Merge remote-tracking branch 'origin/main' into prod

Author: owenisas

.github/workflows/deploy-backend-aws.yml

@@ -479,10 +479,10 @@ jobs:
     environment: ${{ github.ref_name == 'prod' && 'prod' || 'dev' }}
     env:
       FIREBASE_PROJECT_ID: ${{ vars.BACKEND_FIREBASE_PROJECT_ID || 'fpai-cbcb2' }}
-      OPENAI_MODEL: ${{ vars.BACKEND_OPENAI_MODEL || 'gpt-5.2' }}
+      OPENAI_MODEL: ${{ vars.BACKEND_OPENAI_MODEL || 'gpt-5.4' }}
       API_KEYS_SECRET_ID: ${{ vars.BACKEND_API_KEYS_SECRET_ID }}
-      ALLOWED_ORIGINS: ${{ vars.BACKEND_ALLOWED_ORIGINS || 'http://localhost:3000,http://localhost:5173,https://fpai.reunifylabs.com,https://d1gyb6wodlq2q2.cloudfront.net' }}
-      ASSETS_ALLOWED_ORIGINS: ${{ vars.BACKEND_ASSETS_ALLOWED_ORIGINS || 'http://localhost:3000,http://localhost:5173,https://d1gyb6wodlq2q2.cloudfront.net,https://fpai.reunifylabs.com' }}
+      ALLOWED_ORIGINS: ${{ vars.BACKEND_ALLOWED_ORIGINS || 'http://localhost:3000,http://localhost:5173,https://fpai.reunifylabs.com,https://d3qsqv0u3opa26.cloudfront.net' }}
+      ASSETS_ALLOWED_ORIGINS: ${{ vars.BACKEND_ASSETS_ALLOWED_ORIGINS || 'http://localhost:3000,http://localhost:5173,https://d3qsqv0u3opa26.cloudfront.net,https://fpai.reunifylabs.com' }}
       SHARE_PUBLIC_BASE_URL: ${{ vars.BACKEND_SHARE_PUBLIC_BASE_URL || 'https://fpai.reunifylabs.com' }}
       REQUIRE_BRAVE_API_KEY: ${{ vars.BACKEND_REQUIRE_BRAVE_API_KEY || 'false' }}
     steps:
@@ -526,6 +526,7 @@ jobs:
       - name: Sync secrets to AWS Secrets Manager
         env:
           OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
           GEMINI_API_KEY: ${{ secrets.GEMINI_API_KEY }}
           GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
           BRAVE_API_KEY: ${{ secrets.BRAVE_API_KEY }}
@@ -572,12 +573,14 @@ jobs:
 
           UPDATED_SECRET=$(printf '%s' "$CURRENT_SECRET" \
             | jq --arg openai_key "$OPENAI_API_KEY" \
+                 --arg anthropic_key "$ANTHROPIC_API_KEY" \
                  --arg gemini_key "$EFFECTIVE_GEMINI_API_KEY" \
                  --arg brave_key "$BRAVE_API_KEY" \
                  --arg firebase_sa "$FIREBASE_SERVICE_ACCOUNT_JSON" \
               '.OPENAI_API_KEY = $openai_key
                | .GEMINI_API_KEY = $gemini_key
                | .FIREBASE_SERVICE_ACCOUNT_JSON = $firebase_sa
+               | if (($anthropic_key // "") | length) > 0 then .ANTHROPIC_API_KEY = $anthropic_key else . end
                | if (($brave_key // "") | length) > 0 then .BRAVE_API_KEY = $brave_key else . end')
 
           if [ "$SECRET_EXISTS" = "true" ]; then
@@ -591,6 +594,11 @@ jobs:
           fi
 
           echo "✅ Updated OPENAI_API_KEY + GEMINI_API_KEY + FIREBASE_SERVICE_ACCOUNT_JSON in Secrets Manager ($SECRET_ID)"
+          if [ -n "$ANTHROPIC_API_KEY" ]; then
+            echo "✅ ANTHROPIC_API_KEY was also updated in Secrets Manager"
+          else
+            echo "INFO: ANTHROPIC_API_KEY not provided; existing Secrets Manager value preserved"
+          fi
           if [ -n "$BRAVE_API_KEY" ]; then
             echo "✅ BRAVE_API_KEY was also updated in Secrets Manager"
           else
@@ -629,7 +637,7 @@ jobs:
           REQUIRED_ORIGINS=(
             "http://localhost:3000"
             "http://localhost:5173"
-            "https://d1gyb6wodlq2q2.cloudfront.net"
+            "https://d3qsqv0u3opa26.cloudfront.net"
             "https://fpai.reunifylabs.com"
           )
 

.gitignore

@@ -63,6 +63,9 @@ backend/math_to_manim_temp/
 backend/test_gen_only.py
 backend/test_manim_tool.py
 
+# Playwright artifacts
+output/playwright/
+
 # Deployment Info (Generated)
 # API_ENDPOINT.md (Choosing to commit this for team visibility, uncomment if local only)
 fpai-cbcb2-firebase-adminsdk-fbsvc-5feb40f951.json