fix: heal chatbot_is_active on valid subscription (403 on session/init); add Contact Us form and SuperAdmin inbox

Ship chatbot intelligence upgrades and author-friendly Readers tab

Deliver enterprise features with JWT blacklist, SuperAdmin TOTP, and CI hardening.

SuperAdmin QoL: persistent session, TOTP session, shared provider keys.

Add SuperAdmin retailer API keys with priority over env and free scraping.

Add fixed Contact Us tab and support email flow in admin panel.

Implement Enterprise Worth Roadmap (R-139–R-173).

Replace HTML platform scraping with API-first catalog hub.

Refactor admin API into service and repository layers.

Add publish-help contact form with support email routing.

feat: proper visitor analytics system - New Visitor model (visitor_uid + fingerprint fallback, first_seen/last_seen/page_views, geo, device) - VisitorRepository with upsert + analytics queries - visitor_tracker.py: record_visitor() upserts on every session/init - session/init accepts visitor_uid in request body (HF-Spaces iframe-safe, no cookies) - 4 new analytics endpoints: /visitors /geo /devices /sessions/stats - geo.py: region extraction + X-Real-IP support - DB migration: visitor_uid column on chat_sessions - ARCHITECTURE.md updated

feat: Phase 7 — Polling streaming (stream-start + poll endpoints)

Add: SuperAdmin create author endpoint (POST /api/super/authors) with optional plan + fix register ValueError 500

Fix: JSONResponse args reversed causing all exception handlers to crash with TypeError

Production hardening: JWT blacklist, TOTP, Pydantic schemas, Prometheus, SSRF fix, CSP, Redis auth, Celery backup — 35 items across P0-P5

Enforce strict SuperAdmin vs Author panel separation.

Enforce brief sales-focused chatbot rules with spoiler guard and buy CTAs.

Fix: accept any email/username at login, add is_superadmin to response, fix [object Object] error display

Restructure project for HF Spaces deployment