Fix emoji corruption properly using pristine commit reference

Fix UTF-8 mojibake in admin and SuperAdmin templates.

Move growth features to SuperAdmin; rename /admin to /author.

Add enterprise growth APIs, billing, admin UI, and test suite.

P0 security: async backup, widget CORS, Redis auth.

SuperAdmin QoL: persistent session, TOTP session, shared provider keys.

Add mandatory SuperAdmin TOTP enrollment and production delivery skills.

Add SuperAdmin retailer API keys with priority over env and free scraping.

fix: correct DATA_API base URL in superadmin.html to prevent duplicate /super path

fix: correct API base URL from /api/v1 to /api in all frontend files

feat: full admin SPA + superadmin persistent login fix

fix: keep run_backup as lazy import (celery not in local dev env)

refactor: Phase 6A+6B — top-level imports and Pydantic schema upgrades

Refactor: complete 10/10 modularity — superadmin/routers/, core/startup/, pipeline/generation.py, slim main.py

Fix: datetime naive/aware crash across embed-token, access-repo, superadmin, expiry-task + friendly no-subscription UI

Improve: Create Author flow - success modal with details + redirect to Grant Access with pre-filled email

Fix: CSP connect-src for jsdelivr + better create author error display

Add: Create Author UI modal in SuperAdmin panel with plan selection

Add: SuperAdmin create author endpoint (POST /api/super/authors) with optional plan + fix register ValueError 500

Fix: missing timezone import in superadmin grants + naive/aware datetime comparison crash

Production hardening: JWT blacklist, TOTP, Pydantic schemas, Prometheus, SSRF fix, CSP, Redis auth, Celery backup — 35 items across P0-P5

Enforce strict SuperAdmin vs Author panel separation.

Fix token display for unsubscribed authors and add SuperAdmin author removal.

Fix logout on page refresh by restoring sessions via refresh token and cookies.

Fix revoke subscription hang caused by blocking SMTP email send.

Fix auth session expiry with shared auto-refresh client for admin panels.

fix: naive vs aware datetime error in grants/extend/embed-token, grant button loading state + 15s timeout + token display modal

feat: Per-user auto embed token, full Token Management SA page, fix extend on expired subs, add /grants + /reset-tokens + /embed-token endpoints

Fix CSS: sidebar now scrollable with thin scrollbar, tooltips drop DOWN instead of up to stay in viewport

Add QoL info tooltips to SuperAdmin panel, match admin panel design

Major hardening: bulletproof superadmin router with try/except on every endpoint, fix exception handler names, validate tokens before dashboard, add QoL info tooltips to all admin pages

Fix SuperAdmin 500 errors: harden get_current_user against null/undefined/expired tokens, return 401 instead of 500; harden SuperAdmin apiGet/apiPost with defensive JSON parsing and 401/403 redirect to login; fix grant_access serialization

Phase 1.2+5.1+6.2+6.5: Book cover upload with resizing, conversion funnel analytics, intent distribution, backup system, CI/CD pipeline

Deep audit fix: add missing model columns (blocked, rating, tokens_used, out_of_scope_message, buy_url, preview_url), fix .get() calls, fix ingest doc creation, add track-click endpoint, add column migrations, fix email crash, fix audit log field names, enrich superadmin author list

Wire all frontend features to real backend APIs: widget-config, profile, personality, notifications, smart-links, token-usage, grant-by-email, fix password endpoint

Premium redesign: admin panel, superadmin panel, fix widget API paths, fix analytics 500

Fix: accept any email/username at login, add is_superadmin to response, fix [object Object] error display

UX: remove TOTP field from superadmin login (not yet implemented in backend)

Restructure project for HF Spaces deployment