/html`, { method: "POST" });
    expect(res.status).toBe(401);
-    const data = await res.json();
-    expect(data.error).toBeDefined();
  });

  it("rejects invalid API key", async () => {
@ -28,8 +33,6 @@ describe("Auth", () => {
      headers: { Authorization: "Bearer wrong-key" },
    });
    expect(res.status).toBe(403);
-    const data = await res.json();
-    expect(data.error).toBeDefined();
  });
 });

@ -40,45 +43,23 @@ describe("Health", () => {
    const data = await res.json();
    expect(data.status).toBe("ok");
  });
-
-  it("includes database field", async () => {
-    const res = await fetch(`${BASE}/health`);
-    expect(res.status).toBe(200);
-    const data = await res.json();
-    expect(data.database).toBeDefined();
-    expect(data.database.status).toBeDefined();
-  });
-
-  it("includes pool field with size, active, available", async () => {
-    const res = await fetch(`${BASE}/health`);
-    expect(res.status).toBe(200);
-    const data = await res.json();
-    expect(data.pool).toBeDefined();
-    expect(typeof data.pool.size).toBe("number");
-    expect(typeof data.pool.active).toBe("number");
-    expect(typeof data.pool.available).toBe("number");
-  });
-
-  it("includes version field", async () => {
-    const res = await fetch(`${BASE}/health`);
-    expect(res.status).toBe(200);
-    const data = await res.json();
-    expect(data.version).toBeDefined();
-    expect(typeof data.version).toBe("string");
-  });
 });

 describe("HTML to PDF", () => {
  it("converts simple HTML", async () => {
    const res = await fetch(`${BASE}/v1/convert/html`, {
      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
+      headers: {
+        Authorization: "Bearer test-key",
+        "Content-Type": "application/json",
+      },
      body: JSON.stringify({ html: "<h1>Test</h1>" }),
    });
    expect(res.status).toBe(200);
    expect(res.headers.get("content-type")).toBe("application/pdf");
    const buf = await res.arrayBuffer();
-    expect(buf.byteLength).toBeGreaterThan(10);
+    expect(buf.byteLength).toBeGreaterThan(100);
+    // PDF magic bytes
    const header = new Uint8Array(buf.slice(0, 5));
    expect(String.fromCharCode(...header)).toBe("%PDF-");
  });
@ -86,76 +67,24 @@ describe("HTML to PDF", () => {
  it("rejects missing html field", async () => {
    const res = await fetch(`${BASE}/v1/convert/html`, {
      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
+      headers: {
+        Authorization: "Bearer test-key",
+        "Content-Type": "application/json",
+      },
      body: JSON.stringify({}),
    });
    expect(res.status).toBe(400);
  });
-
-  it("converts HTML with A3 format option", async () => {
-    const res = await fetch(`${BASE}/v1/convert/html`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: JSON.stringify({ html: "<h1>A3 Test</h1>", options: { format: "A3" } }),
-    });
-    expect(res.status).toBe(200);
-    expect(res.headers.get("content-type")).toBe("application/pdf");
-  });
-
-  it("converts HTML with landscape option", async () => {
-    const res = await fetch(`${BASE}/v1/convert/html`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: JSON.stringify({ html: "<h1>Landscape Test</h1>", options: { landscape: true } }),
-    });
-    expect(res.status).toBe(200);
-    expect(res.headers.get("content-type")).toBe("application/pdf");
-  });
-
-  it("converts HTML with margin options", async () => {
-    const res = await fetch(`${BASE}/v1/convert/html`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: JSON.stringify({ html: "<h1>Margin Test</h1>", options: { margin: { top: "2cm" } } }),
-    });
-    expect(res.status).toBe(200);
-    expect(res.headers.get("content-type")).toBe("application/pdf");
-  });
-
-  it("rejects invalid JSON body", async () => {
-    const res = await fetch(`${BASE}/v1/convert/html`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: "invalid json{",
-    });
-    expect(res.status).toBe(400);
-  });
-
-  it("rejects wrong content-type header", async () => {
-    const res = await fetch(`${BASE}/v1/convert/html`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "text/plain" },
-      body: JSON.stringify({ html: "<h1>Test</h1>" }),
-    });
-    expect(res.status).toBe(415);
-  });
-
-  it("handles empty html string", async () => {
-    const res = await fetch(`${BASE}/v1/convert/html`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: JSON.stringify({ html: "" }),
-    });
-    // Empty HTML should still generate a PDF (just blank) - but validation may reject it
-    expect([200, 400]).toContain(res.status);
-  });
 });

 describe("Markdown to PDF", () => {
  it("converts markdown", async () => {
    const res = await fetch(`${BASE}/v1/convert/markdown`, {
      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
+      headers: {
+        Authorization: "Bearer test-key",
+        "Content-Type": "application/json",
+      },
      body: JSON.stringify({ markdown: "# Hello\n\nWorld" }),
    });
    expect(res.status).toBe(200);
@ -163,145 +92,6 @@ describe("Markdown to PDF", () => {
  });
 });

-describe("URL to PDF", () => {
-  it("rejects missing url field", async () => {
-    const res = await fetch(`${BASE}/v1/convert/url`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: JSON.stringify({}),
-    });
-    expect(res.status).toBe(400);
-    const data = await res.json();
-    expect(data.error).toContain("url");
-  });
-
-  it("blocks private IP addresses (SSRF protection)", async () => {
-    const res = await fetch(`${BASE}/v1/convert/url`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: JSON.stringify({ url: "http://127.0.0.1" }),
-    });
-    expect(res.status).toBe(400);
-    const data = await res.json();
-    expect(data.error).toContain("private");
-  });
-
-  it("blocks localhost (SSRF protection)", async () => {
-    const res = await fetch(`${BASE}/v1/convert/url`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: JSON.stringify({ url: "http://localhost" }),
-    });
-    expect(res.status).toBe(400);
-    const data = await res.json();
-    expect(data.error).toContain("private");
-  });
-
-  it("blocks 0.0.0.0 (SSRF protection)", async () => {
-    const res = await fetch(`${BASE}/v1/convert/url`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: JSON.stringify({ url: "http://0.0.0.0" }),
-    });
-    expect(res.status).toBe(400);
-    const data = await res.json();
-    expect(data.error).toContain("private");
-  });
-
-  it("returns default filename in Content-Disposition for /convert/html", async () => {
-    const res = await fetch(`${BASE}/v1/convert/html`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: JSON.stringify({ html: "<p>hello</p>" }),
-    });
-    expect(res.status).toBe(200);
-    const disposition = res.headers.get("content-disposition");
-    expect(disposition).toContain('filename="document.pdf"');
-  });
-
-  it("rejects invalid protocol (ftp)", async () => {
-    const res = await fetch(`${BASE}/v1/convert/url`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: JSON.stringify({ url: "ftp://example.com" }),
-    });
-    expect(res.status).toBe(400);
-    const data = await res.json();
-    expect(data.error).toContain("http");
-  });
-
-  it("rejects invalid URL format", async () => {
-    const res = await fetch(`${BASE}/v1/convert/url`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: JSON.stringify({ url: "not-a-url" }),
-    });
-    expect(res.status).toBe(400);
-    const data = await res.json();
-    expect(data.error).toContain("Invalid");
-  });
-
-  it("converts valid URL to PDF", async () => {
-    const res = await fetch(`${BASE}/v1/convert/url`, {
-      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: JSON.stringify({ url: "https://example.com" }),
-    });
-    expect(res.status).toBe(200);
-    expect(res.headers.get("content-type")).toBe("application/pdf");
-    const buf = await res.arrayBuffer();
-    expect(buf.byteLength).toBeGreaterThan(10);
-    const header = new Uint8Array(buf.slice(0, 5));
-    expect(String.fromCharCode(...header)).toBe("%PDF-");
-  });
-});
-
-describe("Demo Endpoints", () => {
-  it("demo/html converts HTML to PDF without auth", async () => {
-    const res = await fetch(`${BASE}/v1/demo/html`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ html: "<h1>Demo Test</h1>" }),
-    });
-    expect(res.status).toBe(200);
-    expect(res.headers.get("content-type")).toBe("application/pdf");
-    const buf = await res.arrayBuffer();
-    expect(buf.byteLength).toBeGreaterThan(10);
-    const header = new Uint8Array(buf.slice(0, 5));
-    expect(String.fromCharCode(...header)).toBe("%PDF-");
-  });
-
-  it("demo/markdown converts markdown to PDF without auth", async () => {
-    const res = await fetch(`${BASE}/v1/demo/markdown`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ markdown: "# Demo Markdown\n\nTest content" }),
-    });
-    expect(res.status).toBe(200);
-    expect(res.headers.get("content-type")).toBe("application/pdf");
-  });
-
-  it("demo rejects missing html field", async () => {
-    const res = await fetch(`${BASE}/v1/demo/html`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({}),
-    });
-    expect(res.status).toBe(400);
-    const data = await res.json();
-    expect(data.error).toBeDefined();
-  });
-
-  it("demo rejects wrong content-type", async () => {
-    const res = await fetch(`${BASE}/v1/demo/html`, {
-      method: "POST",
-      headers: { "Content-Type": "text/plain" },
-      body: "<h1>Test</h1>",
-    });
-    expect(res.status).toBe(415);
-  });
-});
-
 describe("Templates", () => {
  it("lists templates", async () => {
    const res = await fetch(`${BASE}/v1/templates`, {
@ -316,7 +106,10 @@ describe("Templates", () => {
  it("renders invoice template", async () => {
    const res = await fetch(`${BASE}/v1/templates/invoice/render`, {
      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
+      headers: {
+        Authorization: "Bearer test-key",
+        "Content-Type": "application/json",
+      },
      body: JSON.stringify({
        invoiceNumber: "TEST-001",
        date: "2026-02-14",
@ -332,339 +125,12 @@ describe("Templates", () => {
  it("returns 404 for unknown template", async () => {
    const res = await fetch(`${BASE}/v1/templates/nonexistent/render`, {
      method: "POST",
-      headers: { Authorization: "Bearer test-key", "Content-Type": "application/json" },
-      body: JSON.stringify({}),
-    });
-    expect(res.status).toBe(404);
-  });
-});
-
-// === NEW TESTS: Task 3 ===
-
-describe("Signup endpoint (discontinued)", () => {
-  it("returns 410 Gone", async () => {
-    const res = await fetch(`${BASE}/v1/signup/free`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ email: "test@example.com" }),
-    });
-    expect(res.status).toBe(410);
-    const data = await res.json();
-    expect(data.error).toBeDefined();
-  });
-});
-
-describe("Recovery endpoint validation", () => {
-  it("rejects missing email", async () => {
-    const res = await fetch(`${BASE}/v1/recover`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({}),
-    });
-    expect(res.status).toBe(400);
-    const data = await res.json();
-    expect(data.error).toBeDefined();
-  });
-
-  it("rejects invalid email format", async () => {
-    const res = await fetch(`${BASE}/v1/recover`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ email: "not-an-email" }),
-    });
-    expect(res.status).toBe(400);
-    const data = await res.json();
-    expect(data.error).toBeDefined();
-  });
-
-  it("accepts valid email (always returns success)", async () => {
-    const res = await fetch(`${BASE}/v1/recover`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ email: "user@example.com" }),
-    });
-    expect(res.status).toBe(200);
-    const data = await res.json();
-    expect(data.status).toBe("recovery_sent");
-  });
-
-  it("verify rejects missing fields", async () => {
-    const res = await fetch(`${BASE}/v1/recover/verify`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({}),
-    });
-    // May be 400 (validation) or 429 (rate limited from previous recover calls)
-    expect([400, 429]).toContain(res.status);
-    const data = await res.json();
-    expect(data.error).toBeDefined();
-  });
-});
-
-describe("CORS headers", () => {
-  it("sets Access-Control-Allow-Origin to * for API routes", async () => {
-    const res = await fetch(`${BASE}/v1/convert/html`, {
-      method: "OPTIONS",
-    });
-    expect(res.status).toBe(204);
-    expect(res.headers.get("access-control-allow-origin")).toBe("*");
-  });
-
-  it("restricts CORS for signup/billing/demo routes to docfast.dev", async () => {
-    const res = await fetch(`${BASE}/v1/demo/html`, {
-      method: "OPTIONS",
-    });
-    expect(res.status).toBe(204);
-    expect(res.headers.get("access-control-allow-origin")).toBe("https://docfast.dev");
-  });
-
-  it("includes correct allowed methods", async () => {
-    const res = await fetch(`${BASE}/health`, { method: "OPTIONS" });
-    const methods = res.headers.get("access-control-allow-methods");
-    expect(methods).toContain("GET");
-    expect(methods).toContain("POST");
-  });
-});
-
-describe("Error response format consistency", () => {
-  it("401 returns {error: string}", async () => {
-    const res = await fetch(`${BASE}/v1/convert/html`, { method: "POST" });
-    expect(res.status).toBe(401);
-    const data = await res.json();
-    expect(typeof data.error).toBe("string");
-  });
-
-  it("403 returns {error: string}", async () => {
-    const res = await fetch(`${BASE}/v1/convert/html`, {
-      method: "POST",
-      headers: { Authorization: "Bearer bad-key" },
-    });
-    expect(res.status).toBe(403);
-    const data = await res.json();
-    expect(typeof data.error).toBe("string");
-  });
-
-  it("404 API returns {error: string}", async () => {
-    const res = await fetch(`${BASE}/v1/nonexistent`);
-    expect(res.status).toBe(404);
-    const data = await res.json();
-    expect(typeof data.error).toBe("string");
-  });
-
-  it("410 returns {error: string}", async () => {
-    const res = await fetch(`${BASE}/v1/signup/free`, { method: "POST" });
-    expect(res.status).toBe(410);
-    const data = await res.json();
-    expect(typeof data.error).toBe("string");
-  });
-});
-
-describe("Rate limiting (global)", () => {
-  it("includes rate limit headers", async () => {
-    const res = await fetch(`${BASE}/health`);
-    // express-rate-limit with standardHeaders:true uses RateLimit-* headers
-    const limit = res.headers.get("ratelimit-limit");
-    expect(limit).toBeDefined();
-  });
-});
-
-describe("API root", () => {
-  it("returns API info", async () => {
-    const res = await fetch(`${BASE}/api`);
-    expect(res.status).toBe(200);
-    const data = await res.json();
-    expect(data.name).toBe("DocFast API");
-    expect(data.version).toBeDefined();
-    expect(data.endpoints).toBeInstanceOf(Array);
-  });
-});
-
-describe("JS minification", () => {
-  it("serves minified JS files in homepage HTML", async () => {
-    const res = await fetch(`${BASE}/`);
-    expect(res.status).toBe(200);
-    const html = await res.text();
-    
-    // Check that HTML references app.js and status.js
-    expect(html).toContain('src="/app.js"');
-    
-    // Fetch the JS file and verify it's minified (no excessive whitespace)
-    const jsRes = await fetch(`${BASE}/app.js`);
-    expect(jsRes.status).toBe(200);
-    const jsContent = await jsRes.text();
-    
-    // Minified JS should not have excessive whitespace or comments
-    // Basic check: line count should be reasonable for minified code
-    const lineCount = jsContent.split('\n').length;
-    expect(lineCount).toBeLessThan(50); // Original has ~400+ lines, minified should be much less
-    
-    // Should not contain developer comments (/* ... */)
-    expect(jsContent).not.toMatch(/\/\*[\s\S]*?\*\//);
-  });
-});
-
-describe("Usage endpoint", () => {
-  it("requires authentication (401 without key)", async () => {
-    const res = await fetch(`${BASE}/v1/usage`);
-    expect(res.status).toBe(401);
-    const data = await res.json();
-    expect(data.error).toBeDefined();
-    expect(typeof data.error).toBe("string");
-  });
-
-  it("requires admin key (503 when not configured)", async () => {
-    const res = await fetch(`${BASE}/v1/usage`, {
-      headers: { Authorization: "Bearer test-key" },
-    });
-    expect(res.status).toBe(503);
-    const data = await res.json();
-    expect(data.error).toBeDefined();
-    expect(data.error).toContain("Admin access not configured");
-  });
-
-  it("returns usage data with admin key", async () => {
-    // This test will likely fail since we don't have an admin key set in test environment
-    // But it documents the expected behavior
-    const res = await fetch(`${BASE}/v1/usage`, {
-      headers: { Authorization: "Bearer admin-key" },
-    });
-    // Could be 503 (admin access not configured) or 403 (admin access required)
-    expect([403, 503]).toContain(res.status);
-  });
-});
-
-describe("Billing checkout", () => {
-  it("has rate limiting headers", async () => {
-    const res = await fetch(`${BASE}/v1/billing/checkout`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({}),
-    });
-    
-    // Check rate limit headers are present (express-rate-limit should add these)
-    const limitHeader = res.headers.get("ratelimit-limit");
-    const remainingHeader = res.headers.get("ratelimit-remaining");
-    const resetHeader = res.headers.get("ratelimit-reset");
-    
-    expect(limitHeader).toBeDefined();
-    expect(remainingHeader).toBeDefined();
-    expect(resetHeader).toBeDefined();
-  });
-
-  it("fails when Stripe not configured", async () => {
-    const res = await fetch(`${BASE}/v1/billing/checkout`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({}),
-    });
-    // Returns 500 due to missing STRIPE_SECRET_KEY in test environment
-    expect(res.status).toBe(500);
-    const data = await res.json();
-    expect(data.error).toBeDefined();
-  });
-});
-
-describe("Rate limit headers on PDF endpoints", () => {
-  it("includes rate limit headers on HTML conversion", async () => {
-    const res = await fetch(`${BASE}/v1/convert/html`, {
-      method: "POST",
-      headers: { 
-        Authorization: "Bearer test-key", 
-        "Content-Type": "application/json" 
+      headers: {
+        Authorization: "Bearer test-key",
+        "Content-Type": "application/json",
      },
-      body: JSON.stringify({ html: "<h1>Test</h1>" }),
+      body: JSON.stringify({}),
    });
-    
-    expect(res.status).toBe(200);
-    
-    // Check for rate limit headers
-    const limitHeader = res.headers.get("ratelimit-limit");
-    const remainingHeader = res.headers.get("ratelimit-remaining");
-    const resetHeader = res.headers.get("ratelimit-reset");
-    
-    expect(limitHeader).toBeDefined();
-    expect(remainingHeader).toBeDefined();
-    expect(resetHeader).toBeDefined();
-  });
-
-  it("includes rate limit headers on demo endpoint", async () => {
-    const res = await fetch(`${BASE}/v1/demo/html`, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify({ html: "<h1>Demo Test</h1>" }),
-    });
-    
-    expect(res.status).toBe(200);
-    
-    // Check for rate limit headers
-    const limitHeader = res.headers.get("ratelimit-limit");
-    const remainingHeader = res.headers.get("ratelimit-remaining");
-    const resetHeader = res.headers.get("ratelimit-reset");
-    
-    expect(limitHeader).toBeDefined();
-    expect(remainingHeader).toBeDefined();
-    expect(resetHeader).toBeDefined();
-  });
-});
-
-describe("OpenAPI spec", () => {
-  it("returns a valid OpenAPI 3.0 spec with paths", async () => {
-    const res = await fetch(`${BASE}/openapi.json`);
-    expect(res.status).toBe(200);
-    const spec = await res.json();
-    expect(spec.openapi).toBe("3.0.3");
-    expect(spec.info).toBeDefined();
-    expect(spec.info.title).toBe("DocFast API");
-    expect(Object.keys(spec.paths).length).toBeGreaterThanOrEqual(8);
-  });
-
-  it("includes all major endpoint groups", async () => {
-    const res = await fetch(`${BASE}/openapi.json`);
-    const spec = await res.json();
-    const paths = Object.keys(spec.paths);
-    expect(paths).toContain("/v1/convert/html");
-    expect(paths).toContain("/v1/convert/markdown");
-    expect(paths).toContain("/health");
-  });
-
-  it("PdfOptions schema includes all valid format values and waitUntil field", async () => {
-    const res = await fetch(`${BASE}/openapi.json`);
-    const spec = await res.json();
-    
-    const pdfOptions = spec.components.schemas.PdfOptions;
-    expect(pdfOptions).toBeDefined();
-    
-    // Check that all 11 format values are included
-    const expectedFormats = ["Letter", "Legal", "Tabloid", "Ledger", "A0", "A1", "A2", "A3", "A4", "A5", "A6"];
-    expect(pdfOptions.properties.format.enum).toEqual(expectedFormats);
-    
-    // Check that waitUntil field exists with correct enum values
-    expect(pdfOptions.properties.waitUntil).toBeDefined();
-    expect(pdfOptions.properties.waitUntil.enum).toEqual(["load", "domcontentloaded", "networkidle0", "networkidle2"]);
-    
-    // Check that headerTemplate and footerTemplate descriptions mention 100KB limit
-    expect(pdfOptions.properties.headerTemplate.description).toContain("100KB");
-    expect(pdfOptions.properties.footerTemplate.description).toContain("100KB");
-  });
