docs: BUG-058 bis BUG-066 (WebSocket 403, DMS Preview/Upload, Calendar Recurring/ICS, Missing Indexes, N+1, Custom Field not saved)

docs/test-bugs.md

@@ -382,3 +382,92 @@ Jeder Bug wird wie folgt dokumentiert:
 - **Schweregrad:** Low
 - **Ursache:** Test-Pfad falsch, korrekt ist /api/v1/entity-links/files/{file_id}/links
 - **Status:** ⏳ Test korrigieren
+Playwright E2E: 10 passed, 24 failed (BUG-011/012/013 — Mock-Daten und data-testid fehlen)
+
+### BUG-058: WebSocket Connection 403
+- **Kategorie:** API / WebSocket
+- **Modul:** Kommunikation
+- **Endpoint:** wss://crm.media-on.de/api/v1/comm/ws
+- **Erwartet:** WebSocket connection accepted
+- **Tatsächlich:** 403 Forbidden
+- **Schweregrad:** High
+- **Status:** ⏳ Nicht gefixt
+
+### BUG-059: DMS File Preview 400
+- **Kategorie:** API
+- **Modul:** DMS
+- **Endpoint:** GET /api/v1/dms/files/{file_id}/preview
+- **Erwartet:** 200 (preview content)
+- **Tatsächlich:** 400 Bad Request
+- **Schweregrad:** Medium
+- **Status:** ⏳ Nicht gefixt
+
+### BUG-060: Calendar Recurring Event — empty response
+- **Kategorie:** API
+- **Modul:** Calendar
+- **Endpoint:** POST /api/v1/calendar/entries (with recurrence)
+- **Erwartet:** 201 Created with event ID
+- **Tatsächlich:** Empty response (no ID returned)
+- **Schweregrad:** High
+- **Status:** ⏳ Nicht gefixt
+
+### BUG-061: Calendar ICS Feed 401
+- **Kategorie:** API
+- **Modul:** Calendar
+- **Endpoint:** GET /api/v1/calendar/{calendar_id}/ics-feed
+- **Erwartet:** 200 (ICS feed)
+- **Tatsächlich:** 401 Unauthorized
+- **Schweregrad:** Medium
+- **Status:** ⏳ Nicht gefixt
+
+### BUG-062: DMS 1MB Upload 400
+- **Kategorie:** API / File Upload
+- **Modul:** DMS
+- **Endpoint:** POST /api/v1/dms/files/upload
+- **Erwartet:** 201 Created
+- **Tatsächlich:** 400 Bad Request for 1MB file
+- **Schweregrad:** Medium
+- **Ursache:** File size limit may be too restrictive
+- **Status:** ⏳ Nicht gefixt
+
+### BUG-063: DMS .sh Upload 400
+- **Kategorie:** API / File Upload / Security
+- **Modul:** DMS
+- **Endpoint:** POST /api/v1/dms/files/upload
+- **Erwartet:** 201 Created (or 403 if blocked by policy)
+- **Tatsächlich:** 400 Bad Request for .sh file
+- **Schweregrad:** Low
+- **Hinweis:** May be intentional security restriction
+- **Status:** ⏳ Nicht gefixt
+
+### BUG-064: 8 Missing Database Indexes
+- **Kategorie:** Performance / Database
+- **Modul:** Contacts, Companies
+- **Missing Indexes:**
+  - contacts.ix_contacts_tenant_deleted
+  - contacts.ix_contacts_tenant_name
+  - contacts.ix_contacts_email
+  - companies.ix_companies_tenant_deleted
+  - companies.ix_companies_tenant_name
+  - companies.ix_companies_industry
+  - company_contacts.ix_cc_company
+  - company_contacts.ix_cc_contact
+- **Schweregrad:** Medium
+- **Status:** ⏳ Nicht gefixt
+
+### BUG-065: N+1 Query Potential in Contacts Routes
+- **Kategorie:** Performance
+- **Modul:** Contacts
+- **Erwartet:** Eager loading (selectinload/joinedload) for related entities
+- **Tatsächlich:** No eager loading found in contacts routes
+- **Schweregrad:** Medium
+- **Status:** ⏳ Nicht gefixt
+
+### BUG-066: Custom Field Value not saved (value=null)
+- **Kategorie:** API
+- **Modul:** Custom Fields
+- **Endpoint:** PATCH /api/v1/contacts/{contact_id}/custom-fields
+- **Erwartet:** Custom field value saved as 'test_value'
+- **Tatsächlich:** value=null in response — field value not saved
+- **Schweregrad:** High
+- **Status:** ⏳ Nicht gefixt