Add email list sync UI, Phase 4 user fields, and startup migrations.

Add enterprise growth APIs, billing, admin UI, and test suite.

Fix analytics accuracy, tenant isolation, and event-loop blocking.

Add SuperAdmin retailer API keys with priority over env and free scraping.

Fetch list prices during platform presence scans where retailers allow it.

Revert "Complete platform presence stack with ISBN enrichment and manual overrides."

Complete platform presence stack with ISBN enrichment and manual overrides.

Add Platform Presence Scanner for URL import distribution scoring.

feat: full cover+genre extraction from all platforms - platform HTML parsers + DB fields

fix: resolve Pyrefly unknown-name errors in book.py

feat: deep book metadata extraction - author bio, genre, ratings, pages

feat: book URL import - 10 platforms, 3-step UI, scraper service

feat: show IP address in sessions + persistent login until logout - Add ip_address field to ChatSession model (VARCHAR 45, handles IPv4+IPv6) - Store real client IP at session/init time via get_real_ip() - Expose ip_address in /sessions list and /sessions/{id}/transcript responses - DB migration: ip_address column added to chat_sessions - Bump REFRESH_TOKEN_EXPIRE_DAYS from 7 to 30 days (stay logged in 1 month) - Fix auth-client.js: refreshAccessToken only clears session on 401/403, not on network/5xx errors (HF cold-start safe) - Fix restoreSession: keeps session alive when refresh fails transiently, only clears on explicit auth rejection

feat: proper visitor analytics system - New Visitor model (visitor_uid + fingerprint fallback, first_seen/last_seen/page_views, geo, device) - VisitorRepository with upsert + analytics queries - visitor_tracker.py: record_visitor() upserts on every session/init - session/init accepts visitor_uid in request body (HF-Spaces iframe-safe, no cookies) - 4 new analytics endpoints: /visitors /geo /devices /sessions/stats - geo.py: region extraction + X-Real-IP support - DB migration: visitor_uid column on chat_sessions - ARCHITECTURE.md updated

feat: Phases 2B + 3B — semantic Q&A and vector store fixes

Production hardening: JWT blacklist, TOTP, Pydantic schemas, Prometheus, SSRF fix, CSP, Redis auth, Celery backup — 35 items across P0-P5

Enforce brief sales-focused chatbot rules with spoiler guard and buy CTAs.

Restructure chat flow: hello shows clickable book list, then engaging Q&A.

Humanize bot responses for greetings, catalog questions, and empty RAG retrieval.

Phase 1.2+5.1+6.2+6.5: Book cover upload with resizing, conversion funnel analytics, intent distribution, backup system, CI/CD pipeline

Phase 1: Add Conversations Viewer, Custom Q&A Manager, Export Center — 15 new API endpoints, 3 new admin pages, CustomQA model, message annotations, flagging, search, CSV import/export

Deep audit fix: add missing model columns (blocked, rating, tokens_used, out_of_scope_message, buy_url, preview_url), fix .get() calls, fix ingest doc creation, add track-click endpoint, add column migrations, fix email crash, fix audit log field names, enrich superadmin author list

Wire all frontend features to real backend APIs: widget-config, profile, personality, notifications, smart-links, token-usage, grant-by-email, fix password endpoint

Fix: specify foreign_keys on User.access_records to resolve AmbiguousForeignKeysError

Restructure project for HF Spaces deployment