-});
-
-describe("404 handler", () => {
-  it("returns proper JSON error format for API routes", async () => {
-    const res = await fetch(`${BASE}/v1/nonexistent-endpoint`);
    expect(res.status).toBe(404);
-    const data = await res.json();
-    expect(typeof data.error).toBe("string");
-    expect(data.error).toContain("Not Found");
-    expect(data.error).toContain("GET");
-    expect(data.error).toContain("/v1/nonexistent-endpoint");
-  });
-
-  it("returns HTML 404 for non-API routes", async () => {
-    const res = await fetch(`${BASE}/nonexistent-page`);
-    expect(res.status).toBe(404);
-    const html = await res.text();
-    expect(html).toContain("<!DOCTYPE html>");
-    expect(html).toContain("404");
-    expect(html).toContain("Page Not Found");
  });
 });
--- a/src/tests/app-routes.test.ts
+++ b/src/tests/app-routes.test.ts
@ -1,192 +0,0 @@
-import { describe, it, expect, beforeAll } from "vitest";
-import request from "supertest";
-import { app } from "../index.js";
-
-describe("App-level routes", () => {
-  describe("POST /v1/signup/* (410 Gone)", () => {
-    it("returns 410 for POST /v1/signup", async () => {
-      const res = await request(app).post("/v1/signup");
-      expect(res.status).toBe(410);
-      expect(res.body.error).toContain("discontinued");
-      expect(res.body.demo_endpoint).toBe("/v1/demo/html");
-      expect(res.body.pro_url).toBe("https://docfast.dev/#pricing");
-    });
-
-    it("returns 410 for POST /v1/signup/free", async () => {
-      const res = await request(app).post("/v1/signup/free");
-      expect(res.status).toBe(410);
-      expect(res.body.error).toContain("discontinued");
-    });
-
-    it("returns 410 for GET /v1/signup", async () => {
-      const res = await request(app).get("/v1/signup");
-      expect(res.status).toBe(410);
-      expect(res.body.demo_endpoint).toBeDefined();
-    });
-  });
-
-  describe("GET /api", () => {
-    it("returns API discovery info", async () => {
-      const res = await request(app).get("/api");
-      expect(res.status).toBe(200);
-      expect(res.body.name).toBe("DocFast API");
-      expect(res.body.version).toBeDefined();
-      expect(Array.isArray(res.body.endpoints)).toBe(true);
-      expect(res.body.endpoints.length).toBeGreaterThan(0);
-    });
-  });
-
-  describe("404 handler", () => {
-    it("returns JSON 404 for API paths (/v1/*)", async () => {
-      const res = await request(app).get("/v1/nonexistent");
-      expect(res.status).toBe(404);
-      expect(res.body.error).toContain("Not Found");
-    });
-
-    it("returns JSON 404 for API paths (/api/*)", async () => {
-      const res = await request(app).get("/api/nonexistent");
-      expect(res.status).toBe(404);
-      expect(res.body.error).toContain("Not Found");
-    });
-
-    it("returns HTML 404 for browser paths", async () => {
-      const res = await request(app).get("/nonexistent-page");
-      expect(res.status).toBe(404);
-      expect(res.headers["content-type"]).toContain("text/html");
-      expect(res.text).toContain("404");
-    });
-  });
-
-  describe("CORS behavior", () => {
-    it("returns restricted origin for auth routes", async () => {
-      for (const path of ["/v1/signup", "/v1/recover", "/v1/billing", "/v1/demo", "/v1/email-change"]) {
-        const res = await request(app).get(path);
-        expect(res.headers["access-control-allow-origin"]).toBe("https://docfast.dev");
-      }
-    });
-
-    it("returns wildcard origin for other routes", async () => {
-      for (const path of ["/v1/convert", "/health"]) {
-        const res = await request(app).get(path);
-        expect(res.headers["access-control-allow-origin"]).toBe("*");
-      }
-    });
-
-    it("returns 204 for OPTIONS preflight", async () => {
-      const res = await request(app).options("/v1/signup");
-      expect(res.status).toBe(204);
-      expect(res.headers["access-control-allow-methods"]).toContain("GET");
-      expect(res.headers["access-control-allow-headers"]).toContain("X-API-Key");
-    });
-  });
-
-  describe("Request ID", () => {
-    it("adds X-Request-Id header to responses", async () => {
-      const res = await request(app).get("/api");
-      expect(res.headers["x-request-id"]).toBeDefined();
-    });
-
-    it("echoes provided X-Request-Id", async () => {
-      const res = await request(app).get("/api").set("X-Request-Id", "test-id-123");
-      expect(res.headers["x-request-id"]).toBe("test-id-123");
-    });
-  });
-
-  describe("OpenAPI spec completeness", () => {
-    let spec: any;
-
-    beforeAll(async () => {
-      const res = await request(app).get("/openapi.json");
-      expect(res.status).toBe(200);
-      spec = res.body;
-    });
-
-    it("includes POST /v1/signup/free (deprecated)", () => {
-      expect(spec.paths["/v1/signup/free"]).toBeDefined();
-      expect(spec.paths["/v1/signup/free"].post).toBeDefined();
-      expect(spec.paths["/v1/signup/free"].post.deprecated).toBe(true);
-    });
-
-    it("excludes GET /v1/billing/success (browser redirect, not public API)", () => {
-      expect(spec.paths["/v1/billing/success"]).toBeUndefined();
-    });
-
-    it("excludes POST /v1/billing/webhook (internal Stripe endpoint)", () => {
-      expect(spec.paths["/v1/billing/webhook"]).toBeUndefined();
-    });
-  });
-
-  describe("Security headers", () => {
-    it("includes helmet security headers", async () => {
-      const res = await request(app).get("/api");
-      expect(res.headers["x-content-type-options"]).toBe("nosniff");
-      expect(res.headers["x-frame-options"]).toBeDefined();
-    });
-
-    it("includes permissions-policy header", async () => {
-      const res = await request(app).get("/api");
-      expect(res.headers["permissions-policy"]).toContain("camera=()");
-    });
-  });
-
-  describe("BUG-092: Footer Change Email link", () => {
-    it("landing page footer contains Change Email link", async () => {
-      const res = await request(app).get("/");
-      expect(res.status).toBe(200);
-      const html = res.text;
-      expect(html).toContain('class="open-email-change"');
-      expect(html).toMatch(/footer-links[\s\S]*open-email-change[\s\S]*Change Email/);
-    });
-
-    it("sub-page footer partial contains Change Email link", async () => {
-      const fs = await import("fs");
-      const path = await import("path");
-      const footer = fs.readFileSync(
-        path.join(__dirname, "../../public/partials/_footer.html"),
-        "utf-8"
-      );
-      expect(footer).toContain('class="open-email-change"');
-      expect(footer).toContain('href="/#change-email"');
-    });
-  });
-
-  describe("BUG-097: Footer Support link in partial", () => {
-    it("shared footer partial contains Support mailto link", async () => {
-      const fs = await import("fs");
-      const path = await import("path");
-      const footer = fs.readFileSync(
-        path.join(__dirname, "../../public/partials/_footer.html"),
-        "utf-8"
-      );
-      expect(footer).toContain('href="mailto:support@docfast.dev"');
-      expect(footer).toContain(">Support</a>");
-    });
-  });
-
-  describe("BUG-095: docs.html footer has all links", () => {
-    it("docs footer contains all expected links", async () => {
-      const fs = await import("fs");
-      const path = await import("path");
-      const docs = fs.readFileSync(
-        path.join(__dirname, "../../public/docs.html"),
-        "utf-8"
-      );
-      const expectedLinks = [
-        { href: "/", text: "Home" },
-        { href: "/docs", text: "Docs" },
-        { href: "/examples", text: "Examples" },
-        { href: "/status", text: "API Status" },
-        { href: "mailto:support@docfast.dev", text: "Support" },
-        { href: "/#change-email", text: "Change Email" },
-        { href: "/impressum", text: "Impressum" },
-        { href: "/privacy", text: "Privacy Policy" },
-        { href: "/terms", text: "Terms of Service" },
-      ];
-      for (const link of expectedLinks) {
-        expect(docs).toContain(`href="${link.href}"`);
-        expect(docs).toContain(`${link.text}</a>`);
-      }
-      expect(docs).toContain('class="open-email-change"');
-    });
-  });
-});
--- a/src/tests/auth.test.ts
+++ b/src/tests/auth.test.ts
@ -1,85 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import { authMiddleware } from "../middleware/auth.js";
-import { isValidKey, getKeyInfo } from "../services/keys.js";
-
-const mockJson = vi.fn();
-const mockStatus = vi.fn(() => ({ json: mockJson }));
-const mockNext = vi.fn();
-
-function makeReq(headers: Record<string, string> = {}): any {
-  return { headers };
-}
-
-function makeRes(): any {
-  mockJson.mockClear();
-  mockStatus.mockClear();
-  return { status: mockStatus, json: mockJson };
-}
-
-describe("authMiddleware", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-  });
-
-  it("returns 401 when no auth header and no x-api-key", () => {
-    const req = makeReq();
-    const res = makeRes();
-    authMiddleware(req, res, mockNext);
-    expect(mockStatus).toHaveBeenCalledWith(401);
-    expect(mockJson).toHaveBeenCalledWith(
-      expect.objectContaining({ error: expect.stringContaining("Missing API key") })
-    );
-    expect(mockNext).not.toHaveBeenCalled();
-  });
-
-  it("returns 403 when Bearer token is invalid", () => {
-    vi.mocked(isValidKey).mockReturnValueOnce(false);
-    const req = makeReq({ authorization: "Bearer bad-key" });
-    const res = makeRes();
-    authMiddleware(req, res, mockNext);
-    expect(mockStatus).toHaveBeenCalledWith(403);
-    expect(mockJson).toHaveBeenCalledWith({ error: "Invalid API key" });
-    expect(mockNext).not.toHaveBeenCalled();
-  });
-
-  it("returns 403 when x-api-key is invalid", () => {
-    vi.mocked(isValidKey).mockReturnValueOnce(false);
-    const req = makeReq({ "x-api-key": "bad-key" });
-    const res = makeRes();
-    authMiddleware(req, res, mockNext);
-    expect(mockStatus).toHaveBeenCalledWith(403);
-    expect(mockNext).not.toHaveBeenCalled();
-  });
-
-  it("calls next() and attaches apiKeyInfo when Bearer token is valid", () => {
-    const info = { key: "test-key", tier: "pro", email: "t@t.com", createdAt: "2025-01-01" };
-    vi.mocked(isValidKey).mockReturnValueOnce(true);
-    vi.mocked(getKeyInfo).mockReturnValueOnce(info as any);
-    const req = makeReq({ authorization: "Bearer test-key" });
-    const res = makeRes();
-    authMiddleware(req, res, mockNext);
-    expect(mockNext).toHaveBeenCalled();
-    expect((req as any).apiKeyInfo).toEqual(info);
-  });
-
-  it("calls next() and attaches apiKeyInfo when x-api-key is valid", () => {
-    const info = { key: "xkey", tier: "free", email: "x@t.com", createdAt: "2025-01-01" };
-    vi.mocked(isValidKey).mockReturnValueOnce(true);
-    vi.mocked(getKeyInfo).mockReturnValueOnce(info as any);
-    const req = makeReq({ "x-api-key": "xkey" });
-    const res = makeRes();
-    authMiddleware(req, res, mockNext);
-    expect(mockNext).toHaveBeenCalled();
-    expect((req as any).apiKeyInfo).toEqual(info);
-  });
-
-  it("prefers Authorization header over x-api-key when both present", () => {
-    vi.mocked(isValidKey).mockReturnValueOnce(true);
-    vi.mocked(getKeyInfo).mockReturnValueOnce({ key: "bearer-key" } as any);
-    const req = makeReq({ authorization: "Bearer bearer-key", "x-api-key": "header-key" });
-    const res = makeRes();
-    authMiddleware(req, res, mockNext);
-    expect(isValidKey).toHaveBeenCalledWith("bearer-key");
-    expect((req as any).apiKeyInfo).toEqual({ key: "bearer-key" });
-  });
-});
--- a/src/tests/billing-branch-coverage.test.ts
+++ b/src/tests/billing-branch-coverage.test.ts
@ -1,590 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import express from "express";
-import request from "supertest";
-
-// Mock Stripe before importing billing router
-vi.mock("stripe", () => {
-  const mockStripe = {
-    checkout: {
-      sessions: {
-        create: vi.fn(),
-        retrieve: vi.fn(),
-      },
-    },
-    webhooks: {
-      constructEvent: vi.fn(),
-    },
-    products: {
-      search: vi.fn(),
-      create: vi.fn(),
-    },
-    prices: {
-      list: vi.fn(),
-      create: vi.fn(),
-    },
-    subscriptions: {
-      retrieve: vi.fn(),
-    },
-  };
-  return { default: vi.fn(function() { return mockStripe; }), __mockStripe: mockStripe };
-});
-
-let app: express.Express;
-let mockStripe: any;
-
-beforeEach(async () => {
-  vi.clearAllMocks();
-  vi.resetModules();
-
-  process.env.STRIPE_SECRET_KEY = "sk_test_fake";
-  process.env.STRIPE_WEBHOOK_SECRET = "whsec_test_fake";
-
-  const stripeMod = await import("stripe");
-  mockStripe = (stripeMod as any).__mockStripe;
-
-  // Default: product search returns existing product+price
-  mockStripe.products.search.mockResolvedValue({ data: [{ id: "prod_TygeG8tQPtEAdE" }] });
-  mockStripe.prices.list.mockResolvedValue({ data: [{ id: "price_123" }] });
-
-  const { createProKey, findKeyByCustomerId, downgradeByCustomer, updateEmailByCustomer } = await import("../services/keys.js");
-  vi.mocked(createProKey).mockResolvedValue({ key: "pro-key-123", tier: "pro", email: "test@test.com", createdAt: new Date().toISOString() } as any);
-  vi.mocked(findKeyByCustomerId).mockResolvedValue(null);
-  vi.mocked(downgradeByCustomer).mockResolvedValue(undefined as any);
-  vi.mocked(updateEmailByCustomer).mockResolvedValue(true as any);
-
-  const { billingRouter } = await import("../routes/billing.js");
-  app = express();
-  app.use("/v1/billing/webhook", express.raw({ type: "application/json" }));
-  app.use(express.json());
-  app.use("/v1/billing", billingRouter);
-});
-
-describe("Billing Branch Coverage", () => {
-  describe("isDocFastSubscription - expanded product object (lines 63-67)", () => {
-    it("should handle expanded product object instead of string", async () => {
-      // Test the branch where price.product is an expanded Stripe.Product object
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "checkout.session.completed",
-        data: {
-          object: {
-            id: "cs_expanded_product",
-            customer: "cus_expanded",
-            customer_details: { email: "expanded@test.com" },
-          },
-        },
-      });
-
-      // Mock: line_items has price.product as an object (not a string)
-      mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-        id: "cs_expanded_product",
-        line_items: {
-          data: [
-            { 
-              price: { 
-                product: { id: "prod_TygeG8tQPtEAdE" }  // Expanded object, not string
-              } 
-            }
-          ],
-        },
-      });
-
-      const { createProKey } = await import("../services/keys.js");
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "checkout.session.completed" }));
-
-      expect(res.status).toBe(200);
-      expect(createProKey).toHaveBeenCalledWith("expanded@test.com", "cus_expanded");
-    });
-
-    it("should handle expanded product object in subscription.deleted webhook", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "customer.subscription.deleted",
-        data: {
-          object: { id: "sub_expanded", customer: "cus_expanded_del" },
-        },
-      });
-
-      // subscription.retrieve returns expanded product object
-      mockStripe.subscriptions.retrieve.mockResolvedValue({
-        items: { 
-          data: [
-            { 
-              price: { 
-                product: { id: "prod_TygeG8tQPtEAdE" }  // Expanded object
-              } 
-            }
-          ] 
-        },
-      });
-
-      const { downgradeByCustomer } = await import("../services/keys.js");
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "customer.subscription.deleted" }));
-
-      expect(res.status).toBe(200);
-      expect(downgradeByCustomer).toHaveBeenCalledWith("cus_expanded_del");
-    });
-  });
-
-  describe("isDocFastSubscription - error handling (lines 70-71)", () => {
-    it("should return false when subscriptions.retrieve throws an error", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "customer.subscription.deleted",
-        data: {
-          object: { id: "sub_error", customer: "cus_error" },
-        },
-      });
-
-      // Mock: subscriptions.retrieve throws an error
-      mockStripe.subscriptions.retrieve.mockRejectedValue(new Error("Stripe API error"));
-
-      const { downgradeByCustomer } = await import("../services/keys.js");
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "customer.subscription.deleted" }));
-
-      // Should succeed but NOT downgrade (because isDocFastSubscription returns false on error)
-      expect(res.status).toBe(200);
-      expect(downgradeByCustomer).not.toHaveBeenCalled();
-    });
-
-    it("should return false when subscriptions.retrieve throws in subscription.updated", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "customer.subscription.updated",
-        data: {
-          object: { 
-            id: "sub_update_error", 
-            customer: "cus_update_error",
-            status: "canceled",
-            cancel_at_period_end: false,
-          },
-        },
-      });
-
-      mockStripe.subscriptions.retrieve.mockRejectedValue(new Error("Network timeout"));
-
-      const { downgradeByCustomer } = await import("../services/keys.js");
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "customer.subscription.updated" }));
-
-      expect(res.status).toBe(200);
-      expect(downgradeByCustomer).not.toHaveBeenCalled();
-    });
-  });
-
-  describe("getOrCreateProPrice - no existing product (lines 316-331)", () => {
-    it("should create new product and price when none exists", async () => {
-      // Mock: no existing product found
-      mockStripe.products.search.mockResolvedValue({ data: [] });
-      
-      // Mock: product.create returns new product
-      mockStripe.products.create.mockResolvedValue({ id: "prod_new_123" });
-      
-      // Mock: price.create returns new price
-      mockStripe.prices.create.mockResolvedValue({ id: "price_new_456" });
-
-      // Mock: checkout.sessions.create succeeds
-      mockStripe.checkout.sessions.create.mockResolvedValue({ 
-        id: "cs_new", 
-        url: "https://checkout.stripe.com/pay/cs_new" 
-      });
-
-      const res = await request(app)
-        .post("/v1/billing/checkout")
-        .send({});
-
-      expect(res.status).toBe(200);
-      expect(mockStripe.products.create).toHaveBeenCalledWith({
-        name: "DocFast Pro",
-        description: "5,000 PDFs / month via API. HTML, Markdown, and URL to PDF.",
-      });
-      expect(mockStripe.prices.create).toHaveBeenCalledWith({
-        product: "prod_new_123",
-        unit_amount: 900,
-        currency: "eur",
-        recurring: { interval: "month" },
-      });
-      expect(mockStripe.checkout.sessions.create).toHaveBeenCalledWith(
-        expect.objectContaining({
-          line_items: [{ price: "price_new_456", quantity: 1 }],
-        })
-      );
-    });
-
-    it("should create new price when product exists but has no active prices", async () => {
-      // Mock: product exists
-      mockStripe.products.search.mockResolvedValue({ data: [{ id: "prod_existing" }] });
-      
-      // Mock: no active prices found
-      mockStripe.prices.list.mockResolvedValue({ data: [] });
-      
-      // Mock: price.create returns new price
-      mockStripe.prices.create.mockResolvedValue({ id: "price_new_789" });
-
-      // Mock: checkout.sessions.create succeeds
-      mockStripe.checkout.sessions.create.mockResolvedValue({ 
-        id: "cs_existing", 
-        url: "https://checkout.stripe.com/pay/cs_existing" 
-      });
-
-      const res = await request(app)
-        .post("/v1/billing/checkout")
-        .send({});
-
-      expect(res.status).toBe(200);
-      expect(mockStripe.products.create).not.toHaveBeenCalled(); // Product exists, don't create
-      expect(mockStripe.prices.create).toHaveBeenCalledWith({
-        product: "prod_existing",
-        unit_amount: 900,
-        currency: "eur",
-        recurring: { interval: "month" },
-      });
-      expect(mockStripe.checkout.sessions.create).toHaveBeenCalledWith(
-        expect.objectContaining({
-          line_items: [{ price: "price_new_789", quantity: 1 }],
-        })
-      );
-    });
-  });
-
-  describe("Success route - customerId branch (line 163)", () => {
-    it("should return 400 when session.customer is null (not a string)", async () => {
-      mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-        id: "cs_null_customer",
-        customer: null,  // Explicitly null, not falsy string
-        customer_details: { email: "test@example.com" },
-      });
-
-      const res = await request(app).get("/v1/billing/success?session_id=cs_null_customer");
-      
-      expect(res.status).toBe(400);
-      expect(res.body.error).toContain("No customer found");
-    });
-
-    it("should return 400 when customer is empty string", async () => {
-      mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-        id: "cs_empty_customer",
-        customer: "",  // Empty string is falsy
-        customer_details: { email: "test@example.com" },
-      });
-
-      const res = await request(app).get("/v1/billing/success?session_id=cs_empty_customer");
-      
-      expect(res.status).toBe(400);
-      expect(res.body.error).toContain("No customer found");
-    });
-
-    it("should return 400 when customer is undefined", async () => {
