fix(api,deploy): correct AttributeError, missing lifespan, Dockerfile drift, XGBoost double-boost

- main.py: fix settings.API_TITLE/API_VERSION -> PROJECT_NAME/VERSION (AttributeError)
- main.py: pass lifespan= to FastAPI constructor so startup/shutdown events fire
- main.py: remove emoji from logger strings
- advanced_ensemble_detector.py: guard suspicious-count boost behind xgb_model is None
to prevent double-multiplying an already-calibrated XGBoost probability
- advanced_ensemble_detector.py: fix stale comment (25 -> 26 signals)
- Dockerfile: sync all package versions with requirements.txt; add starlette>=0.40.0,
xgboost>=2.0.0, shap>=0.45.0 which were missing from Docker build
- render.yaml: replace wildcard CORS_ORIGINS with explicit allowed origins

Dockerfile

@@ -7,7 +7,6 @@ RUN apt-get update && apt-get install -y \
 WORKDIR /app
 COPY . .
 
-# Install lightweight packages first, then heavy ones
 RUN pip install --no-cache-dir --upgrade pip && \
     pip install --no-cache-dir \
     fastapi==0.115.0 \
@@ -17,17 +16,20 @@ RUN pip install --no-cache-dir --upgrade pip && \
     python-dotenv==1.0.0 \
     python-magic==0.4.27 \
     python-multipart==0.0.22 \
-    Pillow==11.2.1 \
+    "starlette>=0.40.0" \
+    Pillow==12.1.1 \
     imagehash==4.3.1 \
-    numpy==1.26.3 \
+    "numpy>=1.24.0,<2.0.0" \
     scipy==1.11.4 \
-    scikit-learn==1.4.0 \
+    scikit-learn==1.5.0 \
     opencv-python==4.9.0.80 \
     slowapi==0.1.9 \
     PyWavelets==1.4.1 \
     scikit-image==0.22.0 \
-    cryptography==41.0.7 \
-    psutil==5.9.8 && \
+    cryptography==46.0.6 \
+    psutil==5.9.8 \
+    xgboost>=2.0.0 \
+    shap>=0.45.0 && \
     pip install --no-cache-dir \
     torch==2.6.0 \
     torchvision==0.21.0 \
@@ -38,7 +40,7 @@ RUN pip install --no-cache-dir --upgrade pip && \
     safetensors==0.4.5 \
     ftfy==6.1.1 \
     regex==2023.12.25 \
-    tqdm==4.66.1 \
+    tqdm==4.66.3 \
     "clip @ git+https://github.com/openai/CLIP.git"
 
 ENV PYTHONPATH=/app

backend/main.py

@@ -1,6 +1,3 @@
-"""
-VeriFile-X API - Privacy-preserving digital forensics platform.
-"""
 from fastapi import FastAPI, Request
 from fastapi.middleware.cors import CORSMiddleware
 from fastapi.responses import FileResponse
@@ -23,25 +20,24 @@ limiter = Limiter(key_func=get_remote_address)
 
 @asynccontextmanager
 async def lifespan(app: FastAPI):
-    """Startup and shutdown lifecycle events."""
-    logger.info("🚀 VeriFile-X API starting up...")
+    logger.info("VeriFile-X API starting up")
     logger.info(f"Debug mode: {settings.DEBUG}")
     logger.info(f"Max file size: {settings.MAX_FILE_SIZE_MB}MB")
     yield
-    logger.info("🛑 VeriFile-X API shutting down...")
+    logger.info("VeriFile-X API shutting down")
 
 
 app = FastAPI(
     title=settings.PROJECT_NAME,
     version=settings.VERSION,
-    debug=settings.DEBUG
+    debug=settings.DEBUG,
+    lifespan=lifespan,
 )
 
 app.state.limiter = limiter
 app.add_exception_handler(RateLimitExceeded, _rate_limit_exceeded_handler)
 app.add_middleware(SlowAPIMiddleware)
 
-# CORS Configuration
 app.add_middleware(
     CORSMiddleware,
     allow_origins=settings.cors_origins_list,
@@ -50,36 +46,28 @@ app.add_middleware(
     allow_headers=["*"],
 )
 
-
-# Register API routers
 app.include_router(upload.router)
 app.include_router(analyze.router)
 
 
 @app.get("/")
 async def root():
-    """
-    Serve frontend HTML.
-    In production, this serves the web UI.
-    """
     frontend_path = os.path.join(os.path.dirname(__file__), "..", "frontend", "index.html")
     if os.path.exists(frontend_path):
         return FileResponse(frontend_path)
-    else:
-        return {
-            "name": settings.API_TITLE,
-            "version": settings.API_VERSION,
-            "status": "operational",
-            "docs": "/docs"
-        }
+    return {
+        "name": settings.PROJECT_NAME,
+        "version": settings.VERSION,
+        "status": "operational",
+        "docs": "/docs",
+    }
 
 
 @app.get("/health")
 @limiter.limit("60/minute")
 async def health_check(request: Request):
-    """Health check endpoint."""
     return {
         "status": "healthy",
         "debug_mode": settings.DEBUG,
-        "timestamp": datetime.now().isoformat()
+        "timestamp": datetime.now().isoformat(),
     }

backend/services/advanced_ensemble_detector.py

@@ -60,7 +60,7 @@ class AdvancedEnsembleDetector(StatisticalDetector):
         Run complete advanced detection with all methods.
         
         Returns:
-            Complete report with 25 detection signals
+            Complete report with 26 detection signals
         """
         logger.info(f"Starting advanced ensemble detection for {self.filename}")
         
@@ -86,7 +86,7 @@ class AdvancedEnsembleDetector(StatisticalDetector):
         # Add DCT frequency signal
         dct_result = detect_dct_artifacts(self.image_bytes, self.filename)
 
-        # Combine all signals (now 25 total)
+        # Combine all signals (now 26 total)
         all_signals = base_report["all_signals"] + [
     dire_result, clip_result, own_result, prnu_result,
     ela_result, metadata_result, dct_result,
@@ -145,12 +145,12 @@ class AdvancedEnsembleDetector(StatisticalDetector):
 
         suspicious_count = sum(1 for s in all_signals if s["score"] > 0.5)
 
-        # Boost if multiple independent methods agree
-        if suspicious_count >= 12:  # More than half
-            weighted_score = min(1.0, weighted_score * 1.3)
-        elif suspicious_count >= 10:
-            weighted_score = min(1.0, weighted_score * 1.2)
-        
+        if xgb_model is None:
+            if suspicious_count >= 12:
+                weighted_score = min(1.0, weighted_score * 1.3)
+            elif suspicious_count >= 10:
+                weighted_score = min(1.0, weighted_score * 1.2)
+
         # Classification
         if weighted_score > 0.80:
             classification = "likely_ai_generated"

render.yaml

@@ -11,7 +11,7 @@ services:
       - key: DEBUG
         value: false
       - key: CORS_ORIGINS
-        value: "*"
+        value: "https://abinaze.github.io,https://abinazebinoy-verifile-x-api.hf.space"
       - key: MAX_FILE_SIZE_MB
         value: 50
       - key: MAX_ANALYSIS_SIZE_MB