feat(config): support OPENROUTER_API_KEY, GROQ_API_KEY, and GEMINI_API_KEY loaded from .env

fix: add fallback defaults to Settings and fix limiter import in auth router

fix: resolution of critical blockers (P0/P1/P2 fixes) - async Redis, atomic credit updates, schema compatibility, task event loop safety, rate limits, timezone datetimes

fix: all 9 production audit issues - DEBUG default, delete_account commit, guest session security, GitHub OAuth redirect, unlimited credits sentinel

fix: dynamic code audit fallback based on scanned project files

fix: resolve tab switch streaming loop and dynamic fallback design generation

fix: production readiness, security, performance, and worker refactoring

Fix database deadlocks, timezone cookie offsets, and add WeasyPrint GTK fallback safeguards

Implement OpenRouter API integration and Redis event caching/replay to fix stuck streams on tab switch

Fix auto-login, SSE streams, LLM timeouts, and frontend cancellation

diagnose: add debug-worker endpoint to track background worker thread status

fix: use SimpleWorker to prevent os.fork crashes in background thread

fix: implement local_session context manager inside tasks.py to prevent event loop mismatch errors

fix: implement custom ThreadSafeDeathPenalty class for RQ worker thread

fix: update LLM model names to active NVIDIA catalog and add worker thread signal fixes

fix: patch _install_signal_handlers on RQ worker to run inside background thread

fix: set handle_signals=False to allow RQ worker to run inside background daemon thread

fix: run background worker on app startup to process enqueued jobs

fix: SSE named events, add cancel endpoint, fix performance headers

feat: replace Firebase with Supabase JWT auth (ES256/JWKS + HS256 fallback)

Configure robust guest_login retrieval and database field defaults

Support Authorization Bearer token fallback for session verification

Configure unique prepared statement naming func for asyncpg to fully resolve PgBouncer conflicts

Restore standard CORSMiddleware with credentials and Vercel preview domain regex matcher

Disable statement cache size and prepared statement cache size in asyncpg connect args

Configure custom CORS middleware to handle origin header dynamically for credential-enabled requests

Fix database connection prepared statement cache size for PgBouncer pool compatibility

Implement guest login bypass endpoint and mock credentials validation

Import UUID in audit and design routers to resolve NameErrors

Fix python f-string curly brace syntax error in ai.py

Initialize Archvise API backend for Hugging Face Spaces