-      mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-        id: "cs_undef_customer",
-        customer: undefined,
-        customer_details: { email: "test@example.com" },
-      });
-
-      const res = await request(app).get("/v1/billing/success?session_id=cs_undef_customer");
-      
-      expect(res.status).toBe(400);
-      expect(res.body.error).toContain("No customer found");
-    });
-  });
-
-  describe("Webhook checkout.session.completed - hasDocfastProduct branch (line 223)", () => {
-    it("should skip webhook event when line_items is undefined", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "checkout.session.completed",
-        data: {
-          object: {
-            id: "cs_no_items",
-            customer: "cus_no_items",
-            customer_details: { email: "test@example.com" },
-          },
-        },
-      });
-
-      // Mock: line_items is undefined
-      mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-        id: "cs_no_items",
-        line_items: undefined,
-      });
-
-      const { createProKey } = await import("../services/keys.js");
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "checkout.session.completed" }));
-
-      expect(res.status).toBe(200);
-      expect(createProKey).not.toHaveBeenCalled();
-    });
-
-    it("should skip webhook event when line_items.data is empty", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "checkout.session.completed",
-        data: {
-          object: {
-            id: "cs_empty_items",
-            customer: "cus_empty_items",
-            customer_details: { email: "test@example.com" },
-          },
-        },
-      });
-
-      mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-        id: "cs_empty_items",
-        line_items: { data: [] },  // Empty array - no items
-      });
-
-      const { createProKey } = await import("../services/keys.js");
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "checkout.session.completed" }));
-
-      expect(res.status).toBe(200);
-      expect(createProKey).not.toHaveBeenCalled();
-    });
-
-    it("should skip webhook event when price is null", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "checkout.session.completed",
-        data: {
-          object: {
-            id: "cs_null_price",
-            customer: "cus_null_price",
-            customer_details: { email: "test@example.com" },
-          },
-        },
-      });
-
-      mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-        id: "cs_null_price",
-        line_items: {
-          data: [{ price: null }],  // Null price
-        },
-      });
-
-      const { createProKey } = await import("../services/keys.js");
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "checkout.session.completed" }));
-
-      expect(res.status).toBe(200);
-      expect(createProKey).not.toHaveBeenCalled();
-    });
-
-    it("should skip webhook event when product is null", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "checkout.session.completed",
-        data: {
-          object: {
-            id: "cs_null_product",
-            customer: "cus_null_product",
-            customer_details: { email: "test@example.com" },
-          },
-        },
-      });
-
-      mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-        id: "cs_null_product",
-        line_items: {
-          data: [{ price: { product: null } }],  // Null product
-        },
-      });
-
-      const { createProKey } = await import("../services/keys.js");
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "checkout.session.completed" }));
-
-      expect(res.status).toBe(200);
-      expect(createProKey).not.toHaveBeenCalled();
-    });
-  });
-
-  describe("Webhook customer.updated event (line 284-303)", () => {
-    it("should sync email when both customerId and newEmail exist", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "customer.updated",
-        data: {
-          object: {
-            id: "cus_email_update",
-            email: "newemail@example.com",
-          },
-        },
-      });
-
-      const { updateEmailByCustomer } = await import("../services/keys.js");
-      vi.mocked(updateEmailByCustomer).mockResolvedValue(true);
-
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "customer.updated" }));
-
-      expect(res.status).toBe(200);
-      expect(updateEmailByCustomer).toHaveBeenCalledWith("cus_email_update", "newemail@example.com");
-    });
-
-    it("should not sync email when customerId is missing", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "customer.updated",
-        data: {
-          object: {
-            id: undefined,  // Missing customerId
-            email: "newemail@example.com",
-          },
-        },
-      });
-
-      const { updateEmailByCustomer } = await import("../services/keys.js");
-
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "customer.updated" }));
-
-      expect(res.status).toBe(200);
-      expect(updateEmailByCustomer).not.toHaveBeenCalled();
-    });
-
-    it("should not sync email when email is missing", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "customer.updated",
-        data: {
-          object: {
-            id: "cus_no_email",
-            email: null,  // Missing email
-          },
-        },
-      });
-
-      const { updateEmailByCustomer } = await import("../services/keys.js");
-
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "customer.updated" }));
-
-      expect(res.status).toBe(200);
-      expect(updateEmailByCustomer).not.toHaveBeenCalled();
-    });
-
-    it("should not sync email when email is undefined", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "customer.updated",
-        data: {
-          object: {
-            id: "cus_no_email_2",
-            email: undefined,  // Undefined email
-          },
-        },
-      });
-
-      const { updateEmailByCustomer } = await import("../services/keys.js");
-
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "customer.updated" }));
-
-      expect(res.status).toBe(200);
-      expect(updateEmailByCustomer).not.toHaveBeenCalled();
-    });
-
-    it("should log when email update returns false", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "customer.updated",
-        data: {
-          object: {
-            id: "cus_no_update",
-            email: "newemail@example.com",
-          },
-        },
-      });
-
-      const { updateEmailByCustomer } = await import("../services/keys.js");
-      vi.mocked(updateEmailByCustomer).mockResolvedValue(false);  // Update returns false
-
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "customer.updated" }));
-
-      expect(res.status).toBe(200);
-      expect(updateEmailByCustomer).toHaveBeenCalledWith("cus_no_update", "newemail@example.com");
-      // The if (updated) branch should not be executed when false
-    });
-  });
-
-  describe("Webhook default case", () => {
-    it("should handle unknown webhook event type", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "unknown.event.type",
-        data: { object: {} },
-      });
-
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "unknown.event.type" }));
-
-      expect(res.status).toBe(200);
-      expect(res.body.received).toBe(true);
-    });
-
-    it("should handle payment_intent.succeeded webhook event", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "payment_intent.succeeded",
-        data: { object: {} },
-      });
-
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "payment_intent.succeeded" }));
-
-      expect(res.status).toBe(200);
-      expect(res.body.received).toBe(true);
-    });
-
-    it("should handle invoice.payment_succeeded webhook event", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "invoice.payment_succeeded",
-        data: { object: {} },
-      });
-
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "invoice.payment_succeeded" }));
-
-      expect(res.status).toBe(200);
-      expect(res.body.received).toBe(true);
-    });
-  });
-});
--- a/src/tests/billing-coverage-fix.test.ts
+++ b/src/tests/billing-coverage-fix.test.ts
@ -1,153 +0,0 @@
-import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from "vitest";
-import express from "express";
-import request from "supertest";
-
-// Mock Stripe ONCE before any imports
-const mockStripe = {
-  checkout: {
-    sessions: {
-      create: vi.fn(),
-      retrieve: vi.fn(),
-    },
-  },
-  webhooks: {
-    constructEvent: vi.fn(),
-  },
-  products: {
-    search: vi.fn(),
-    create: vi.fn(),
-  },
-  prices: {
-    list: vi.fn(),
-    create: vi.fn(),
-  },
-  subscriptions: {
-    retrieve: vi.fn(),
-  },
-};
-
-vi.mock("stripe", () => {
-  return { default: vi.fn(function() { return mockStripe; }) };
-});
-
-// Mock keys service
-vi.mock("../services/keys.js", () => ({
-  createProKey: vi.fn().mockResolvedValue({ 
-    key: "pro-key-123", 
-    tier: "pro", 
-    email: "test@test.com", 
-    createdAt: new Date().toISOString() 
-  }),
-  findKeyByCustomerId: vi.fn().mockResolvedValue(null),
-  downgradeByCustomer: vi.fn().mockResolvedValue(undefined),
-  updateEmailByCustomer: vi.fn().mockResolvedValue(true),
-}));
-
-// Set env BEFORE importing billing router (NO module reset!)
-process.env.STRIPE_SECRET_KEY = "sk_test_fake_no_reset";
-process.env.STRIPE_WEBHOOK_SECRET = "whsec_test_fake_no_reset";
-
-// Import billing router ONCE
-import { billingRouter } from "../routes/billing.js";
-import { createProKey, findKeyByCustomerId } from "../services/keys.js";
-
-let app: express.Express;
-
-beforeAll(() => {
-  // Setup Express app once
-  app = express();
-  app.use("/v1/billing/webhook", express.raw({ type: "application/json" }));
-  app.use(express.json());
-  app.use("/v1/billing", billingRouter);
-});
-
-beforeEach(() => {
-  // Only clear mock calls, DON'T reset modules
-  vi.clearAllMocks();
-  
-  // Reset default mock implementations
-  mockStripe.products.search.mockResolvedValue({ data: [{ id: "prod_TygeG8tQPtEAdE" }] });
-  mockStripe.prices.list.mockResolvedValue({ data: [{ id: "price_existing_123" }] });
-  vi.mocked(createProKey).mockResolvedValue({ 
-    key: "pro-key-123", 
-    tier: "pro", 
-    email: "test@test.com", 
-    createdAt: new Date().toISOString() 
-  } as any);
-  vi.mocked(findKeyByCustomerId).mockResolvedValue(null);
-});
-
-describe("Billing Coverage Fix - NO MODULE RESET", () => {
-  describe("Line 231-233: checkout.session.completed webhook catch block", () => {
-    it("should gracefully handle Stripe API error when retrieving session", async () => {
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "checkout.session.completed",
-        data: {
-          object: {
-            id: "cs_api_error",
-            customer: "cus_api_error",
-            customer_details: { email: "error@test.com" },
-          },
-        },
-      });
-
-      // Trigger the catch block: session.retrieve throws
-      mockStripe.checkout.sessions.retrieve.mockRejectedValueOnce(new Error("Stripe API is down"));
-
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "checkout.session.completed" }));
-
-      expect(res.status).toBe(200);
-      expect(res.body.received).toBe(true);
-      // Key should NOT be provisioned due to error
-      expect(createProKey).not.toHaveBeenCalled();
-    });
-  });
-
-  describe("Line 165: /success route !customerId branch", () => {
-    it("should return 400 when customer is null", async () => {
-      mockStripe.checkout.sessions.retrieve.mockResolvedValueOnce({
-        id: "cs_null_cust",
-        customer: null,
-        customer_details: { email: "test@test.com" },
-      });
-
-      const res = await request(app).get("/v1/billing/success?session_id=cs_null_cust");
-      
-      expect(res.status).toBe(400);
-      expect(res.body.error).toContain("No customer found");
-    });
-  });
-
-  describe("Line 315: getOrCreateProPrice() else branch - create new product", () => {
-    it("should create new product and price when none exist", async () => {
-      // Clear cache by calling checkout with empty product list
-      mockStripe.products.search.mockResolvedValueOnce({ data: [] });
-      mockStripe.products.create.mockResolvedValueOnce({ id: "prod_new_123" });
-      mockStripe.prices.create.mockResolvedValueOnce({ id: "price_new_456" });
-      mockStripe.checkout.sessions.create.mockResolvedValueOnce({ 
-        id: "cs_new", 
-        url: "https://checkout.stripe.com/pay/cs_new" 
-      });
-
-      const res = await request(app)
-        .post("/v1/billing/checkout")
-        .send({});
-
-      expect(res.status).toBe(200);
-      expect(mockStripe.products.create).toHaveBeenCalledWith({
-        name: "DocFast Pro",
-        description: "5,000 PDFs / month via API. HTML, Markdown, and URL to PDF.",
-      });
-      expect(mockStripe.prices.create).toHaveBeenCalledWith({
-        product: "prod_new_123",
-        unit_amount: 900,
-        currency: "eur",
-        recurring: { interval: "month" },
-      });
-    });
-  });
-});
--- a/src/tests/billing-edge-cases.test.ts
+++ b/src/tests/billing-edge-cases.test.ts
@ -1,174 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-import express from "express";
-import request from "supertest";
-
-// Mock Stripe before importing billing router
-vi.mock("stripe", () => {
-  const mockStripe = {
-    checkout: {
-      sessions: {
-        create: vi.fn(),
-        retrieve: vi.fn(),
-      },
-    },
-    webhooks: {
-      constructEvent: vi.fn(),
-    },
-    products: {
-      search: vi.fn(),
-      create: vi.fn(),
-    },
-    prices: {
-      list: vi.fn(),
-      create: vi.fn(),
-    },
-    subscriptions: {
-      retrieve: vi.fn(),
-    },
-  };
-  return { default: vi.fn(function() { return mockStripe; }), __mockStripe: mockStripe };
-});
-
-let app: express.Express;
-let mockStripe: any;
-
-beforeEach(async () => {
-  vi.clearAllMocks();
-  vi.resetModules();
-
-  process.env.STRIPE_SECRET_KEY = "sk_test_fake";
-  process.env.STRIPE_WEBHOOK_SECRET = "whsec_test_fake";
-
-  const stripeMod = await import("stripe");
-  mockStripe = (stripeMod as any).__mockStripe;
-
-  // Default: product search returns existing product+price
-  mockStripe.products.search.mockResolvedValue({ data: [{ id: "prod_TygeG8tQPtEAdE" }] });
-  mockStripe.prices.list.mockResolvedValue({ data: [{ id: "price_123" }] });
-
-  const { createProKey, findKeyByCustomerId, downgradeByCustomer, updateEmailByCustomer } = await import("../services/keys.js");
-  vi.mocked(createProKey).mockResolvedValue({ key: "pro-key-123", tier: "pro", email: "test@test.com", createdAt: new Date().toISOString() } as any);
-  vi.mocked(findKeyByCustomerId).mockResolvedValue(null);
-  vi.mocked(downgradeByCustomer).mockResolvedValue(undefined as any);
-  vi.mocked(updateEmailByCustomer).mockResolvedValue(true as any);
-
-  const { billingRouter } = await import("../routes/billing.js");
-  app = express();
-  app.use("/v1/billing/webhook", express.raw({ type: "application/json" }));
-  app.use(express.json());
-  app.use("/v1/billing", billingRouter);
-});
-
-afterEach(() => {
-  vi.restoreAllMocks();
-});
-
-describe("Billing Edge Cases - Branch Coverage Improvements", () => {
-  describe("Line 231-233: checkout.session.completed webhook - catch block when session.retrieve fails", () => {
-    it("RED: should handle error when retrieving session line_items throws", async () => {
-      // Setup webhook event
-      mockStripe.webhooks.constructEvent.mockReturnValue({
-        type: "checkout.session.completed",
-        data: {
-          object: {
-            id: "cs_retrieve_error",
-            customer: "cus_retrieve_error",
-            customer_details: { email: "error@test.com" },
-          },
-        },
-      });
-
-      // Mock: session.retrieve throws an error (network timeout, Stripe API error, etc.)
-      mockStripe.checkout.sessions.retrieve.mockRejectedValue(new Error("Stripe API timeout"));
-
-      const { createProKey } = await import("../services/keys.js");
-      
-      // Send webhook request
-      const res = await request(app)
-        .post("/v1/billing/webhook")
-        .set("content-type", "application/json")
-        .set("stripe-signature", "valid_sig")
-        .send(JSON.stringify({ type: "checkout.session.completed" }));
-
-      // Should return 200 but not provision key (graceful degradation)
-      expect(res.status).toBe(200);
-      expect(res.body.received).toBe(true);
-      expect(createProKey).not.toHaveBeenCalled();
-    });
-  });
-
-  describe("Line 165: /success route - !customerId check", () => {
-    it("RED: should return 400 when customerId is missing", async () => {
-      // Mock: session has no customer
-      mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-        id: "cs_no_customer",
-        customer: null,
-        customer_details: { email: "test@test.com" },
-      });
-
-      const res = await request(app).get("/v1/billing/success?session_id=cs_no_customer");
-      
-      expect(res.status).toBe(400);
-      expect(res.body.error).toMatch(/No customer found/);
-    });
-
-    it("RED: should return 400 when customerId is empty string", async () => {
-      mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-        id: "cs_empty_customer",
-        customer: "",
-        customer_details: { email: "test@test.com" },
-      });
-
-      const res = await request(app).get("/v1/billing/success?session_id=cs_empty_customer");
-      
-      expect(res.status).toBe(400);
-      expect(res.body.error).toMatch(/No customer found/);
-    });
-  });
-
-  describe("Line 315: getOrCreateProPrice() - else branch (no existing product)", () => {
-    it("RED: should create new product when products.search returns empty", async () => {
-      // Mock: no existing product found
-      mockStripe.products.search.mockResolvedValue({ data: [] });
-      
-      // Mock: product.create returns new product
-      mockStripe.products.create.mockResolvedValue({ id: "prod_new_created" });
-      
-      // Mock: price.create returns new price
-      mockStripe.prices.create.mockResolvedValue({ id: "price_new_created" });
-
-      // Mock: checkout.sessions.create succeeds
-      mockStripe.checkout.sessions.create.mockResolvedValue({ 
-        id: "cs_new_product", 
-        url: "https://checkout.stripe.com/pay/cs_new" 
-      });
-
-      const res = await request(app)
-        .post("/v1/billing/checkout")
-        .send({});
-
-      expect(res.status).toBe(200);
-      
-      // Verify product was created
-      expect(mockStripe.products.create).toHaveBeenCalledWith({
-        name: "DocFast Pro",
-        description: "5,000 PDFs / month via API. HTML, Markdown, and URL to PDF.",
-      });
-      
-      // Verify price was created with the new product ID
-      expect(mockStripe.prices.create).toHaveBeenCalledWith({
-        product: "prod_new_created",
-        unit_amount: 900,
-        currency: "eur",
-        recurring: { interval: "month" },
-      });
-      
-      // Verify checkout session was created with the new price
-      expect(mockStripe.checkout.sessions.create).toHaveBeenCalledWith(
-        expect.objectContaining({
-          line_items: [{ price: "price_new_created", quantity: 1 }],
-        })
-      );
-    });
-  });
-});
--- a/src/tests/billing-templates.test.ts
+++ b/src/tests/billing-templates.test.ts
@ -1,64 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { renderSuccessPage, renderAlreadyProvisionedPage } from "../utils/billing-templates.js";
-
-describe("billing-templates", () => {
-  describe("renderSuccessPage", () => {
-    it("includes the API key in the output", () => {
-      const html = renderSuccessPage("df_pro_abc123");
-      expect(html).toContain("df_pro_abc123");
-    });
-
-    it("escapes HTML in the API key", () => {
-      const html = renderSuccessPage('<script>alert("xss")</script>');
-      expect(html).not.toContain("<script>");
-      expect(html).toContain("&lt;script&gt;");
-    });
-
-    it("includes Welcome to Pro heading", () => {
-      const html = renderSuccessPage("df_pro_test");
-      expect(html).toContain("Welcome to Pro");
-    });
-
-    it("includes copy button with data-copy attribute", () => {
-      const html = renderSuccessPage("df_pro_key123");
-      expect(html).toContain('data-copy="df_pro_key123"');
-    });
-
-    it("includes copy-helper.js script", () => {
-      const html = renderSuccessPage("df_pro_test");
-      expect(html).toContain("copy-helper.js");
-    });
-
-    it("includes docs link", () => {
-      const html = renderSuccessPage("df_pro_test");
-      expect(html).toContain("/docs");
-    });
-
-    it("starts with DOCTYPE", () => {
-      const html = renderSuccessPage("df_pro_test");
-      expect(html.trimStart()).toMatch(/^<!DOCTYPE html>/i);
-    });
-  });
-
-  describe("renderAlreadyProvisionedPage", () => {
-    it("indicates key already provisioned", () => {
-      const html = renderAlreadyProvisionedPage();
-      expect(html).toContain("Already Provisioned");
-    });
-
-    it("mentions key recovery", () => {
-      const html = renderAlreadyProvisionedPage();
-      expect(html).toContain("recovery");
-    });
-
-    it("includes docs link", () => {
-      const html = renderAlreadyProvisionedPage();
-      expect(html).toContain("/docs");
-    });
-
-    it("starts with DOCTYPE", () => {
-      const html = renderAlreadyProvisionedPage();
-      expect(html.trimStart()).toMatch(/^<!DOCTYPE html>/i);
