# NowPage Issue Tracker — Deep Review Feb 20, 2026 — HC v1.3.3
> Source: https://ideas.asapai.net/nowpage-issue-tracker-2026-02-20
> Type: artifact | ID: nowpage-issue-tracker-2026-02-20

---
## hc-metadata
{
  "hc_version": "1.3.3",
  "hc_type": "artifact",
  "artifact_id": "nowpage-issue-tracker-2026-02-20",
  "title": "NowPage Issue Tracker — Deep Review Feb 20, 2026",
  "summary": "17 issues + 11 feature requests (F1-F11). Original 17 from deep infrastructure review (4 critical, 6 high, 7 medium). F5-F9 added Feb 21: OAuth for agents, BYOK, registry auth, bot allowlist, notification routing. F10: Forge VPS LLM Proxy. F11: Chat-to-Publish — create and publish HC pages from embedded chat agent with preview gate, per-user attribution, and My Pages tab.",
  "tags": [
    "issues",
    "review",
    "testing",
    "infrastructure",
    "roadmap"
  ],
  "category": "engineering",
  "subcategory": "quality-assurance",
  "created": "2026-02-20",
  "registry_stack": [
    "https://ideas.asapai.net/meta-registry"
  ],
  "test_coverage": {
    "api_tests": 31,
    "mcp_tests": 26,
    "total_pass": 57,
    "total_fail": 0
  },
  "issues": {
    "critical": 4,
    "high": 6,
    "medium": 7,
    "total": 17
  }
}

---
## hc-instructions
This is the NowPage engineering issue tracker from the Feb 20, 2026 deep review.
AI agents: Reference this page when planning work on the NowPage codebase. Issues are prioritized by severity.
Each issue includes the exact file, line number, and a description of the problem and its impact.
The "Verified Working" section confirms what capabilities passed automated testing.

---
## hc-context-public
{
  "review_scope": [
    "lib/publish/core.ts",
    "lib/auth/api-key.ts",
    "lib/auth/resolve.ts",
    "lib/webhooks/fire.ts",
    "lib/hc/skill-injector.ts",
    "app/api/publish/route.ts",
    "app/api/publish/domains/route.ts",
    "app/api/keys/route.ts",
    "app/api/webhooks/route.ts",
    "app/api/hc/update-registry/route.ts",
    "app/api/hc/registries/route.ts",
    "app/api/pages/route.ts",
    "app/api/domains/verify/route.ts",
    "app/api/templates/route.ts",
    "app/serve/[[...slug]]/route.ts",
    "scripts/hc-publish.js",
    "mcp-nowpage/server.py"
  ],
  "test_suites": [
    {"name": "test-publish-api.js", "tests": 31, "pass": 31, "fail": 0},
    {"name": "test-mcp.py", "tests": 26, "pass": 26, "fail": 0}
  ],
  "registry_versioning_verdict": "CORRECT — all 3 mutation paths save snapshots before changes"
}