fix: import AsyncResult directly so test patches on app.api.routes.AsyncResult resolve

fix: import AsyncResult directly so test patches on app.api.routes.AsyncResult resolve

fix

fix

fix: add missing Request parameter to get_job_status for slowapi rate limiter

infra(terraform): add EKS cluster, Elasticache Redis, and ECR modules for cloud deployment

feat(api): add tiered per-endpoint rate limits (sync vs async vs poll)

fix: complete Redis cache integration and clean up test layer

fix: complete Redis cache integration and clean up test layer

feat: add Redis/Celery async job queue for repository analysis

feat: add Redis/Celery async job queue for repository analysis

fix

fix: feat: fault-tolerant parallel agents, AST security scanner, and shared source reader

fixed lint

style(routes): fix import order and add blank lines between route functions

style(main): fix import order — stdlib before third-party before local

fix

feat(api): add human feedback loop endpoints

feat(agents): add specialist multi-agent review with judge synthesis

fix(auth): call get_settings() inside verify_api_key — avoid stale module-level settings reference

feat(api): rate limit by API key instead of IP-only for per-user limiting

fix: enforce API key validation in verify_api_key dependency

fix: re-raise HTTPException before generic handler so 401 auth errors are not swallowed as 500

fix: add explicit Request parameter to rate-limited routes so slowapi works with TestClient

fix: remove unused type: ignore comment on add_exception_handler

fix: suppress all mypy type errors on slowapi handler with correct ignore codes

fix: make rate limit handler sync and fix mypy return-value and await errors

fix: clean up rate limit handler — alias slowapi import, rename wrapper to handle_rate_limit

fix: rename rate limit handler to handle_rate_limit to avoid F811 redefinition error

fix: wrap slowapi handler in typed async function to satisfy mypy signature check

fix

fix: log warning at startup when API_KEY is unset and auth is disabled

fix: correct rate limiter decorator order on /analyze and /quick-analyze

fix

fix(tests): open-access dev mode when API_KEY unset, fix tmp_path test_ skip bug in agent test

feat(metrics): record per-agent and parallel-stage latency in MetricsCollector

fix(logging): structured JSON logger + bind exception context in routes

fix: remove unused exception variable in route handlers

fix: don't leak internal exception details to API callers

fix: resolve all ruff lint errors (E402, F401, F811)

feat: expose Prometheus scrape endpoint at /metrics/prometheus

fix: restrict CORS to explicit allowed origins via env var

fix: reject requests when API_KEY env var is not configured

feat: add /metrics endpoint for observability

fix: remove duplicate Limiter instantiation from main.py

fix: resolve circular import by moving limiter into app/api/limiter.py

fix: resolve circular import by moving limiter into app/api/limiter.py

fix: wire slowapi rate limiting - 5/min on analyze, 10/min on quick-analyze

feat: add API key authentication to POST endpoints

feat: convert to async/await with parallel agent execution via asyncio.gather