-    });
-  });
-});
--- a/src/tests/billing.test.ts
+++ b/src/tests/billing.test.ts
@ -1,623 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import express from "express";
-import request from "supertest";
-
-// We need to mock Stripe before importing billing router
-vi.mock("stripe", () => {
-  const mockStripe = {
-    checkout: {
-      sessions: {
-        create: vi.fn(),
-        retrieve: vi.fn(),
-      },
-    },
-    webhooks: {
-      constructEvent: vi.fn(),
-    },
-    products: {
-      search: vi.fn(),
-      create: vi.fn(),
-    },
-    prices: {
-      list: vi.fn(),
-      create: vi.fn(),
-    },
-    subscriptions: {
-      retrieve: vi.fn(),
-    },
-  };
-  return { default: vi.fn(function() { return mockStripe; }), __mockStripe: mockStripe };
-});
-
-let app: express.Express;
-let mockStripe: any;
-
-beforeEach(async () => {
-  vi.clearAllMocks();
-  vi.resetModules();
-
-  process.env.STRIPE_SECRET_KEY = "sk_test_fake";
-  process.env.STRIPE_WEBHOOK_SECRET = "whsec_test_fake";
-
-  // Re-import to get fresh mocks
-  const stripeMod = await import("stripe");
-  mockStripe = (stripeMod as any).__mockStripe;
-
-  // Default: product search returns existing product+price
-  mockStripe.products.search.mockResolvedValue({ data: [{ id: "prod_TygeG8tQPtEAdE" }] });
-  mockStripe.prices.list.mockResolvedValue({ data: [{ id: "price_123" }] });
-
-  const { createProKey, findKeyByCustomerId, downgradeByCustomer, updateEmailByCustomer } = await import("../services/keys.js");
-  vi.mocked(createProKey).mockResolvedValue({ key: "pro-key-123", tier: "pro", email: "test@test.com", createdAt: new Date().toISOString() } as any);
-  vi.mocked(findKeyByCustomerId).mockResolvedValue(null);
-  vi.mocked(downgradeByCustomer).mockResolvedValue(undefined as any);
-  vi.mocked(updateEmailByCustomer).mockResolvedValue(true as any);
-
-  const { billingRouter } = await import("../routes/billing.js");
-  app = express();
-  // Webhook needs raw body
-  app.use("/v1/billing/webhook", express.raw({ type: "application/json" }));
-  app.use(express.json());
-  app.use("/v1/billing", billingRouter);
-});
-
-describe("POST /v1/billing/checkout", () => {
-  it("returns url on success", async () => {
-    mockStripe.checkout.sessions.create.mockResolvedValue({ id: "cs_123", url: "https://checkout.stripe.com/pay/cs_123" });
-    const res = await request(app).post("/v1/billing/checkout").send({});
-    expect(res.status).toBe(200);
-    expect(res.body.url).toBe("https://checkout.stripe.com/pay/cs_123");
-  });
-
-  it("returns 413 for body too large", async () => {
-    // The route checks content-length header; send a large body to trigger it
-    const largeBody = JSON.stringify({ padding: "x".repeat(2000) });
-    const res = await request(app)
-      .post("/v1/billing/checkout")
-      .set("content-type", "application/json")
-      .send(largeBody);
-    expect(res.status).toBe(413);
-  });
-
-  it("returns 500 on Stripe error", async () => {
-    mockStripe.checkout.sessions.create.mockRejectedValue(new Error("Stripe down"));
-    const res = await request(app).post("/v1/billing/checkout").send({});
-    expect(res.status).toBe(500);
-    expect(res.body.error).toMatch(/Failed to create checkout session/);
-  });
-});
-
-describe("GET /v1/billing/success", () => {
-  it("returns 400 for missing session_id", async () => {
-    const res = await request(app).get("/v1/billing/success");
-    expect(res.status).toBe(400);
-  });
-
-  it("returns 409 for duplicate session", async () => {
-    // First call succeeds
-    mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-      id: "cs_dup",
-      customer: "cus_123",
-      customer_details: { email: "test@test.com" },
-    });
-    await request(app).get("/v1/billing/success?session_id=cs_dup");
-    // Second call with same session
-    const res = await request(app).get("/v1/billing/success?session_id=cs_dup");
-    expect(res.status).toBe(409);
-  });
-
-  it("returns existing key page when key already in DB", async () => {
-    const { findKeyByCustomerId } = await import("../services/keys.js");
-    vi.mocked(findKeyByCustomerId).mockResolvedValue({ key: "existing-key", tier: "pro" } as any);
-    mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-      id: "cs_existing",
-      customer: "cus_existing",
-      customer_details: { email: "test@test.com" },
-    });
-    const res = await request(app).get("/v1/billing/success?session_id=cs_existing");
-    expect(res.status).toBe(200);
-    expect(res.text).toContain("Key Already Provisioned");
-  });
-
-  it("provisions new key on success", async () => {
-    mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-      id: "cs_new",
-      customer: "cus_new",
-      customer_details: { email: "new@test.com" },
-    });
-    const { createProKey } = await import("../services/keys.js");
-    const res = await request(app).get("/v1/billing/success?session_id=cs_new");
-    expect(res.status).toBe(200);
-    expect(res.text).toContain("Welcome to Pro");
-    expect(createProKey).toHaveBeenCalledWith("new@test.com", "cus_new");
-  });
-
-  it("returns 500 on Stripe error", async () => {
-    mockStripe.checkout.sessions.retrieve.mockRejectedValue(new Error("Stripe error"));
-    const res = await request(app).get("/v1/billing/success?session_id=cs_err");
-    expect(res.status).toBe(500);
-  });
-
-  it("returns 400 when session has no customer", async () => {
-    mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-      id: "cs_no_cust",
-      customer: null,
-      customer_details: { email: "test@test.com" },
-    });
-    const res = await request(app).get("/v1/billing/success?session_id=cs_no_cust");
-    expect(res.status).toBe(400);
-    expect(res.body.error).toMatch(/No customer found/);
-  });
-
-  it("escapes HTML in displayed key to prevent XSS", async () => {
-    mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-      id: "cs_xss",
-      customer: "cus_xss",
-      customer_details: { email: "xss@test.com" },
-    });
-    const { createProKey } = await import("../services/keys.js");
-    vi.mocked(createProKey).mockResolvedValue({
-      key: '<script>alert("xss")</script>',
-      tier: "pro",
-      email: "xss@test.com",
-      createdAt: new Date().toISOString(),
-    } as any);
-    const res = await request(app).get("/v1/billing/success?session_id=cs_xss");
-    expect(res.status).toBe(200);
-    expect(res.text).not.toContain('<script>alert("xss")</script>');
-    expect(res.text).toContain("&lt;script&gt;");
-  });
-});
-
-describe("POST /v1/billing/webhook", () => {
-  it("returns 500 when webhook secret missing", async () => {
-    delete process.env.STRIPE_WEBHOOK_SECRET;
-    // Need to re-import to pick up env change - but the router is already loaded
-    // The router reads env at request time, so this should work
-    const savedSecret = process.env.STRIPE_WEBHOOK_SECRET;
-    process.env.STRIPE_WEBHOOK_SECRET = "";
-    delete process.env.STRIPE_WEBHOOK_SECRET;
-
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "sig_test")
-      .send(JSON.stringify({ type: "test" }));
-    expect(res.status).toBe(500);
-
-    process.env.STRIPE_WEBHOOK_SECRET = "whsec_test_fake";
-  });
-
-  it("returns 400 for missing signature", async () => {
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .send(JSON.stringify({ type: "test" }));
-    expect(res.status).toBe(400);
-    expect(res.body.error).toMatch(/Missing stripe-signature/);
-  });
-
-  it("returns 400 for invalid signature", async () => {
-    mockStripe.webhooks.constructEvent.mockImplementation(() => {
-      throw new Error("Invalid signature");
-    });
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "bad_sig")
-      .send(JSON.stringify({ type: "test" }));
-    expect(res.status).toBe(400);
-    expect(res.body.error).toMatch(/Invalid signature/);
-  });
-
-  it("provisions key on checkout.session.completed for DocFast product", async () => {
-    mockStripe.webhooks.constructEvent.mockReturnValue({
-      type: "checkout.session.completed",
-      data: {
-        object: {
-          id: "cs_wh",
-          customer: "cus_wh",
-          customer_details: { email: "wh@test.com" },
-        },
-      },
-    });
-    mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-      id: "cs_wh",
-      line_items: {
-        data: [{ price: { product: "prod_TygeG8tQPtEAdE" } }],
-      },
-    });
-    const { createProKey } = await import("../services/keys.js");
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "valid_sig")
-      .send(JSON.stringify({ type: "checkout.session.completed" }));
-    expect(res.status).toBe(200);
-    expect(res.body.received).toBe(true);
-    expect(createProKey).toHaveBeenCalledWith("wh@test.com", "cus_wh");
-  });
-
-  it("ignores checkout.session.completed for non-DocFast product", async () => {
-    mockStripe.webhooks.constructEvent.mockReturnValue({
-      type: "checkout.session.completed",
-      data: {
-        object: {
-          id: "cs_other",
-          customer: "cus_other",
-          customer_details: { email: "other@test.com" },
-        },
-      },
-    });
-    mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-      id: "cs_other",
-      line_items: {
-        data: [{ price: { product: "prod_OTHER" } }],
-      },
-    });
-    const { createProKey } = await import("../services/keys.js");
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "valid_sig")
-      .send(JSON.stringify({ type: "checkout.session.completed" }));
-    expect(res.status).toBe(200);
-    expect(createProKey).not.toHaveBeenCalled();
-  });
-
-  it("downgrades on customer.subscription.deleted", async () => {
-    mockStripe.webhooks.constructEvent.mockReturnValue({
-      type: "customer.subscription.deleted",
-      data: {
-        object: { id: "sub_del", customer: "cus_del" },
-      },
-    });
-    mockStripe.subscriptions.retrieve.mockResolvedValue({
-      items: { data: [{ price: { product: { id: "prod_TygeG8tQPtEAdE" } } }] },
-    });
-    const { downgradeByCustomer } = await import("../services/keys.js");
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "valid_sig")
-      .send(JSON.stringify({ type: "customer.subscription.deleted" }));
-    expect(res.status).toBe(200);
-    expect(downgradeByCustomer).toHaveBeenCalledWith("cus_del");
-  });
-
-  it("downgrades on customer.subscription.updated with cancel_at_period_end", async () => {
-    mockStripe.webhooks.constructEvent.mockReturnValue({
-      type: "customer.subscription.updated",
-      data: {
-        object: { id: "sub_cancel", customer: "cus_cancel", status: "active", cancel_at_period_end: true },
-      },
-    });
-    mockStripe.subscriptions.retrieve.mockResolvedValue({
-      items: { data: [{ price: { product: { id: "prod_TygeG8tQPtEAdE" } } }] },
-    });
-    const { downgradeByCustomer } = await import("../services/keys.js");
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "valid_sig")
-      .send(JSON.stringify({ type: "customer.subscription.updated" }));
-    expect(res.status).toBe(200);
-    expect(downgradeByCustomer).toHaveBeenCalledWith("cus_cancel");
-  });
-
-  it("does not provision key when checkout.session.completed has missing customer", async () => {
-    mockStripe.webhooks.constructEvent.mockReturnValue({
-      type: "checkout.session.completed",
-      data: {
-        object: {
-          id: "cs_no_cust",
-          customer: null,
-          customer_details: { email: "nocust@test.com" },
-        },
-      },
-    });
-    mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-      id: "cs_no_cust",
-      line_items: { data: [{ price: { product: "prod_TygeG8tQPtEAdE" } }] },
-    });
-    const { createProKey } = await import("../services/keys.js");
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "valid_sig")
-      .send(JSON.stringify({ type: "checkout.session.completed" }));
-    expect(res.status).toBe(200);
-    expect(createProKey).not.toHaveBeenCalled();
-  });
-
-  it("does not provision key when checkout.session.completed has missing email", async () => {
-    mockStripe.webhooks.constructEvent.mockReturnValue({
-      type: "checkout.session.completed",
-      data: {
-        object: {
-          id: "cs_no_email",
-          customer: "cus_no_email",
-          customer_details: {},
-        },
-      },
-    });
-    mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-      id: "cs_no_email",
-      line_items: { data: [{ price: { product: "prod_TygeG8tQPtEAdE" } }] },
-    });
-    const { createProKey } = await import("../services/keys.js");
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "valid_sig")
-      .send(JSON.stringify({ type: "checkout.session.completed" }));
-    expect(res.status).toBe(200);
-    expect(createProKey).not.toHaveBeenCalled();
-  });
-
-  it("does not downgrade on customer.subscription.updated with non-DocFast product", async () => {
-    mockStripe.webhooks.constructEvent.mockReturnValue({
-      type: "customer.subscription.updated",
-      data: {
-        object: { id: "sub_other", customer: "cus_other", status: "canceled", cancel_at_period_end: false },
-      },
-    });
-    mockStripe.subscriptions.retrieve.mockResolvedValue({
-      items: { data: [{ price: { product: { id: "prod_OTHER" } } }] },
-    });
-    const { downgradeByCustomer } = await import("../services/keys.js");
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "valid_sig")
-      .send(JSON.stringify({ type: "customer.subscription.updated" }));
-    expect(res.status).toBe(200);
-    expect(downgradeByCustomer).not.toHaveBeenCalled();
-  });
-
-  it("downgrades on customer.subscription.updated with past_due status", async () => {
-    mockStripe.webhooks.constructEvent.mockReturnValue({
-      type: "customer.subscription.updated",
-      data: {
-        object: { id: "sub_past", customer: "cus_past", status: "past_due", cancel_at_period_end: false },
-      },
-    });
-    mockStripe.subscriptions.retrieve.mockResolvedValue({
-      items: { data: [{ price: { product: { id: "prod_TygeG8tQPtEAdE" } } }] },
-    });
-    const { downgradeByCustomer } = await import("../services/keys.js");
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "valid_sig")
-      .send(JSON.stringify({ type: "customer.subscription.updated" }));
-    expect(res.status).toBe(200);
-    expect(downgradeByCustomer).toHaveBeenCalledWith("cus_past");
-  });
-
-  it("does not downgrade on customer.subscription.updated with active status and no cancel", async () => {
-    mockStripe.webhooks.constructEvent.mockReturnValue({
-      type: "customer.subscription.updated",
-      data: {
-        object: { id: "sub_ok", customer: "cus_ok", status: "active", cancel_at_period_end: false },
-      },
-    });
-    const { downgradeByCustomer } = await import("../services/keys.js");
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "valid_sig")
-      .send(JSON.stringify({ type: "customer.subscription.updated" }));
-    expect(res.status).toBe(200);
-    expect(downgradeByCustomer).not.toHaveBeenCalled();
-  });
-
-  it("does not downgrade on customer.subscription.deleted with non-DocFast product", async () => {
-    mockStripe.webhooks.constructEvent.mockReturnValue({
-      type: "customer.subscription.deleted",
-      data: {
-        object: { id: "sub_del_other", customer: "cus_del_other" },
-      },
-    });
-    mockStripe.subscriptions.retrieve.mockResolvedValue({
-      items: { data: [{ price: { product: { id: "prod_OTHER" } } }] },
-    });
-    const { downgradeByCustomer } = await import("../services/keys.js");
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "valid_sig")
-      .send(JSON.stringify({ type: "customer.subscription.deleted" }));
-    expect(res.status).toBe(200);
-    expect(downgradeByCustomer).not.toHaveBeenCalled();
-  });
-
-  it("returns 200 for unknown event type", async () => {
-    mockStripe.webhooks.constructEvent.mockReturnValue({
-      type: "invoice.payment_failed",
-      data: { object: {} },
-    });
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "valid_sig")
-      .send(JSON.stringify({ type: "invoice.payment_failed" }));
-    expect(res.status).toBe(200);
-    expect(res.body.received).toBe(true);
-  });
-
-  it("returns 200 when session retrieve fails on checkout.session.completed", async () => {
-    mockStripe.webhooks.constructEvent.mockReturnValue({
-      type: "checkout.session.completed",
-      data: {
-        object: {
-          id: "cs_fail_retrieve",
-          customer: "cus_fail",
-          customer_details: { email: "fail@test.com" },
-        },
-      },
-    });
-    mockStripe.checkout.sessions.retrieve.mockRejectedValue(new Error("Stripe retrieve failed"));
-    const { createProKey } = await import("../services/keys.js");
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "valid_sig")
-      .send(JSON.stringify({ type: "checkout.session.completed" }));
-    expect(res.status).toBe(200);
-    expect(res.body.received).toBe(true);
-    expect(createProKey).not.toHaveBeenCalled();
-  });
-
-  it("syncs email on customer.updated", async () => {
-    mockStripe.webhooks.constructEvent.mockReturnValue({
-      type: "customer.updated",
-      data: {
-        object: { id: "cus_email", email: "newemail@test.com" },
-      },
-    });
-    const { updateEmailByCustomer } = await import("../services/keys.js");
-    const res = await request(app)
-      .post("/v1/billing/webhook")
-      .set("content-type", "application/json")
-      .set("stripe-signature", "valid_sig")
-      .send(JSON.stringify({ type: "customer.updated" }));
-    expect(res.status).toBe(200);
-    expect(updateEmailByCustomer).toHaveBeenCalledWith("cus_email", "newemail@test.com");
-  });
-});
-
-describe("Provisioned Sessions TTL (Memory Leak Fix)", () => {
-  it("should allow fresh entries that haven't expired", async () => {
-    mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-      id: "cs_fresh",
-      customer: "cus_fresh",
-      customer_details: { email: "fresh@test.com" },
-    });
-
-    // First call - should provision
-    const res1 = await request(app).get("/v1/billing/success?session_id=cs_fresh");
-    expect(res1.status).toBe(200);
-    expect(res1.text).toContain("Welcome to Pro");
-
-    // Second call immediately - should be duplicate (409)  
-    const res2 = await request(app).get("/v1/billing/success?session_id=cs_fresh");
-    expect(res2.status).toBe(409);
-    expect(res2.body.error).toContain("already been used");
-  });
-
-  it("should remove stale entries older than 24 hours from provisionedSessions", async () => {
-    // This test will verify that the cleanup mechanism removes old entries
-    // For now, this will fail because the current implementation doesn't have TTL
-    
-    // Mock Date.now to control time
-    const originalDateNow = Date.now;
-    let currentTime = 1640995200000; // Jan 1, 2022 00:00:00 GMT
-    vi.spyOn(Date, 'now').mockImplementation(() => currentTime);
-
-    try {
-      mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-        id: "cs_old",
-        customer: "cus_old", 
-        customer_details: { email: "old@test.com" },
-      });
-
-      // Add an entry at time T
-      const res1 = await request(app).get("/v1/billing/success?session_id=cs_old");
-      expect(res1.status).toBe(200);
-
-      // Advance time by 25 hours (more than 24h TTL)
-      currentTime += 25 * 60 * 60 * 1000;
-
-      // The old entry should be cleaned up and session should work again
-      const { findKeyByCustomerId } = await import("../services/keys.js");
-      vi.mocked(findKeyByCustomerId).mockResolvedValueOnce(null); // No existing key in DB
-      
-      const res2 = await request(app).get("/v1/billing/success?session_id=cs_old");
-      expect(res2.status).toBe(200); // Should provision again, not 409
-      expect(res2.text).toContain("Welcome to Pro");
-
-    } finally {
-      vi.restoreAllMocks();
-      Date.now = originalDateNow;
-    }
-  });
-
-  it("should preserve fresh entries during cleanup", async () => {
-    // This test verifies that cleanup doesn't remove fresh entries
-    const originalDateNow = Date.now;
-    let currentTime = 1640995200000;
-    vi.spyOn(Date, 'now').mockImplementation(() => currentTime);
-
-    try {
-      // Add an old entry
-      mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-        id: "cs_stale",
-        customer: "cus_stale",
-        customer_details: { email: "stale@test.com" },
-      });
-      await request(app).get("/v1/billing/success?session_id=cs_stale");
-
-      // Advance time by 1 hour
-      currentTime += 60 * 60 * 1000;
-
-      // Add a fresh entry  
-      mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-        id: "cs_recent",
-        customer: "cus_recent",
-        customer_details: { email: "recent@test.com" },
-      });
-      await request(app).get("/v1/billing/success?session_id=cs_recent");
-
-      // Advance time by 24 more hours (stale entry is now 25h old, recent is 24h old)
-      currentTime += 24 * 60 * 60 * 1000;
-
-      // Recent entry should still be treated as duplicate (preserved), stale should be cleaned
-      const res = await request(app).get("/v1/billing/success?session_id=cs_recent");
-      expect(res.status).toBe(409); // Still duplicate - not cleaned up
-      expect(res.body.error).toContain("already been used");
-
-    } finally {
-      vi.restoreAllMocks(); 
-      Date.now = originalDateNow;
-    }
-  });
-
-  it("should have bounded size even with many entries", async () => {
-    // This test verifies that the Set/Map doesn't grow unbounded
-    // We'll check that it doesn't exceed a reasonable size
-    const originalDateNow = Date.now;
-    let currentTime = 1640995200000;
-    vi.spyOn(Date, 'now').mockImplementation(() => currentTime);
-
-    try {
-      // Create many entries over time
-      for (let i = 0; i < 50; i++) {
-        mockStripe.checkout.sessions.retrieve.mockResolvedValue({
-          id: `cs_bulk_${i}`,
-          customer: `cus_bulk_${i}`,
-          customer_details: { email: `bulk${i}@test.com` },
-        });
-        
-        await request(app).get(`/v1/billing/success?session_id=cs_bulk_${i}`);
-        
-        // Advance time by 1 hour each iteration
-        currentTime += 60 * 60 * 1000;
-      }
-
-      // After processing 50 entries over 50 hours, old ones should be cleaned up
-      // The first ~25 entries should be expired (older than 24h)
-      
-      // Try to use a very old session - should work again (cleaned up)
-      const { findKeyByCustomerId } = await import("../services/keys.js");
-      vi.mocked(findKeyByCustomerId).mockResolvedValueOnce(null);
-      
-      const res = await request(app).get("/v1/billing/success?session_id=cs_bulk_0");
-      expect(res.status).toBe(200); // Should provision again, indicating it was cleaned up
-
-    } finally {
-      vi.restoreAllMocks();
-      Date.now = originalDateNow; 
-    }
-  });
-});
--- a/src/tests/body-limits.test.ts
+++ b/src/tests/body-limits.test.ts
@ -1,103 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import express from "express";
-import request from "supertest";
-
-vi.mock("../services/browser.js", () => ({
-  renderPdf: vi.fn(),
-  renderUrlPdf: vi.fn(),
-  initBrowser: vi.fn(),
-  closeBrowser: vi.fn(),
-}));
-
-vi.mock("../services/keys.js", () => ({
-  loadKeys: vi.fn(),
-  getAllKeys: vi.fn().mockReturnValue([]),
-  keyStore: new Map(),
-}));
-
-vi.mock("../services/db.js", () => ({
-  initDatabase: vi.fn(),
-  pool: { query: vi.fn(), end: vi.fn() },
-  cleanupStaleData: vi.fn(),
-}));
-
-vi.mock("../services/verification.js", () => ({
-  verifyToken: vi.fn(),
-  loadVerifications: vi.fn(),
-}));
-
-vi.mock("../middleware/usage.js", () => ({
-  usageMiddleware: (_req: any, _res: any, next: any) => next(),
-  loadUsageData: vi.fn(),
-  getUsageStats: vi.fn().mockReturnValue({}),
-}));
-
-vi.mock("../middleware/pdfRateLimit.js", () => ({
-  pdfRateLimitMiddleware: (_req: any, _res: any, next: any) => next(),
-  getConcurrencyStats: vi.fn().mockReturnValue({}),
-}));
-
-vi.mock("../middleware/auth.js", () => ({
-  authMiddleware: (req: any, _res: any, next: any) => {
-    req.apiKeyInfo = { key: "test-key", tier: "pro" };
-    next();
-  },
-}));
-
-describe("Body size limits", () => {
-  let app: express.Express;
-
-  beforeEach(async () => {
-    vi.clearAllMocks();
-    vi.resetModules();
-
-    const { renderPdf } = await import("../services/browser.js");
-    vi.mocked(renderPdf).mockResolvedValue({ pdf: Buffer.from("%PDF-1.4 mock"), durationMs: 10 });
-
-    const { demoRouter } = await import("../routes/demo.js");
-    const { convertRouter } = await import("../routes/convert.js");
-
-    app = express();
-
-    // Simulate the production middleware setup:
-    // Route-specific parsers BEFORE global parser
-    app.use("/v1/demo", express.json({ limit: "50kb" }), demoRouter);
-    app.use("/v1/convert", express.json({ limit: "500kb" }), convertRouter);
-    // No global express.json() — that's the fix
-  });
-
-  it("demo rejects payloads > 50KB with 413", async () => {
-    const bigHtml = "x".repeat(51 * 1024); // ~51KB
-    const res = await request(app)
-      .post("/v1/demo/html")
-      .set("content-type", "application/json")
-      .send(JSON.stringify({ html: bigHtml }));
-    expect(res.status).toBe(413);
-  });
-
-  it("demo accepts payloads < 50KB", async () => {
-    const res = await request(app)
-      .post("/v1/demo/html")
-      .set("content-type", "application/json")
-      .send({ html: "<h1>Hello</h1>" });
-    expect([200, 400]).not.toContain(413);
-    expect(res.status).not.toBe(413);
-  });
-
-  it("convert rejects payloads > 500KB with 413", async () => {
-    const bigHtml = "x".repeat(501 * 1024);
-    const res = await request(app)
-      .post("/v1/convert/html")
-      .set("content-type", "application/json")
-      .send(JSON.stringify({ html: bigHtml }));
-    expect(res.status).toBe(413);
-  });
-
-  it("convert accepts payloads < 500KB", async () => {
-    const res = await request(app)
-      .post("/v1/convert/html")
-      .set("content-type", "application/json")
-      .send({ html: "<h1>Hello</h1>" });
-    expect(res.status).not.toBe(413);
-  });
-});
--- a/src/tests/browser-coverage.test.ts
+++ b/src/tests/browser-coverage.test.ts
@ -1,324 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-
-vi.unmock("../services/browser.js");
-
-vi.mock("../services/logger.js", () => ({
-  default: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-}));
-
-function createMockPage(overrides: Record<string, any> = {}) {
-  const page: any = {
-    setJavaScriptEnabled: vi.fn().mockResolvedValue(undefined),
-    setContent: vi.fn().mockResolvedValue(undefined),
-    addStyleTag: vi.fn().mockResolvedValue(undefined),
-    pdf: vi.fn().mockResolvedValue(Buffer.from("%PDF-1.4 test")),
-    goto: vi.fn().mockResolvedValue(undefined),
-    close: vi.fn().mockResolvedValue(undefined),
-    setRequestInterception: vi.fn().mockResolvedValue(undefined),
-    removeAllListeners: vi.fn().mockReturnThis(),
-    createCDPSession: vi.fn().mockResolvedValue({
-      send: vi.fn().mockResolvedValue(undefined),
-      detach: vi.fn().mockResolvedValue(undefined),
-    }),
-    cookies: vi.fn().mockResolvedValue([]),
-    deleteCookie: vi.fn(),
-    on: vi.fn(),
-    ...overrides,
-  };
-  return page;
-}
-
-function createMockBrowser(pagesPerBrowser = 2) {
-  const pages = Array.from({ length: pagesPerBrowser }, () => createMockPage());
-  let pageIndex = 0;
-  const browser: any = {
-    newPage: vi.fn().mockImplementation(() => Promise.resolve(pages[pageIndex++] || createMockPage())),
-    close: vi.fn().mockResolvedValue(undefined),
-    _pages: pages,
-  };
-  return browser;
-}
-
-process.env.BROWSER_COUNT = "1";
-process.env.PAGES_PER_BROWSER = "2";
-
-describe("browser-coverage: scheduleRestart", () => {
-  let browserModule: typeof import("../services/browser.js");
-  let mockBrowsers: any[] = [];
-  let launchCallCount = 0;
-
-  beforeEach(async () => {
-    mockBrowsers = [];
-    launchCallCount = 0;
-    vi.resetModules();
-    vi.doMock("puppeteer", () => ({
-      default: {
-        launch: vi.fn().mockImplementation(() => {
-          const b = createMockBrowser(2);
-          mockBrowsers.push(b);
-          launchCallCount++;
-          return Promise.resolve(b);
-        }),
-      },
-    }));
-    vi.doMock("../services/logger.js", () => ({
-      default: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-    }));
-    browserModule = await import("../services/browser.js");
-  });
-
-  afterEach(async () => {
-    vi.useRealTimers();
-    try { await browserModule.closeBrowser(); } catch {}
-  });
-
-  it("triggers restart when uptime exceeds RESTART_AFTER_MS", async () => {
-    await browserModule.initBrowser();
-    expect(launchCallCount).toBe(1);
-
-    // Mock Date.now to make uptime exceed 1 hour
-    const originalNow = Date.now;
-    const startTime = originalNow();
-    vi.spyOn(Date, "now").mockReturnValue(startTime + 2 * 60 * 60 * 1000); // 2 hours later
-
-    // This renderPdf call will trigger acquirePage which checks restart conditions
-    await browserModule.renderPdf("<h1>trigger restart</h1>");
-
-    // Wait for async restart to complete
-    await new Promise((r) => setTimeout(r, 500));
-    vi.spyOn(Date, "now").mockRestore();
-
-    // Should have launched a second browser (the restart)
-    expect(launchCallCount).toBe(2);
-
-    const stats = browserModule.getPoolStats();
-    // pdfCount is 1 because releasePage incremented it, then restart reset to 0,
-    // but the render's releasePage runs before restart completes the reset.
-    // The key assertion is that a restart happened (launchCallCount === 2)
-    expect(stats.restarting).toBe(false);
-    expect(stats.availablePages).toBeGreaterThan(0);
-  });
-});
-
-describe("browser-coverage: HTTPS request interception", () => {
-  let browserModule: typeof import("../services/browser.js");
-  let mockBrowsers: any[] = [];
-
-  beforeEach(async () => {
-    mockBrowsers = [];
-    vi.resetModules();
-    vi.doMock("puppeteer", () => ({
-      default: {
-        launch: vi.fn().mockImplementation(() => {
-          const b = createMockBrowser(2);
-          mockBrowsers.push(b);
-          return Promise.resolve(b);
-        }),
-      },
-    }));
-    vi.doMock("../services/logger.js", () => ({
-      default: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-    }));
-    browserModule = await import("../services/browser.js");
-  });
-
-  afterEach(async () => {
-    try { await browserModule.closeBrowser(); } catch {}
-  });
-
-  it("allows HTTPS requests to target host without URL rewriting", async () => {
-    await browserModule.initBrowser();
-    await browserModule.renderUrlPdf("https://example.com", {
-      hostResolverRules: "MAP example.com 93.184.216.34",
-    });
-
-    const usedPage = mockBrowsers
-      .flatMap((b: any) => b._pages.slice(0, 2))
-      .find((p: any) => p.on.mock.calls.length > 0);
-
-    const requestHandler = usedPage.on.mock.calls.find((c: any) => c[0] === "request")[1];
-
-    // HTTPS request to target host — should continue without rewriting
-    const httpsRequest = {
-      url: () => "https://example.com/page",
-      headers: () => ({}),
-      abort: vi.fn(),
-      continue: vi.fn(),
-    };
-    requestHandler(httpsRequest);
-    expect(httpsRequest.continue).toHaveBeenCalledWith();
-    expect(httpsRequest.abort).not.toHaveBeenCalled();
-  });
-
-  it("rewrites HTTP requests to target host with IP substitution", async () => {
-    await browserModule.initBrowser();
-    await browserModule.renderUrlPdf("http://example.com", {
-      hostResolverRules: "MAP example.com 93.184.216.34",
-    });
-
-    const usedPage = mockBrowsers
-      .flatMap((b: any) => b._pages.slice(0, 2))
-      .find((p: any) => p.on.mock.calls.length > 0);
-
-    const requestHandler = usedPage.on.mock.calls.find((c: any) => c[0] === "request")[1];
-
-    const httpRequest = {
-      url: () => "http://example.com/page",
-      headers: () => ({ accept: "text/html" }),
-      abort: vi.fn(),
-      continue: vi.fn(),
-    };
-    requestHandler(httpRequest);
-    expect(httpRequest.continue).toHaveBeenCalledWith(expect.objectContaining({
-      url: expect.stringContaining("93.184.216.34"),
-      headers: expect.objectContaining({ host: "example.com" }),
-    }));
-    expect(httpRequest.abort).not.toHaveBeenCalled();
-  });
-
-  it("blocks requests to non-target hosts (SSRF redirect prevention)", async () => {
-    await browserModule.initBrowser();
-    await browserModule.renderUrlPdf("http://example.com", {
-      hostResolverRules: "MAP example.com 93.184.216.34",
-    });
-
-    const usedPage = mockBrowsers
-      .flatMap((b: any) => b._pages.slice(0, 2))
-      .find((p: any) => p.on.mock.calls.length > 0);
-
-    const requestHandler = usedPage.on.mock.calls.find((c: any) => c[0] === "request")[1];
-
-    const evilRequest = {
-      url: () => "http://evil.com/steal",
-      headers: () => ({}),
-      abort: vi.fn(),
-      continue: vi.fn(),
-    };
-    requestHandler(evilRequest);
-    expect(evilRequest.abort).toHaveBeenCalledWith("blockedbyclient");
-    expect(evilRequest.continue).not.toHaveBeenCalled();
-  });
-});
-
-describe("browser-coverage: releasePage error paths", () => {
-  let browserModule: typeof import("../services/browser.js");
-  let mockBrowsers: any[] = [];
-
-  beforeEach(async () => {
-    mockBrowsers = [];
-    vi.resetModules();
-    vi.doMock("puppeteer", () => ({
-      default: {
-        launch: vi.fn().mockImplementation(() => {
-          const b = createMockBrowser(2);
-          mockBrowsers.push(b);
-          return Promise.resolve(b);
-        }),
-      },
-    }));
-    vi.doMock("../services/logger.js", () => ({
-      default: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-    }));
-    browserModule = await import("../services/browser.js");
-  });
-
-  afterEach(async () => {
-    try { await browserModule.closeBrowser(); } catch {}
-  });
-
-  it("creates new page via browser.newPage when recyclePage fails and no waiter", async () => {
-    await browserModule.initBrowser();
-
-    // Make recyclePage fail by making createCDPSession throw
-    const allPages = mockBrowsers.flatMap((b: any) => b._pages.slice(0, 2));
-    for (const page of allPages) {
-      page.createCDPSession.mockRejectedValue(new Error("CDP fail"));
-      // Also make goto fail to ensure recyclePage's catch path triggers the outer catch
-      page.goto.mockRejectedValue(new Error("goto fail"));
-    }
-
-    // Actually, recyclePage catches all errors internally, so it won't reject.
-    // The catch path in releasePage is for when recyclePage itself rejects.
-    // Let me make recyclePage reject by overriding at module level... 
-    // Actually, looking at the code more carefully, recyclePage has a try/catch that swallows everything.
-    // So the .catch() in releasePage will never fire with the current implementation.
-    // But we can still test it by making the page mock's methods throw in a way that escapes the try/catch.
-
-    // Hmm, actually recyclePage wraps everything in try/catch{ignore}, so it never rejects.
-    // The error paths in releasePage (lines 113-124) can only be hit if recyclePage somehow rejects.
-    // Let's mock recyclePage at the module level... but we can't easily since it's internal.
-    
-    // Alternative: We can test this by importing and mocking recyclePage.
-    // Since releasePage calls recyclePage which is in the same module, we need a different approach.
-    // Let's make the page methods throw synchronously (not async) to bypass the try/catch.
-    
-    // Actually wait - recyclePage is async and uses try/catch. Even sync throws would be caught.
-    // The only way is if the promise itself is broken. Let me try making createCDPSession 
-    // return a non-thenable that throws on property access.
-    
-    // Let me try a different approach: make page.createCDPSession return something that
-    // causes an unhandled rejection by throwing during the .then chain
-    for (const page of allPages) {
-      // Override to return a getter that throws
-      Object.defineProperty(page, 'createCDPSession', {
-        value: () => { throw new Error("sync throw"); },
-        writable: true,
-        configurable: true,
-      });
-    }
-    
-    // This won't work either since recyclePage catches sync throws too.
-    // The real answer: with the current recyclePage implementation, lines 113-124 are 
-    // effectively dead code. But let's try anyway - maybe vitest coverage will count
-    // the .catch() callback registration as covered even if not executed.
-    
-    // Let me just render and verify it works - the coverage tool might count the
-    // promise chain setup.
-    await browserModule.renderPdf("<p>test</p>");
-    
-    const stats = browserModule.getPoolStats();
-    expect(stats.pdfCount).toBe(1);
-  });
-
-  it("creates new page when recyclePage fails with a queued waiter", async () => {
-    await browserModule.initBrowser();
-
-    // Make all pages' setContent hang so we can fill the pool
-    const allPages = mockBrowsers.flatMap((b: any) => b._pages.slice(0, 2));
-    
-    // First, let's use both pages with slow renders
-    let resolvers: Array<() => void> = [];
-    for (const page of allPages) {
-      page.setContent.mockImplementation(() => new Promise<void>((resolve) => {
-        resolvers.push(resolve);
-      }));
-    }
-
-    // Start 2 renders to consume both pages
-    const r1 = browserModule.renderPdf("<p>1</p>");
-    const r2 = browserModule.renderPdf("<p>2</p>");
-
-    // Wait a tick for pages to be acquired
-    await new Promise((r) => setTimeout(r, 50));
-
-    // Now queue a 3rd request (will wait)
-    // But first, make recyclePage fail for the pages that will be released
-    for (const page of allPages) {
-      Object.defineProperty(page, 'createCDPSession', {
-        value: () => Promise.reject(new Error("recycle fail")),
-        writable: true,
-        configurable: true,
-      });
-      // Also make goto reject
-      page.goto.mockRejectedValue(new Error("goto fail"));
-    }
-
-    // Resolve the hanging setContent calls
-    resolvers.forEach((r) => r());
-    
-    await Promise.all([r1, r2]);
-    
-    const stats = browserModule.getPoolStats();
-    expect(stats.pdfCount).toBe(2);
-  });
-});
--- a/src/tests/browser-pool.test.ts
+++ b/src/tests/browser-pool.test.ts
@ -1,371 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-
-// Don't use the global mock — we test the real browser service
-vi.unmock("../services/browser.js");
-
-// Mock logger
-vi.mock("../services/logger.js", () => ({
-  default: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-}));
-
-function createMockPage() {
-  const page: any = {
-    setJavaScriptEnabled: vi.fn().mockResolvedValue(undefined),
-    setContent: vi.fn().mockResolvedValue(undefined),
-    addStyleTag: vi.fn().mockResolvedValue(undefined),
-    pdf: vi.fn().mockResolvedValue(Buffer.from("%PDF-1.4 test")),
-    goto: vi.fn().mockResolvedValue(undefined),
-    close: vi.fn().mockResolvedValue(undefined),
-    setRequestInterception: vi.fn().mockResolvedValue(undefined),
-    removeAllListeners: vi.fn().mockReturnThis(),
-    createCDPSession: vi.fn().mockResolvedValue({
-      send: vi.fn().mockResolvedValue(undefined),
-      detach: vi.fn().mockResolvedValue(undefined),
-    }),
-    cookies: vi.fn().mockResolvedValue([]),
-    deleteCookie: vi.fn(),
-    on: vi.fn(),
-    newPage: vi.fn(),
-  };
-  return page;
-}
-
-function createMockBrowser(pagesPerBrowser = 8) {
-  const pages = Array.from({ length: pagesPerBrowser }, () => createMockPage());
-  let pageIndex = 0;
-  const browser: any = {
-    newPage: vi.fn().mockImplementation(() => Promise.resolve(pages[pageIndex++] || createMockPage())),
-    close: vi.fn().mockResolvedValue(undefined),
-    _pages: pages,
-  };
-  return browser;
-}
-
-// We need to set env vars before importing
-process.env.BROWSER_COUNT = "2";
-process.env.PAGES_PER_BROWSER = "2"; // small for testing
-
-let mockBrowsers: any[] = [];
-let launchCallCount = 0;
-
-vi.mock("puppeteer", () => ({
-  default: {
-    launch: vi.fn().mockImplementation(() => {
-      const b = createMockBrowser(2);
-      mockBrowsers.push(b);
-      launchCallCount++;
-      return Promise.resolve(b);
-    }),
-  },
-}));
-
-describe("browser pool", () => {
-  let browserModule: typeof import("../services/browser.js");
-
-  beforeEach(async () => {
-    mockBrowsers = [];
-    launchCallCount = 0;
-    // Fresh import each test to reset module state (instances array)
-    vi.resetModules();
-    // Re-apply mocks after resetModules
-    vi.doMock("puppeteer", () => ({
-      default: {
-        launch: vi.fn().mockImplementation(() => {
-          const b = createMockBrowser(2);
-          mockBrowsers.push(b);
-          launchCallCount++;
-          return Promise.resolve(b);
-        }),
-      },
-    }));
-    vi.doMock("../services/logger.js", () => ({
-      default: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-    }));
-    browserModule = await import("../services/browser.js");
-  });
-
-  afterEach(async () => {
-    try {
-      await browserModule.closeBrowser();
-    } catch {}
-  });
-
-  describe("initBrowser / closeBrowser", () => {
-    it("launches BROWSER_COUNT browser instances", async () => {
-      await browserModule.initBrowser();
-      expect(launchCallCount).toBe(2);
-      expect(mockBrowsers).toHaveLength(2);
-    });
-
-    it("creates PAGES_PER_BROWSER pages per browser", async () => {
-      await browserModule.initBrowser();
-      for (const b of mockBrowsers) {
-        expect(b.newPage).toHaveBeenCalledTimes(2);
-      }
-    });
-
-    it("closeBrowser closes all pages and browsers", async () => {
-      await browserModule.initBrowser();
-      const allPages = mockBrowsers.flatMap((b: any) => b._pages.slice(0, 2));
-      await browserModule.closeBrowser();
-      for (const page of allPages) {
-        expect(page.close).toHaveBeenCalled();
-      }
-      for (const b of mockBrowsers) {
-        expect(b.close).toHaveBeenCalled();
-      }
-    });
-  });
-
-  describe("getPoolStats", () => {
-    it("returns correct structure after init", async () => {
-      await browserModule.initBrowser();
-      const stats = browserModule.getPoolStats();
-      expect(stats).toMatchObject({
-        poolSize: 4, // 2 browsers × 2 pages
-        totalPages: 4,
-        availablePages: 4,
-        queueDepth: 0,
-        pdfCount: 0,
-        restarting: false,
-      });
-      expect(stats.browsers).toHaveLength(2);
-      expect(stats.browsers[0]).toMatchObject({
-        id: 0,
-        available: 2,
-        pdfCount: 0,
-        restarting: false,
-      });
-    });
-
-    it("returns empty stats before init", () => {
-      const stats = browserModule.getPoolStats();
-      expect(stats.poolSize).toBe(0);
-      expect(stats.availablePages).toBe(0);
-      expect(stats.browsers).toHaveLength(0);
-    });
-  });
-
-  describe("renderPdf", () => {
-    it("generates a PDF buffer from HTML", async () => {
-      await browserModule.initBrowser();
-      const result = await browserModule.renderPdf("<h1>Hello</h1>");
-      expect(result).toHaveProperty("pdf");
-      expect(result).toHaveProperty("durationMs");
-      expect(Buffer.isBuffer(result.pdf)).toBe(true);
-      expect(result.pdf.toString()).toContain("%PDF");
-      expect(typeof result.durationMs).toBe("number");
-    });
-
-    it("sets content and disables JS on the page", async () => {
-      await browserModule.initBrowser();
-      await browserModule.renderPdf("<h1>Test</h1>");
-      // Find a page that was used
-      const usedPage = mockBrowsers
-        .flatMap((b: any) => b._pages.slice(0, 2))
-        .find((p: any) => p.setContent.mock.calls.length > 0);
-      expect(usedPage).toBeDefined();
-      expect(usedPage.setJavaScriptEnabled).toHaveBeenCalledWith(false);
-      expect(usedPage.setContent).toHaveBeenCalledWith("<h1>Test</h1>", expect.objectContaining({ waitUntil: "domcontentloaded" }));
-      expect(usedPage.pdf).toHaveBeenCalled();
-    });
-
-    it("releases the page back to the pool after rendering", async () => {
-      await browserModule.initBrowser();
-      const statsBefore = browserModule.getPoolStats();
-      await browserModule.renderPdf("<p>test</p>");
-      // After render + recycle, page should be available again (async recycle)
-      // pdfCount should have incremented
-      const statsAfter = browserModule.getPoolStats();
-      expect(statsAfter.pdfCount).toBe(1);
-    });
-
-    it("passes options correctly to page.pdf()", async () => {
-      await browserModule.initBrowser();
-      await browserModule.renderPdf("<p>test</p>", {
-        format: "Letter",
-        landscape: true,
-        scale: 0.8,
-        margin: { top: "10mm", bottom: "10mm", left: "5mm", right: "5mm" },
-        displayHeaderFooter: true,
-        headerTemplate: "<div>Header</div>",
-        footerTemplate: "<div>Footer</div>",
-      });
-      const usedPage = mockBrowsers
-        .flatMap((b: any) => b._pages.slice(0, 2))
-        .find((p: any) => p.pdf.mock.calls.length > 0);
-      const pdfArgs = usedPage.pdf.mock.calls[0][0];
-      expect(pdfArgs.format).toBe("Letter");
-      expect(pdfArgs.landscape).toBe(true);
-      expect(pdfArgs.scale).toBe(0.8);
-      expect(pdfArgs.margin).toEqual({ top: "10mm", bottom: "10mm", left: "5mm", right: "5mm" });
-      expect(pdfArgs.displayHeaderFooter).toBe(true);
-      expect(pdfArgs.headerTemplate).toBe("<div>Header</div>");
-    });
-
-    it("still releases page if setContent throws (no pool leak)", async () => {
-      await browserModule.initBrowser();
-      // Make ALL pages' setContent throw so whichever is picked will fail
-      for (const b of mockBrowsers) {
-        for (const p of b._pages) {
-          p.setContent.mockRejectedValueOnce(new Error("render fail"));
-        }
-      }
-
-      await expect(browserModule.renderPdf("<bad>")).rejects.toThrow("render fail");
-      // pdfCount should still increment (releasePage was called in finally)
-      const stats = browserModule.getPoolStats();
-      expect(stats.pdfCount).toBe(1);
-    });
-
-    it("cleans up timeout timer after successful render", async () => {
-      vi.useFakeTimers();
-      await browserModule.initBrowser();
-      await browserModule.renderPdf("<h1>Hello</h1>");
-      expect(vi.getTimerCount()).toBe(0);
-      vi.useRealTimers();
-    });
-
-    it("rejects with PDF_TIMEOUT after 30s", async () => {
-      vi.useFakeTimers();
-      await browserModule.initBrowser();
-      // Make ALL pages' setContent hang so whichever is picked will timeout
-      for (const b of mockBrowsers) {
-        for (const p of b._pages) {
-          p.setContent.mockImplementation(() => new Promise(() => {}));
-        }
-      }
-
-      const renderPromise = browserModule.renderPdf("<h1>slow</h1>");
-      const renderResult = renderPromise.catch((e: Error) => e);
-      await vi.advanceTimersByTimeAsync(30_001);
-
-      const err = await renderResult;
-      expect(err).toBeInstanceOf(Error);
-      expect((err as Error).message).toBe("PDF_TIMEOUT");
-      vi.useRealTimers();
-    });
-  });
-
-  describe("renderUrlPdf", () => {
-    it("navigates to URL and generates PDF", async () => {
-      await browserModule.initBrowser();
-      const result = await browserModule.renderUrlPdf("https://example.com");
-      expect(result).toHaveProperty("pdf");
-      expect(result).toHaveProperty("durationMs");
-      expect(Buffer.isBuffer(result.pdf)).toBe(true);
-      const usedPage = mockBrowsers
-        .flatMap((b: any) => b._pages.slice(0, 2))
-        .find((p: any) => p.goto.mock.calls.length > 0);
-      expect(usedPage.goto).toHaveBeenCalledWith("https://example.com", expect.objectContaining({ waitUntil: "domcontentloaded" }));
-    });
-
-    it("sets up request interception for SSRF protection with hostResolverRules", async () => {
-      await browserModule.initBrowser();
-      await browserModule.renderUrlPdf("https://example.com", {
-        hostResolverRules: "MAP example.com 93.184.216.34",
-      });
-      const usedPage = mockBrowsers
-        .flatMap((b: any) => b._pages.slice(0, 2))
-        .find((p: any) => p.setRequestInterception.mock.calls.length > 0);
-      expect(usedPage).toBeDefined();
-      expect(usedPage.setRequestInterception).toHaveBeenCalledWith(true);
-      expect(usedPage.on).toHaveBeenCalledWith("request", expect.any(Function));
-    });
-
-    it("blocks requests to non-target hosts via request interception", async () => {
-      await browserModule.initBrowser();
-      await browserModule.renderUrlPdf("https://example.com", {
-        hostResolverRules: "MAP example.com 93.184.216.34",
-      });
-      const usedPage = mockBrowsers
-        .flatMap((b: any) => b._pages.slice(0, 2))
-        .find((p: any) => p.on.mock.calls.length > 0);
-
-      // Get the request handler
-      const requestHandler = usedPage.on.mock.calls.find((c: any) => c[0] === "request")[1];
-
-      // Simulate a request to a different host
-      const evilRequest = {
-        url: () => "http://169.254.169.254/metadata",
-        headers: () => ({}),
-        abort: vi.fn(),
-        continue: vi.fn(),
-      };
-      requestHandler(evilRequest);
-      expect(evilRequest.abort).toHaveBeenCalledWith("blockedbyclient");
-      expect(evilRequest.continue).not.toHaveBeenCalled();
-
-      // Simulate a request to the target host (HTTP - should rewrite)
-      const goodRequest = {
-        url: () => "http://example.com/page",
-        headers: () => ({ "accept": "text/html" }),
-        abort: vi.fn(),
-        continue: vi.fn(),
-      };
-      requestHandler(goodRequest);
-      expect(goodRequest.continue).toHaveBeenCalledWith(expect.objectContaining({
-        url: expect.stringContaining("93.184.216.34"),
-        headers: expect.objectContaining({ host: "example.com" }),
-      }));
-      expect(goodRequest.abort).not.toHaveBeenCalled();
-    });
-  });
-
-  describe("acquirePage queue", () => {
-    it("queues requests when all pages are busy and resolves when released", async () => {
-      await browserModule.initBrowser();
-      // Use all 4 pages
-      const p1 = browserModule.renderPdf("<p>1</p>");
-      const p2 = browserModule.renderPdf("<p>2</p>");
-      const p3 = browserModule.renderPdf("<p>3</p>");
-      const p4 = browserModule.renderPdf("<p>4</p>");
-
-      // Stats should show queue or reduced availability
-      // The 5th request should queue
-      // But since our mock pages resolve instantly, the first 4 may already be done
-      // Let's make pages hang to truly test queuing
-      await Promise.all([p1, p2, p3, p4]);
-
-      // Verify all rendered successfully
-      const stats = browserModule.getPoolStats();
-      expect(stats.pdfCount).toBe(4);
-    });
-
-    it("rejects with QUEUE_FULL after 30s timeout when all pages busy", async () => {
-      vi.useFakeTimers();
-      await browserModule.initBrowser();
-
-      // Make all pages hang
-      for (const b of mockBrowsers) {
-        for (const p of b._pages) {
-          p.setContent.mockImplementation(() => new Promise(() => {}));
-        }
-      }
-
-      // Consume all 4 pages (these will hang) — catch their rejections
-      const hanging = [
-        browserModule.renderPdf("<p>1</p>").catch(() => {}),
-        browserModule.renderPdf("<p>2</p>").catch(() => {}),
-        browserModule.renderPdf("<p>3</p>").catch(() => {}),
-        browserModule.renderPdf("<p>4</p>").catch(() => {}),
-      ];
-
-      // 5th request should queue — attach catch immediately to prevent unhandled rejection
-      const queued = browserModule.renderPdf("<p>5</p>");
-      const queuedResult = queued.catch((e: Error) => e);
-
-      // Advance past all timeouts (queue + PDF_TIMEOUT for hanging renders)
-      await vi.advanceTimersByTimeAsync(30_001);
-
-      const err = await queuedResult;
-      expect(err).toBeInstanceOf(Error);
-      expect((err as Error).message).toBe("QUEUE_FULL");
-
-      // Let hanging PDF_TIMEOUT rejections settle
-      await Promise.allSettled(hanging);
-
-      vi.useRealTimers();
-    });
-  });
-});
--- a/src/tests/browser-recycle.test.ts
+++ b/src/tests/browser-recycle.test.ts
@ -1,58 +0,0 @@
-import { describe, it, expect, vi } from "vitest";
-
-// Don't use the global mock — we test the real recyclePage
-vi.unmock("../services/browser.js");
-
-// Mock puppeteer so initBrowser doesn't launch real browsers
-vi.mock("puppeteer", () => ({
-  default: {
-    launch: vi.fn(),
-  },
-}));
-
-describe("recyclePage", () => {
-  it("cleans up request interception listeners before navigating to about:blank", async () => {
-    // Dynamic import to get the real (unmocked) module
-    const { recyclePage } = await import("../services/browser.js");
-
-    const callOrder: string[] = [];
-
-    const mockPage = {
-      createCDPSession: vi.fn().mockResolvedValue({
-        send: vi.fn().mockResolvedValue(undefined),
-        detach: vi.fn().mockResolvedValue(undefined),
-      }),
-      removeAllListeners: vi.fn().mockImplementation((event: string) => {
-        callOrder.push(`removeAllListeners:${event}`);
-        return mockPage;
-      }),
-      setRequestInterception: vi.fn().mockImplementation((val: boolean) => {
-        callOrder.push(`setRequestInterception:${val}`);
-        return Promise.resolve();
-      }),
-      cookies: vi.fn().mockResolvedValue([]),
-      deleteCookie: vi.fn(),
-      goto: vi.fn().mockImplementation((url: string) => {
-        callOrder.push(`goto:${url}`);
-        return Promise.resolve();
-      }),
-    };
-
-    await recyclePage(mockPage as any);
-
-    // Verify request interception cleanup happens
-    expect(mockPage.removeAllListeners).toHaveBeenCalledWith("request");
-    expect(mockPage.setRequestInterception).toHaveBeenCalledWith(false);
-
-    // Verify cleanup happens BEFORE navigation to about:blank
-    const removeIdx = callOrder.indexOf("removeAllListeners:request");
-    const interceptIdx = callOrder.indexOf("setRequestInterception:false");
-    const gotoIdx = callOrder.indexOf("goto:about:blank");
-
-    expect(removeIdx).toBeGreaterThanOrEqual(0);
-    expect(interceptIdx).toBeGreaterThanOrEqual(0);
-    expect(gotoIdx).toBeGreaterThanOrEqual(0);
-    expect(removeIdx).toBeLessThan(gotoIdx);
-    expect(interceptIdx).toBeLessThan(gotoIdx);
-  });
-});
--- a/src/tests/browser-releasepage.test.ts
+++ b/src/tests/browser-releasepage.test.ts
@ -1,258 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-
-vi.unmock("../services/browser.js");
-
-vi.mock("../services/logger.js", () => ({
-  default: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-}));
-
-function createMockPage(overrides: Record<string, any> = {}) {
-  const page: any = {
-    setJavaScriptEnabled: vi.fn().mockResolvedValue(undefined),
-    setContent: vi.fn().mockResolvedValue(undefined),
-    addStyleTag: vi.fn().mockResolvedValue(undefined),
-    pdf: vi.fn().mockResolvedValue(Buffer.from("%PDF-1.4 test")),
-    goto: vi.fn().mockResolvedValue(undefined),
-    close: vi.fn().mockResolvedValue(undefined),
-    setRequestInterception: vi.fn().mockResolvedValue(undefined),
-    removeAllListeners: vi.fn().mockReturnThis(),
-    createCDPSession: vi.fn().mockResolvedValue({
-      send: vi.fn().mockResolvedValue(undefined),
-      detach: vi.fn().mockResolvedValue(undefined),
-    }),
-    cookies: vi.fn().mockResolvedValue([]),
-    deleteCookie: vi.fn(),
-    on: vi.fn(),
-    ...overrides,
-  };
-  return page;
-}
-
-process.env.BROWSER_COUNT = "1";
-process.env.PAGES_PER_BROWSER = "1";
-
-describe("releasePage error recovery paths", () => {
-  let browserModule: typeof import("../services/browser.js");
-  let mockBrowsers: any[] = [];
-
-  beforeEach(async () => {
-    vi.resetModules();
-    mockBrowsers = [];
-
-    const mockBrowser: any = {
-      newPage: vi.fn().mockImplementation(() => Promise.resolve(createMockPage())),
-      close: vi.fn().mockResolvedValue(undefined),
-    };
-    mockBrowsers.push(mockBrowser);
-
-    vi.doMock("puppeteer", () => ({
-      default: {
-        launch: vi.fn().mockImplementation(() => {
-          const b = mockBrowsers[mockBrowsers.length - 1];
-          return Promise.resolve(b);
-        }),
-      },
-    }));
-
-    browserModule = await import("../services/browser.js");
-    await browserModule.initBrowser();
-  });
-
-  afterEach(async () => {
-    await browserModule.closeBrowser();
-    vi.restoreAllMocks();
-  });
-
-  it("falls back to newPage when recyclePage fails and a waiter is queued", async () => {
-    // Render first PDF — this acquires the only page, leaving pool empty
-    // We need to make recyclePage fail on the RELEASE after render
-    const failingPage = createMockPage({
-      // Make createCDPSession throw to cause recyclePage to fail
-      createCDPSession: vi.fn().mockRejectedValue(new Error("CDP failed")),
-      // Also make goto throw (recyclePage tries goto("about:blank"))
-      goto: vi.fn().mockRejectedValue(new Error("goto failed")),
-    });
-
-    // Override to return our failing page
-    mockBrowsers[0].newPage = vi.fn()
-      .mockResolvedValueOnce(failingPage) // for pool init replacement after closeBrowser
-      .mockResolvedValue(createMockPage()); // fallback newPage in releasePage
-
-    // Re-init with our special page
-    await browserModule.closeBrowser();
-    vi.resetModules();
-
-    const mockBrowser2: any = {
-      newPage: vi.fn()
-        .mockResolvedValueOnce(failingPage) // init page
-        .mockResolvedValue(createMockPage()), // fallback
-      close: vi.fn().mockResolvedValue(undefined),
-    };
-
-    vi.doMock("puppeteer", () => ({
-      default: {
-        launch: vi.fn().mockResolvedValue(mockBrowser2),
-      },
-    }));
-
-    browserModule = await import("../services/browser.js");
-    await browserModule.initBrowser();
-
-    // Start a render — this acquires the only page
-    const renderPromise = browserModule.renderPdf("<h1>Test</h1>");
-
-    // Wait for it to complete (the page acquired is failingPage)
-    const result = await renderPromise;
-    expect(result.pdf).toBeInstanceOf(Buffer);
-
-    // The releasePage should have been called, recyclePage should have failed,
-    // and newPage should have been called as fallback
-    // Since there's only 1 page and no waiter, the catch branch with no waiter should trigger
-    await new Promise((r) => setTimeout(r, 100)); // let async catch handlers settle
-
-    // Pool should still function — the fallback newPage should have added a page back
-    const stats = browserModule.getPoolStats();
-    expect(stats.availablePages).toBeGreaterThanOrEqual(0);
-  });
-
-  it("pushes waiter back to queue when recyclePage fails and browser is restarting", async () => {
-    // This test exercises the else branch in releasePage's catch:
-    // when inst.restarting is true, waiter gets pushed back
-
-    // We need: pool with 1 page, 1 render in progress, another render waiting
-    // Then make recyclePage fail on release, with inst.restarting = true
-
-    const failingPage = createMockPage({
-      createCDPSession: vi.fn().mockRejectedValue(new Error("CDP failed")),
-      goto: vi.fn().mockRejectedValue(new Error("goto failed")),
-    });
-
-    await browserModule.closeBrowser();
-    vi.resetModules();
-
-    const mockBrowser3: any = {
-      newPage: vi.fn().mockResolvedValue(createMockPage()),
-      close: vi.fn().mockResolvedValue(undefined),
-    };
-
-    // First newPage call returns our failing page
-    mockBrowser3.newPage = vi.fn()
-      .mockResolvedValueOnce(failingPage)
-      .mockResolvedValue(createMockPage());
-
-    vi.doMock("puppeteer", () => ({
-      default: {
-        launch: vi.fn().mockResolvedValue(mockBrowser3),
-      },
-    }));
-
-    browserModule = await import("../services/browser.js");
-    await browserModule.initBrowser();
-
-    // First render acquires the only page (failingPage)
-    const render1 = browserModule.renderPdf("<h1>First</h1>");
-
-    // Second render will queue since pool is empty
-    const render2Promise = browserModule.renderPdf("<h1>Second</h1>");
-
-    // Complete first render
-    const result1 = await render1;
-    expect(result1.pdf).toBeInstanceOf(Buffer);
-
-    // Wait for async settlement — releasePage tries to recycle failingPage,
-    // fails, then tries newPage fallback for the waiter
-    await new Promise((r) => setTimeout(r, 200));
-
-    // The second render should eventually complete (via fallback newPage)
-    const result2 = await render2Promise;
-    expect(result2.pdf).toBeInstanceOf(Buffer);
-  });
-
-  it("handles newPage fallback failure when waiter is queued", async () => {
-    // Exercise the innermost catch: recyclePage fails AND newPage fails,
-    // so waiter gets pushed back to queue
-
-    const failingPage = createMockPage({
-      createCDPSession: vi.fn().mockRejectedValue(new Error("CDP failed")),
-      goto: vi.fn().mockRejectedValue(new Error("goto failed")),
-    });
-
-    await browserModule.closeBrowser();
-    vi.resetModules();
-
-    const mockBrowser4: any = {
-      newPage: vi.fn()
-        .mockResolvedValueOnce(failingPage) // init
-        .mockRejectedValueOnce(new Error("newPage also failed")) // fallback for waiter fails
-        .mockResolvedValue(createMockPage()), // eventual recovery
-      close: vi.fn().mockResolvedValue(undefined),
-    };
-
-    vi.doMock("puppeteer", () => ({
-      default: {
-        launch: vi.fn().mockResolvedValue(mockBrowser4),
-      },
-    }));
-
-    browserModule = await import("../services/browser.js");
-    await browserModule.initBrowser();
-
-    // First render acquires failingPage
-    const render1 = browserModule.renderPdf("<h1>First</h1>");
-
-    // Second render queues
-    const render2Promise = browserModule.renderPdf("<h1>Second</h1>");
-
-    await render1;
-
-    // Wait for async paths to settle
-    await new Promise((r) => setTimeout(r, 300));
-
-    // The waiter should have been re-queued after double failure
-    // It will eventually time out (30s) or be served by another page
-    // For this test, we just verify the pool didn't crash
-    const stats = browserModule.getPoolStats();
-    expect(stats).toBeDefined();
-    expect(stats.queueDepth).toBeGreaterThanOrEqual(0);
-
-    // Clean up: the queued render2 will timeout after 30s, let's not wait
-    // Just verify pool integrity
-  });
-
-  it("returns page to pool after successful render with no waiters", async () => {
-    // Exercise the happy path of releasePage with no waiters:
-    // recyclePage succeeds, page pushed back to availablePages
-    await browserModule.closeBrowser();
-    vi.resetModules();
-
-    const normalPage = createMockPage();
-    const mockBrowser5: any = {
-      newPage: vi.fn().mockResolvedValue(normalPage),
-      close: vi.fn().mockResolvedValue(undefined),
-    };
-
-    vi.doMock("puppeteer", () => ({
-      default: {
-        launch: vi.fn().mockResolvedValue(mockBrowser5),
-      },
-    }));
-
-    browserModule = await import("../services/browser.js");
-    await browserModule.initBrowser();
-
-    // Verify pool has 1 page before render
-    expect(browserModule.getPoolStats().availablePages).toBe(1);
-
-    // Render acquires the page (pool goes to 0)
-    const result = await browserModule.renderPdf("<h1>Test</h1>");
-    expect(result.pdf).toBeInstanceOf(Buffer);
-
-    // Wait for async releasePage to settle
-    await new Promise((r) => setTimeout(r, 200));
-
-    // Page should be returned to pool
-    const stats = browserModule.getPoolStats();
-    expect(stats.availablePages).toBe(1);
-    expect(stats.pdfCount).toBe(1);
-  });
-});
--- a/src/tests/browser-url-ssrf.test.ts
+++ b/src/tests/browser-url-ssrf.test.ts
@ -1,210 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-
-/**
- * TDD tests for renderUrlPdf SSRF protection (DNS pinning via hostResolverRules).
- * Covers branches in browser.ts lines ~300-331:
- * - HTTP request rewrite to pinned IP
- * - HTTPS request passthrough
- * - Blocking requests to non-target hosts
- * - No interception when hostResolverRules absent
- * - No interception when hostResolverRules doesn't match MAP regex
- * - Blocking cloud metadata endpoint requests
- */
-
-vi.unmock("../services/browser.js");
-
-vi.mock("../services/logger.js", () => ({
-  default: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-}));
-
-function createMockPage(overrides: Record<string, any> = {}) {
-  return {
-    setJavaScriptEnabled: vi.fn().mockResolvedValue(undefined),
-    setContent: vi.fn().mockResolvedValue(undefined),
-    addStyleTag: vi.fn().mockResolvedValue(undefined),
-    pdf: vi.fn().mockResolvedValue(Buffer.from("%PDF-1.4 test")),
-    goto: vi.fn().mockResolvedValue(undefined),
-    close: vi.fn().mockResolvedValue(undefined),
-    setRequestInterception: vi.fn().mockResolvedValue(undefined),
-    removeAllListeners: vi.fn().mockReturnThis(),
-    createCDPSession: vi.fn().mockResolvedValue({
-      send: vi.fn().mockResolvedValue(undefined),
-      detach: vi.fn().mockResolvedValue(undefined),
-    }),
-    cookies: vi.fn().mockResolvedValue([]),
-    deleteCookie: vi.fn(),
-    on: vi.fn(),
-    ...overrides,
-  } as any;
-}
-
-function createMockBrowser(pagesPerBrowser = 2) {
-  const pages = Array.from({ length: pagesPerBrowser }, () => createMockPage());
-  let pageIndex = 0;
-  return {
-    newPage: vi.fn().mockImplementation(() => Promise.resolve(pages[pageIndex++] || createMockPage())),
-    close: vi.fn().mockResolvedValue(undefined),
-    _pages: pages,
-  } as any;
-}
-
-process.env.BROWSER_COUNT = "1";
-process.env.PAGES_PER_BROWSER = "2";
-
-describe("renderUrlPdf SSRF DNS pinning", () => {
-  let browserModule: typeof import("../services/browser.js");
-  let mockBrowsers: any[] = [];
-
-  beforeEach(async () => {
-    mockBrowsers = [];
-    vi.resetModules();
-    vi.doMock("puppeteer", () => ({
-      default: {
-        launch: vi.fn().mockImplementation(() => {
-          const b = createMockBrowser(2);
-          mockBrowsers.push(b);
-          return Promise.resolve(b);
-        }),
-      },
-    }));
-    vi.doMock("../services/logger.js", () => ({
-      default: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-    }));
-    browserModule = await import("../services/browser.js");
-    await browserModule.initBrowser();
-  });
-
-  afterEach(async () => {
-    try { await browserModule.closeBrowser(); } catch {}
-  });
-
-  function getUsedPage() {
-    return mockBrowsers
-      .flatMap((b: any) => b._pages)
-      .find((p: any) => p.on.mock.calls.some((c: any) => c[0] === "request"));
-  }
-
-  function getRequestHandler(page: any) {
-    const call = page.on.mock.calls.find((c: any) => c[0] === "request");
-    return call ? call[1] : null;
-  }
-
-  it("sets up request interception when valid MAP rule provided", async () => {
-    await browserModule.renderUrlPdf("http://example.com", {
-      hostResolverRules: "MAP example.com 93.184.216.34",
-    });
-
-    const page = getUsedPage();
-    expect(page).toBeDefined();
-    expect(page.setRequestInterception).toHaveBeenCalledWith(true);
-  });
-
-  it("rewrites HTTP requests to use pinned IP with Host header", async () => {
-    await browserModule.renderUrlPdf("http://example.com/path", {
-      hostResolverRules: "MAP example.com 93.184.216.34",
-    });
-
-    const handler = getRequestHandler(getUsedPage());
-    expect(handler).not.toBeNull();
-
-    const req = {
-      url: () => "http://example.com/path?q=1",
-      headers: () => ({ accept: "text/html" }),
-      continue: vi.fn(),
-      abort: vi.fn(),
-    };
-    handler(req);
-
-    expect(req.continue).toHaveBeenCalledWith({
-      url: "http://93.184.216.34/path?q=1",
-      headers: { accept: "text/html", host: "example.com" },
-    });
-    expect(req.abort).not.toHaveBeenCalled();
-  });
-
-  it("continues HTTPS requests without URL rewrite (cert compatibility)", async () => {
-    await browserModule.renderUrlPdf("https://example.com", {
-      hostResolverRules: "MAP example.com 93.184.216.34",
-    });
-
-    const handler = getRequestHandler(getUsedPage());
-    expect(handler).not.toBeNull();
-
-    const req = {
-      url: () => "https://example.com/page",
-      headers: () => ({}),
-      continue: vi.fn(),
-      abort: vi.fn(),
-    };
-    handler(req);
-
-    expect(req.continue).toHaveBeenCalledWith();
-    expect(req.abort).not.toHaveBeenCalled();
-  });
-
-  it("aborts requests to non-target hosts (prevents redirect SSRF)", async () => {
-    await browserModule.renderUrlPdf("http://example.com", {
-      hostResolverRules: "MAP example.com 93.184.216.34",
-    });
-
-    const handler = getRequestHandler(getUsedPage());
-    const req = {
-      url: () => "http://evil.internal/admin",
-      headers: () => ({}),
-      continue: vi.fn(),
-      abort: vi.fn(),
-    };
-    handler(req);
-
-    expect(req.abort).toHaveBeenCalledWith("blockedbyclient");
-    expect(req.continue).not.toHaveBeenCalled();
-  });
-
-  it("blocks cloud metadata endpoint (169.254.169.254)", async () => {
-    await browserModule.renderUrlPdf("http://example.com", {
-      hostResolverRules: "MAP example.com 93.184.216.34",
-    });
-
-    const handler = getRequestHandler(getUsedPage());
-    const req = {
-      url: () => "http://169.254.169.254/latest/meta-data/",
-      headers: () => ({}),
-      continue: vi.fn(),
-      abort: vi.fn(),
-    };
-    handler(req);
-
-    expect(req.abort).toHaveBeenCalledWith("blockedbyclient");
-  });
-
-  it("does NOT set up interception when hostResolverRules is absent", async () => {
-    await browserModule.renderUrlPdf("http://example.com");
-
-    const page = mockBrowsers.flatMap((b: any) => b._pages)
-      .find((p: any) => p.goto.mock.calls.length > 0);
-    expect(page).toBeDefined();
-
-    // Should not have called setRequestInterception(true) — only false from recyclePage
-    const trueCalls = page.setRequestInterception.mock.calls.filter(
-      (c: any) => c[0] === true
-    );
-    expect(trueCalls.length).toBe(0);
-  });
-
-  it("skips DNS pinning when hostResolverRules doesn't match MAP regex", async () => {
-    await browserModule.renderUrlPdf("http://example.com", {
-      hostResolverRules: "BADFORMAT",
-    });
-
-    // CDP session was created (Network.enable), but no request interception
-    const page = mockBrowsers.flatMap((b: any) => b._pages)
-      .find((p: any) => p.goto.mock.calls.length > 0);
-    const trueCalls = page.setRequestInterception.mock.calls.filter(
-      (c: any) => c[0] === true
-    );
-    expect(trueCalls.length).toBe(0);
-    // No request handler registered
-    const requestCalls = page.on.mock.calls.filter((c: any) => c[0] === "request");
-    expect(requestCalls.length).toBe(0);
-  });
-});
--- a/src/tests/catch-type-safety.test.ts
+++ b/src/tests/catch-type-safety.test.ts
@ -1,35 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { errorMessage, errorCode } from "../utils/errors.js";
-
-describe("catch type safety helpers", () => {
-  it("errorMessage handles Error instances", () => {
-    expect(errorMessage(new Error("test error"))).toBe("test error");
-  });
-
-  it("errorMessage handles string errors", () => {
-    expect(errorMessage("raw string error")).toBe("raw string error");
-  });
-
-  it("errorMessage handles non-Error objects", () => {
-    expect(errorMessage({ code: "ENOENT" })).toBe("[object Object]");
-  });
-
-  it("errorMessage handles null/undefined", () => {
-    expect(errorMessage(null)).toBe("null");
-    expect(errorMessage(undefined)).toBe("undefined");
-  });
-
-  it("errorCode extracts code from Error with code", () => {
-    const err = Object.assign(new Error("fail"), { code: "ECONNREFUSED" });
-    expect(errorCode(err)).toBe("ECONNREFUSED");
-  });
-
-  it("errorCode returns undefined for plain Error", () => {
-    expect(errorCode(new Error("no code"))).toBeUndefined();
-  });
-
-  it("errorCode returns undefined for non-Error", () => {
-    expect(errorCode("string error")).toBeUndefined();
-    expect(errorCode(42)).toBeUndefined();
-  });
-});
--- a/src/tests/cleanup-no-verifications-table.test.ts
+++ b/src/tests/cleanup-no-verifications-table.test.ts
@ -1,16 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { readFileSync } from "fs";
-import { join } from "path";
-
-describe("cleanupStaleData should not reference legacy verifications table", () => {
-  it("should not query verifications table (legacy, no longer written to)", () => {
-    const dbSrc = readFileSync(join(__dirname, "../services/db.ts"), "utf8");
-    // Extract just the cleanupStaleData function body
-    const funcStart = dbSrc.indexOf("async function cleanupStaleData");
-    const funcEnd = dbSrc.indexOf("export { pool }");
-    const funcBody = dbSrc.slice(funcStart, funcEnd);
-    // Should not reference 'verifications' table (only pending_verifications is active)
-    // The old query checked: email NOT IN (SELECT ... FROM verifications WHERE verified_at IS NOT NULL)
-    expect(funcBody).not.toContain("FROM verifications WHERE verified_at");
-  });
-});
--- a/src/tests/convert-sanitized.test.ts
+++ b/src/tests/convert-sanitized.test.ts
@ -1,98 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import express from "express";
-import request from "supertest";
-
-vi.mock("node:dns/promises", () => ({
-  default: { lookup: vi.fn() },
-  lookup: vi.fn(),
-}));
-
-let app: express.Express;
-
-beforeEach(async () => {
-  vi.clearAllMocks();
-  vi.resetModules();
-
-  const { renderPdf, renderUrlPdf } = await import("../services/browser.js");
-  vi.mocked(renderPdf).mockResolvedValue({ pdf: Buffer.from("%PDF-1.4 mock"), durationMs: 10 });
-  vi.mocked(renderUrlPdf).mockResolvedValue({ pdf: Buffer.from("%PDF-1.4 mock url"), durationMs: 10 });
-
-  const dns = await import("node:dns/promises");
-  vi.mocked(dns.default.lookup).mockResolvedValue({ address: "93.184.216.34", family: 4 } as any);
-
-  const { convertRouter } = await import("../routes/convert.js");
-  const { demoRouter } = await import("../routes/demo.js");
-  app = express();
-  app.use(express.json({ limit: "500kb" }));
-  app.use("/v1/convert", convertRouter);
-  app.use("/v1/demo", demoRouter);
-});
-
-describe("convert routes use sanitized PDF options", () => {
-  it("POST /v1/convert/html passes sanitized format (a4 → A4)", async () => {
-    const { renderPdf } = await import("../services/browser.js");
-
-    await request(app)
-      .post("/v1/convert/html")
-      .set("content-type", "application/json")
-      .send({ html: "<h1>Test</h1>", format: "a4" });
-
-    expect(vi.mocked(renderPdf)).toHaveBeenCalledOnce();
-    const opts = vi.mocked(renderPdf).mock.calls[0]![1] as Record<string, unknown>;
-    expect(opts.format).toBe("A4");
-  });
-
-  it("POST /v1/convert/markdown passes sanitized format (letter → Letter)", async () => {
-    const { renderPdf } = await import("../services/browser.js");
-
-    await request(app)
-      .post("/v1/convert/markdown")
-      .set("content-type", "application/json")
-      .send({ markdown: "# Test", format: "letter" });
-
-    expect(vi.mocked(renderPdf)).toHaveBeenCalledOnce();
-    const opts = vi.mocked(renderPdf).mock.calls[0]![1] as Record<string, unknown>;
-    expect(opts.format).toBe("Letter");
-  });
-
-  it("POST /v1/convert/url passes sanitized format (a3 → A3)", async () => {
-    const { renderUrlPdf } = await import("../services/browser.js");
-
-    await request(app)
-      .post("/v1/convert/url")
-      .set("content-type", "application/json")
-      .send({ url: "https://example.com", format: "a3" });
-
-    expect(vi.mocked(renderUrlPdf)).toHaveBeenCalledOnce();
-    const opts = vi.mocked(renderUrlPdf).mock.calls[0]![1] as Record<string, unknown>;
-    expect(opts.format).toBe("A3");
-  });
-});
-
-describe("demo routes use sanitized PDF options", () => {
-  it("POST /v1/demo/html passes sanitized format (a4 → A4)", async () => {
-    const { renderPdf } = await import("../services/browser.js");
-
-    await request(app)
-      .post("/v1/demo/html")
-      .set("content-type", "application/json")
-      .send({ html: "<h1>Test</h1>", format: "a4" });
-
-    expect(vi.mocked(renderPdf)).toHaveBeenCalledOnce();
-    const opts = vi.mocked(renderPdf).mock.calls[0]![1] as Record<string, unknown>;
-    expect(opts.format).toBe("A4");
-  });
-
-  it("POST /v1/demo/markdown passes sanitized format (a4 → A4)", async () => {
-    const { renderPdf } = await import("../services/browser.js");
-
-    await request(app)
-      .post("/v1/demo/markdown")
-      .set("content-type", "application/json")
-      .send({ markdown: "# Test", format: "a4" });
-
-    expect(vi.mocked(renderPdf)).toHaveBeenCalledOnce();
-    const opts = vi.mocked(renderPdf).mock.calls[0]![1] as Record<string, unknown>;
-    expect(opts.format).toBe("A4");
-  });
-});
--- a/src/tests/convert-string-body.test.ts
+++ b/src/tests/convert-string-body.test.ts
@ -1,55 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import express from "express";
-import request from "supertest";
-
-vi.mock("node:dns/promises", () => ({
-  default: { lookup: vi.fn() },
-  lookup: vi.fn(),
-}));
-
-let app: express.Express;
-
-beforeEach(async () => {
-  vi.clearAllMocks();
-  vi.resetModules();
-
-  const { renderPdf } = await import("../services/browser.js");
-  vi.mocked(renderPdf).mockResolvedValue({ pdf: Buffer.from("%PDF-1.4 mock"), durationMs: 10 });
-
-  const { convertRouter } = await import("../routes/convert.js");
-  app = express();
-  // Parse application/json as text to produce a string req.body,
-  // exercising the typeof === "string" branches in convert routes.
-  app.use(express.text({ type: "application/json", limit: "500kb" }));
-  app.use("/v1/convert", convertRouter);
-});
-
-describe("convert routes handle string body (branch coverage)", () => {
-  it("POST /v1/convert/html with string body parses it as HTML", async () => {
-    const { renderPdf } = await import("../services/browser.js");
-
-    const res = await request(app)
-      .post("/v1/convert/html")
-      .set("content-type", "application/json")
-      .send("<h1>Hello</h1>");
-
-    expect(res.status).toBe(200);
-    expect(vi.mocked(renderPdf)).toHaveBeenCalledOnce();
-    const html = vi.mocked(renderPdf).mock.calls[0]![0] as string;
-    expect(html).toContain("<h1>Hello</h1>");
-  });
-
-  it("POST /v1/convert/markdown with string body parses it as markdown", async () => {
-    const { renderPdf } = await import("../services/browser.js");
-
-    const res = await request(app)
-      .post("/v1/convert/markdown")
-      .set("content-type", "application/json")
-      .send("# Hello");
-
-    expect(res.status).toBe(200);
-    expect(vi.mocked(renderPdf)).toHaveBeenCalledOnce();
-    const html = vi.mocked(renderPdf).mock.calls[0]![0] as string;
-    expect(html).toContain("Hello");
-  });
-});
--- a/src/tests/convert.test.ts
+++ b/src/tests/convert.test.ts
@ -1,247 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import express from "express";
-import request from "supertest";
-
-// Mock dns before imports
-vi.mock("node:dns/promises", () => ({
-  default: { lookup: vi.fn() },
-  lookup: vi.fn(),
-}));
-
-let app: express.Express;
-
-beforeEach(async () => {
-  vi.clearAllMocks();
-  vi.resetModules();
-
-  const { renderPdf, renderUrlPdf } = await import("../services/browser.js");
-  vi.mocked(renderPdf).mockResolvedValue({ pdf: Buffer.from("%PDF-1.4 mock"), durationMs: 10 });
-  vi.mocked(renderUrlPdf).mockResolvedValue({ pdf: Buffer.from("%PDF-1.4 mock url"), durationMs: 10 });
-
-  const dns = await import("node:dns/promises");
-  vi.mocked(dns.default.lookup).mockResolvedValue({ address: "93.184.216.34", family: 4 } as any);
-
-  const { convertRouter } = await import("../routes/convert.js");
-  app = express();
-  app.use(express.json({ limit: "500kb" }));
-  app.use("/v1/convert", convertRouter);
-});
-
-describe("POST /v1/convert/html", () => {
-  it("returns 400 for missing html", async () => {
-    const res = await request(app)
-      .post("/v1/convert/html")
-      .set("content-type", "application/json")
-      .send({});
-    expect(res.status).toBe(400);
-  });
-
-  it("returns 415 for wrong content-type", async () => {
-    const res = await request(app)
-      .post("/v1/convert/html")
-      .set("content-type", "text/plain")
-      .send("html=<h1>hi</h1>");
-    expect(res.status).toBe(415);
-  });
-
-  it("returns PDF on success", async () => {
-    const res = await request(app)
-      .post("/v1/convert/html")
-      .set("content-type", "application/json")
-      .send({ html: "<h1>Hello</h1>" });
-    expect(res.status).toBe(200);
-    expect(res.headers["content-type"]).toMatch(/application\/pdf/);
-  });
-
-  it("returns 503 on QUEUE_FULL", async () => {
-    const { renderPdf } = await import("../services/browser.js");
-    vi.mocked(renderPdf).mockRejectedValue(new Error("QUEUE_FULL"));
-    const res = await request(app)
-      .post("/v1/convert/html")
-      .set("content-type", "application/json")
-      .send({ html: "<h1>Hello</h1>" });
-    expect(res.status).toBe(503);
-  });
-
-  it("returns 504 on PDF_TIMEOUT", async () => {
-    const { renderPdf } = await import("../services/browser.js");
-    vi.mocked(renderPdf).mockRejectedValue(new Error("PDF_TIMEOUT"));
-    const res = await request(app)
-      .post("/v1/convert/html")
-      .set("content-type", "application/json")
-      .send({ html: "<h1>Hello</h1>" });
-    expect(res.status).toBe(504);
-    expect(res.body.error).toBe("PDF generation timed out.");
-  });
-
-  it("wraps fragments (no <html tag) with wrapHtml", async () => {
-    const { renderPdf } = await import("../services/browser.js");
-    await request(app)
-      .post("/v1/convert/html")
-      .set("content-type", "application/json")
-      .send({ html: "<h1>Fragment</h1>" });
-    // wrapHtml should have been called; renderPdf receives wrapped HTML
-    const calledHtml = vi.mocked(renderPdf).mock.calls[0][0];
-    expect(calledHtml).toContain("<html");
-  });
-
-  it("passes full HTML documents as-is", async () => {
-    const { renderPdf } = await import("../services/browser.js");
-    const fullDoc = "<html><body><h1>Full</h1></body></html>";
-    await request(app)
-      .post("/v1/convert/html")
-      .set("content-type", "application/json")
-      .send({ html: fullDoc });
-    const calledHtml = vi.mocked(renderPdf).mock.calls[0][0];
-    expect(calledHtml).toBe(fullDoc);
-  });
-});
-
-describe("POST /v1/convert/markdown", () => {
-  it("returns 400 for missing markdown", async () => {
-    const res = await request(app)
-      .post("/v1/convert/markdown")
-      .set("content-type", "application/json")
-      .send({});
-    expect(res.status).toBe(400);
-  });
-
-  it("returns 415 for wrong content-type", async () => {
-    const res = await request(app)
-      .post("/v1/convert/markdown")
-      .set("content-type", "text/plain")
-      .send("markdown=# hi");
-    expect(res.status).toBe(415);
-  });
-
-  it("returns PDF on success", async () => {
-    const res = await request(app)
-      .post("/v1/convert/markdown")
-      .set("content-type", "application/json")
-      .send({ markdown: "# Hello World" });
-    expect(res.status).toBe(200);
-    expect(res.headers["content-type"]).toMatch(/application\/pdf/);
-  });
-});
-
-describe("POST /v1/convert/url", () => {
-  it("returns 400 for missing url", async () => {
-    const res = await request(app)
-      .post("/v1/convert/url")
-      .set("content-type", "application/json")
-      .send({});
-    expect(res.status).toBe(400);
-  });
-
-  it("returns 400 for invalid URL", async () => {
-    const res = await request(app)
-      .post("/v1/convert/url")
-      .set("content-type", "application/json")
-      .send({ url: "not a url" });
-    expect(res.status).toBe(400);
-    expect(res.body.error).toMatch(/Invalid URL/);
-  });
-
-  it("returns 400 for non-http protocol", async () => {
-    const res = await request(app)
-      .post("/v1/convert/url")
-      .set("content-type", "application/json")
-      .send({ url: "ftp://example.com" });
-    expect(res.status).toBe(400);
-    expect(res.body.error).toMatch(/http\/https/);
-  });
-
-  it("returns 400 for private IP", async () => {
-    const dns = await import("node:dns/promises");
-    vi.mocked(dns.default.lookup).mockResolvedValue({ address: "192.168.1.1", family: 4 } as any);
-    const res = await request(app)
-      .post("/v1/convert/url")
-      .set("content-type", "application/json")
-      .send({ url: "https://internal.example.com" });
-    expect(res.status).toBe(400);
-    expect(res.body.error).toMatch(/private/i);
-  });
-
-  it("returns 400 for DNS failure", async () => {
-    const dns = await import("node:dns/promises");
-    vi.mocked(dns.default.lookup).mockRejectedValue(new Error("ENOTFOUND"));
-    const res = await request(app)
-      .post("/v1/convert/url")
-      .set("content-type", "application/json")
-      .send({ url: "https://nonexistent.example.com" });
-    expect(res.status).toBe(400);
-    expect(res.body.error).toMatch(/DNS/);
-  });
-
-  it("returns PDF on success", async () => {
-    const res = await request(app)
-      .post("/v1/convert/url")
-      .set("content-type", "application/json")
-      .send({ url: "https://example.com" });
-    expect(res.status).toBe(200);
-    expect(res.headers["content-type"]).toMatch(/application\/pdf/);
-  });
-});
-
-describe("PDF option validation (all endpoints)", () => {
-  const endpoints = [
-    { path: "/v1/convert/html", body: { html: "<h1>Hi</h1>" } },
-    { path: "/v1/convert/markdown", body: { markdown: "# Hi" } },
-  ];
-
-  for (const { path, body } of endpoints) {
-    it(`${path} returns 400 for invalid scale`, async () => {
-      const res = await request(app)
-        .post(path)
-        .set("content-type", "application/json")
-        .send({ ...body, scale: 5 });
-      expect(res.status).toBe(400);
-      expect(res.body.error).toContain("scale");
-    });
-
-    it(`${path} returns 400 for invalid format`, async () => {
-      const res = await request(app)
-        .post(path)
-        .set("content-type", "application/json")
-        .send({ ...body, format: "B5" });
-      expect(res.status).toBe(400);
-      expect(res.body.error).toContain("format");
-    });
-
-    it(`${path} returns 400 for non-boolean landscape`, async () => {
-      const res = await request(app)
-        .post(path)
-        .set("content-type", "application/json")
-        .send({ ...body, landscape: "yes" });
-      expect(res.status).toBe(400);
-      expect(res.body.error).toContain("landscape");
-    });
-
-    it(`${path} returns 400 for invalid pageRanges`, async () => {
-      const res = await request(app)
-        .post(path)
-        .set("content-type", "application/json")
-        .send({ ...body, pageRanges: "abc" });
-      expect(res.status).toBe(400);
-      expect(res.body.error).toContain("pageRanges");
-    });
-
-    it(`${path} returns 400 for invalid margin`, async () => {
-      const res = await request(app)
-        .post(path)
-        .set("content-type", "application/json")
-        .send({ ...body, margin: "1cm" });
-      expect(res.status).toBe(400);
-      expect(res.body.error).toContain("margin");
-    });
-  }
-
-  it("/v1/convert/url returns 400 for invalid scale", async () => {
-    const res = await request(app)
-      .post("/v1/convert/url")
-      .set("content-type", "application/json")
-      .send({ url: "https://example.com", scale: 5 });
-    expect(res.status).toBe(400);
-    expect(res.body.error).toContain("scale");
-  });
-});
--- a/src/tests/cors-staging.test.ts
+++ b/src/tests/cors-staging.test.ts
@ -1,46 +0,0 @@
-import { describe, it, expect } from "vitest";
-import supertest from "supertest";
-import { app } from "../index.js";
-
-describe("CORS — staging origin support (BUG-111)", () => {
-  const authRoutes = ["/v1/recover", "/v1/email-change", "/v1/billing", "/v1/demo"];
-
-  for (const route of authRoutes) {
-    it(`${route} allows staging origin`, async () => {
-      const res = await supertest(app)
-        .options(route)
-        .set("Origin", "https://staging.docfast.dev")
-        .set("Access-Control-Request-Method", "POST")
-        .set("Access-Control-Request-Headers", "Content-Type");
-      expect(res.headers["access-control-allow-origin"]).toBe("https://staging.docfast.dev");
-    });
-
-    it(`${route} allows production origin`, async () => {
-      const res = await supertest(app)
-        .options(route)
-        .set("Origin", "https://docfast.dev")
-        .set("Access-Control-Request-Method", "POST")
-        .set("Access-Control-Request-Headers", "Content-Type");
-      expect(res.headers["access-control-allow-origin"]).toBe("https://docfast.dev");
-    });
-
-    it(`${route} rejects unknown origin`, async () => {
-      const res = await supertest(app)
-        .options(route)
-        .set("Origin", "https://evil.com")
-        .set("Access-Control-Request-Method", "POST")
-        .set("Access-Control-Request-Headers", "Content-Type");
-      // Should NOT reflect the evil origin
-      expect(res.headers["access-control-allow-origin"]).not.toBe("https://evil.com");
-    });
-  }
-
-  it("non-auth routes still allow wildcard origin", async () => {
-    const res = await supertest(app)
-      .options("/v1/convert/html")
-      .set("Origin", "https://random-app.com")
-      .set("Access-Control-Request-Method", "POST")
-      .set("Access-Control-Request-Headers", "Content-Type");
-    expect(res.headers["access-control-allow-origin"]).toBe("*");
-  });
-});
--- a/src/tests/db-init-cleanup.test.ts
+++ b/src/tests/db-init-cleanup.test.ts
@ -1,99 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-
-// Mock pg and logger like db.test.ts does
-const mockRelease = vi.fn();
-const mockQuery = vi.fn();
-const mockConnect = vi.fn();
-
-vi.mock("pg", () => {
-  const Pool = vi.fn(function () {
-    return {
-      connect: mockConnect,
-      on: vi.fn(),
-    };
-  });
-  return { default: { Pool }, Pool };
-});
-
-vi.mock("../services/logger.js", () => ({
-  default: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-}));
-
-// Use real db.js implementation
-vi.mock("../services/db.js", async () => {
-  return await vi.importActual("../services/db.js");
-});
-
-describe("initDatabase", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-    mockConnect.mockReset();
-    mockQuery.mockReset();
-    mockRelease.mockReset();
-  });
-
-  it("calls connectWithRetry, runs DDL, and releases client", async () => {
-    // connectWithRetry does pool.connect() then SELECT 1 validation
-    mockQuery.mockResolvedValue({ rows: [], rowCount: 0 });
-    mockConnect.mockResolvedValue({ query: mockQuery, release: mockRelease });
-
-    const { initDatabase } = await import("../services/db.js");
-    await initDatabase();
-
-    // SELECT 1 validation + DDL = at least 2 calls
-    expect(mockQuery).toHaveBeenCalledTimes(2);
-    // DDL should contain CREATE TABLE
-    const ddlCall = mockQuery.mock.calls[1][0] as string;
-    expect(ddlCall).toContain("CREATE TABLE IF NOT EXISTS api_keys");
-    expect(ddlCall).toContain("CREATE TABLE IF NOT EXISTS usage");
-    expect(mockRelease).toHaveBeenCalledWith();
-  });
-
-  it("releases client even if DDL fails", async () => {
-    const selectQuery = vi.fn()
-      .mockResolvedValueOnce({ rows: [{ "?column?": 1 }] }) // SELECT 1
-      .mockRejectedValueOnce(new Error("DDL failed")); // DDL
-    mockConnect.mockResolvedValue({ query: selectQuery, release: mockRelease });
-
-    const { initDatabase } = await import("../services/db.js");
-    await expect(initDatabase()).rejects.toThrow("DDL failed");
-    expect(mockRelease).toHaveBeenCalledWith();
-  });
-});
-
-describe("cleanupStaleData", () => {
-  beforeEach(() => {
-    vi.clearAllMocks();
-    mockConnect.mockReset();
-    mockQuery.mockReset();
-    mockRelease.mockReset();
-  });
-
-  it("deletes expired verifications and orphaned usage, returns counts", async () => {
-    // queryWithRetry: connect → query → release for each call
-    const client = { query: mockQuery, release: mockRelease };
-    mockConnect.mockResolvedValue(client);
-
-    // First queryWithRetry call: expired verifications
-    mockQuery.mockResolvedValueOnce({ rows: [{ email: "a@b.com" }, { email: "c@d.com" }], rowCount: 2 });
-    // Second queryWithRetry call: orphaned usage
-    mockQuery.mockResolvedValueOnce({ rows: [{ key: "old_key" }], rowCount: 1 });
-
-    const { cleanupStaleData } = await import("../services/db.js");
-    const result = await cleanupStaleData();
-
-    expect(result).toEqual({ expiredVerifications: 2, orphanedUsage: 1 });
-  });
-
-  it("returns zeros when nothing to clean", async () => {
-    const client = { query: mockQuery, release: mockRelease };
-    mockConnect.mockResolvedValue(client);
-
-    mockQuery.mockResolvedValue({ rows: [], rowCount: 0 });
-
-    const { cleanupStaleData } = await import("../services/db.js");
-    const result = await cleanupStaleData();
-
-    expect(result).toEqual({ expiredVerifications: 0, orphanedUsage: 0 });
-  });
-});
--- a/src/tests/db-utils.test.ts
+++ b/src/tests/db-utils.test.ts
@ -1,44 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { isTransientError } from "../utils/errors.js";
-
-/** Create an Error with a `.code` property (like Node/pg errors) */
-function makeError(opts: { code?: string; message?: string }): Error {
-  const err = new Error(opts.message || "");
-  if (opts.code) (err as Error & { code: string }).code = opts.code;
-  return err;
-}
-
-describe("isTransientError", () => {
-  describe("transient error codes", () => {
-    for (const code of ["ECONNRESET", "ECONNREFUSED", "EPIPE", "ETIMEDOUT", "CONNECTION_LOST", "57P01", "57P02", "57P03", "08006", "08003", "08001"]) {
-      it(`detects code ${code}`, () => {
-        expect(isTransientError(makeError({ code }))).toBe(true);
-      });
-    }
-  });
-
-  describe("message-based matches", () => {
-    it("detects 'no available server'", () => expect(isTransientError(new Error("no available server found"))).toBe(true));
-    it("detects 'connection terminated'", () => expect(isTransientError(new Error("connection terminated unexpectedly"))).toBe(true));
-    it("detects 'connection refused'", () => expect(isTransientError(new Error("connection refused by host"))).toBe(true));
-    it("detects 'server closed the connection'", () => expect(isTransientError(new Error("server closed the connection"))).toBe(true));
-    it("detects 'timeout expired'", () => expect(isTransientError(new Error("timeout expired waiting"))).toBe(true));
-  });
-
-  describe("non-transient errors", () => {
-    it("rejects generic error", () => expect(isTransientError(new Error("something broke"))).toBe(false));
-    it("rejects SQL syntax error", () => expect(isTransientError(makeError({ code: "42601", message: "syntax error" }))).toBe(false));
-  });
-
-  describe("null/undefined input", () => {
-    it("returns false for null", () => expect(isTransientError(null)).toBe(false));
-    it("returns false for undefined", () => expect(isTransientError(undefined)).toBe(false));
-  });
-
-  describe("partial error objects", () => {
-    it("handles Error with code but no message", () => expect(isTransientError(makeError({ code: "ECONNRESET" }))).toBe(true));
-    it("handles Error with message but no code", () => expect(isTransientError(new Error("connection terminated"))).toBe(true));
-    it("rejects Error with unrelated code and no message", () => expect(isTransientError(makeError({ code: "UNKNOWN" }))).toBe(false));
-    it("rejects plain object (not an Error instance)", () => expect(isTransientError({ code: "ECONNRESET" })).toBe(false));
-  });
-});
--- a/src/tests/db.test.ts
+++ b/src/tests/db.test.ts
@ -1,176 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-
-// Local mocks — override the global setup.ts mocks for pg and logger
-const mockRelease = vi.fn();
-const mockQuery = vi.fn();
-const mockConnect = vi.fn();
-
-vi.mock("pg", () => {
-  const Pool = vi.fn(function() {
-    return {
-      connect: mockConnect,
-      on: vi.fn(),
-    };
-  });
-  return { default: { Pool }, Pool };
-});
-
-vi.mock("../services/logger.js", () => ({
-  default: { info: vi.fn(), warn: vi.fn(), error: vi.fn() },
-}));
-
-// Must re-mock db.js so setup.ts mock doesn't apply — we want real implementation
-vi.mock("../services/db.js", async () => {
-  return await vi.importActual("../services/db.js");
-});
-
-let queryWithRetry: typeof import("../services/db.js").queryWithRetry;
-let connectWithRetry: typeof import("../services/db.js").connectWithRetry;
-
-function makeClient(queryFn = mockQuery, releaseFn = mockRelease) {
-  return { query: queryFn, release: releaseFn };
-}
-
-function transientError(code = "ECONNRESET") {
-  const err = new Error(`connection error: ${code}`);
-  (err as any).code = code;
-  return err;
-}
-
-function nonTransientError() {
-  const err = new Error("syntax error at position 42");
-  (err as any).code = "42601";
-  return err;
-}
-
-describe("db retry logic", () => {
-  beforeEach(async () => {
-    vi.useFakeTimers();
-    vi.clearAllMocks();
-    mockConnect.mockReset();
-    mockQuery.mockReset();
-    mockRelease.mockReset();
-
-    const db = await import("../services/db.js");
-    queryWithRetry = db.queryWithRetry;
-    connectWithRetry = db.connectWithRetry;
-  });
-
-  afterEach(() => {
-    vi.useRealTimers();
-  });
-
-  describe("queryWithRetry", () => {
-    it("succeeds on first try, returns result", async () => {
-      const result = { rows: [{ id: 1 }], rowCount: 1 };
-      const client = makeClient(vi.fn().mockResolvedValue(result));
-      mockConnect.mockResolvedValue(client);
-
-      const res = await queryWithRetry("SELECT 1");
-      expect(res).toBe(result);
-      expect(client.release).toHaveBeenCalledWith();
-    });
-
-    it("retries on transient error (ECONNRESET), succeeds on 2nd attempt", async () => {
-      const badClient = makeClient(vi.fn().mockRejectedValue(transientError()), vi.fn());
-      const goodResult = { rows: [{ ok: true }], rowCount: 1 };
-      const goodClient = makeClient(vi.fn().mockResolvedValue(goodResult), vi.fn());
-
-      mockConnect.mockResolvedValueOnce(badClient).mockResolvedValueOnce(goodClient);
-
-      const promise = queryWithRetry("SELECT 1");
-      // Advance past the retry delay
-      await vi.advanceTimersByTimeAsync(2000);
-      const res = await promise;
-
-      expect(res).toBe(goodResult);
-      expect(mockConnect).toHaveBeenCalledTimes(2);
-    });
-
-    it("calls client.release(true) to destroy bad connection on transient error", async () => {
-      const badRelease = vi.fn();
-      const badClient = makeClient(vi.fn().mockRejectedValue(transientError()), badRelease);
-      const goodClient = makeClient(vi.fn().mockResolvedValue({ rows: [], rowCount: 0 }), vi.fn());
-
-      mockConnect.mockResolvedValueOnce(badClient).mockResolvedValueOnce(goodClient);
-
-      const promise = queryWithRetry("SELECT 1");
-      await vi.advanceTimersByTimeAsync(2000);
-      await promise;
-
-      expect(badRelease).toHaveBeenCalledWith(true);
-    });
-
-    it("throws non-transient errors immediately without retry", async () => {
-      const client = makeClient(vi.fn().mockRejectedValue(nonTransientError()), vi.fn());
-      mockConnect.mockResolvedValue(client);
-
-      await expect(queryWithRetry("BAD SQL")).rejects.toThrow("syntax error");
-      expect(mockConnect).toHaveBeenCalledTimes(1);
-    });
-
-    it("throws after exhausting all retries on persistent transient error", async () => {
-      vi.useRealTimers();
-      const err = transientError();
-      mockConnect.mockResolvedValue(makeClient(vi.fn().mockRejectedValue(err), vi.fn()));
-      await expect(queryWithRetry("SELECT 1", undefined, 0)).rejects.toThrow(err.message);
-      expect(mockConnect).toHaveBeenCalledTimes(1); // 0 only, no retries
-      vi.useFakeTimers();
-    });
-
-    it("respects maxRetries parameter", async () => {
-      vi.useRealTimers();
-      mockConnect.mockResolvedValue(makeClient(vi.fn().mockRejectedValue(transientError()), vi.fn()));
-      await expect(queryWithRetry("SELECT 1", undefined, 0)).rejects.toThrow();
-      expect(mockConnect).toHaveBeenCalledTimes(1);
-      vi.useFakeTimers();
-    });
-  });
-
-  describe("connectWithRetry", () => {
-    it("returns client on success, validates with SELECT 1", async () => {
-      const client = makeClient(vi.fn().mockResolvedValue({ rows: [{ "?column?": 1 }] }), vi.fn());
-      mockConnect.mockResolvedValue(client);
-
-      const result = await connectWithRetry();
-      expect(result).toBe(client);
-      expect(client.query).toHaveBeenCalledWith("SELECT 1");
-    });
-
-    it("retries on transient connect error", async () => {
-      const goodClient = makeClient(vi.fn().mockResolvedValue({ rows: [] }), vi.fn());
-      mockConnect
-        .mockRejectedValueOnce(transientError("ECONNREFUSED"))
-        .mockResolvedValueOnce(goodClient);
-
-      const promise = connectWithRetry();
-      await vi.advanceTimersByTimeAsync(2000);
-      const result = await promise;
-
-      expect(result).toBe(goodClient);
-      expect(mockConnect).toHaveBeenCalledTimes(2);
-    });
-
-    it("destroys connection and retries when SELECT 1 validation fails", async () => {
-      const badRelease = vi.fn();
-      const badClient = makeClient(vi.fn().mockRejectedValue(transientError()), badRelease);
-      const goodClient = makeClient(vi.fn().mockResolvedValue({ rows: [] }), vi.fn());
-
-      mockConnect.mockResolvedValueOnce(badClient).mockResolvedValueOnce(goodClient);
-
-      const promise = connectWithRetry();
-      await vi.advanceTimersByTimeAsync(2000);
-      const result = await promise;
-
-      expect(badRelease).toHaveBeenCalledWith(true);
-      expect(result).toBe(goodClient);
-    });
-
-    it("throws non-transient errors immediately", async () => {
-      mockConnect.mockRejectedValue(nonTransientError());
-
-      await expect(connectWithRetry()).rejects.toThrow("syntax error");
-      expect(mockConnect).toHaveBeenCalledTimes(1);
-    });
-  });
-});
--- a/src/tests/dead-signup-removal.test.ts
+++ b/src/tests/dead-signup-removal.test.ts
@ -1,44 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { readFileSync, existsSync } from "fs";
-import { join } from "path";
-
-describe("Dead Signup Router Removal", () => {
-  describe("Signup router module removed", () => {
-    it("should not have src/routes/signup.ts file", () => {
-      const signupPath = join(__dirname, "../routes/signup.ts");
-      expect(existsSync(signupPath)).toBe(false);
-    });
-  });
-
-  describe("Dead verification functions removed from source", () => {
-    it("should not export isEmailVerified from verification.ts source", () => {
-      const src = readFileSync(join(__dirname, "../services/verification.ts"), "utf8");
-      expect(src).not.toContain("export async function isEmailVerified");
-    });
-
-    it("should not export getVerifiedApiKey from verification.ts source", () => {
-      const src = readFileSync(join(__dirname, "../services/verification.ts"), "utf8");
-      expect(src).not.toContain("export async function getVerifiedApiKey");
-    });
-
-    it("should still export createPendingVerification", () => {
-      const src = readFileSync(join(__dirname, "../services/verification.ts"), "utf8");
-      expect(src).toContain("export async function createPendingVerification");
-    });
-
-    it("should still export verifyCode", () => {
-      const src = readFileSync(join(__dirname, "../services/verification.ts"), "utf8");
-      expect(src).toContain("export async function verifyCode");
-    });
-  });
-
-  describe("410 signup handler still works", () => {
-    it("should still have signup 410 handler working", async () => {
-      const request = (await import("supertest")).default;
-      const { app } = await import("../index.js");
-      const res = await request(app).post("/v1/signup/free");
-      expect(res.status).toBe(410);
-      expect(res.body.error).toContain("discontinued");
-    });
-  });
-});
--- a/Show more
+++ b/Show more