log and order

.python-version

@@ -0,0 +1 @@
+3.11

app.py

@@ -27,7 +27,14 @@ drive_service = DriveService()
 @asynccontextmanager
 async def lifespan(app: FastAPI):
     """Application lifespan manager."""
-    logger.info("Starting up - initializing database...")
+    # Startup Banner
+    logger.info("═" * 60)
+    logger.info("    API Gateway v1.0.0 - Starting Up")
+    logger.info("═" * 60)
+    
+    # Database Initialization Section
+    logger.info("")
+    logger.info("📦 [DATABASE INITIALIZATION]")
     
     # Register DB Service configuration
     register_db_service_config()
@@ -42,6 +49,32 @@ async def lifespan(app: FastAPI):
     )
     logger.info("✅ Backup Service initialized")
     
+    # Check for RESET_DB environment variable
+    if os.getenv("RESET_DB", "").lower() == "true":
+        logger.warning(f"⚠️  RESET_DB enabled - Clearing local database ({DB_FILENAME})")
+        if os.path.exists(DB_FILENAME):
+            os.remove(DB_FILENAME)
+            logger.info("   Local database deleted")
+        
+        # Reset database (drop + create all tables)
+        await reset_database(engine)
+        logger.info("✅ Database reset complete")
+    else:
+        # Startup: Download DB from Drive ONLY if local file doesn't exist
+        if not os.path.exists(DB_FILENAME):
+            logger.info("⬇️  Downloading database from Google Drive...")
+            drive_service.download_db()
+        else:
+            logger.info("✓  Local database found")
+        
+        # Initialize database (create tables if not exist)
+        await init_database(engine)
+        logger.info("✅ Database initialized")
+    
+    # Service Registration Section
+    logger.info("")
+    logger.info("⚙️  [SERVICE REGISTRATION]")
+    
     # Register Auth Service configuration
     from services.auth_service import register_auth_service
     register_auth_service(
@@ -134,32 +167,31 @@ async def lifespan(app: FastAPI):
     )
     logger.info("✅ API Key Service configured")
     
-    # Check for RESET_DB environment variable
-    if os.getenv("RESET_DB", "").lower() == "true":
-        logger.warning(f"RESET_DB is set to true. Skipping download and clearing local database ({DB_FILENAME}).")
-        if os.path.exists(DB_FILENAME):
-            os.remove(DB_FILENAME)
-            logger.info("Local database deleted.")
-        
-        # Reset database (drop + create all tables)
-        await reset_database(engine)
-        logger.info("✅ Database reset complete")
-    else:
-        # Startup: Download DB from Drive ONLY if local file doesn't exist
-        if not os.path.exists(DB_FILENAME):
-            logger.info("Startup: Local DB missing. Attempting to download from Google Drive...")
-            drive_service.download_db()
-        else:
-            logger.info("Startup: Local DB found. Skipping download to preserve data.")
-        
-        # Initialize database (create tables if not exist)
-        await init_database(engine)
-        logger.info("✅ Database initialized")
+    # Worker Pool Section
+    logger.info("")
+    logger.info("👷 [WORKER POOL]")
     
     # Start background job worker
     from services.gemini_service import start_worker, stop_worker
     await start_worker()
-    logger.info("Background job worker started")
+    logger.info("✅ Worker pool started")
+    
+    # Log CORS configuration
+    allowed_origins = os.getenv("CORS_ORIGINS").split(",")
+    logger.info("")
+    logger.info("🌐 [NETWORK CONFIGURATION]")
+    logger.info(f"✅ CORS origins: {', '.join(allowed_origins)}")
+    
+    # Startup Complete Summary
+    logger.info("")
+    logger.info("═" * 60)
+    logger.info("    🚀 API Gateway Ready")
+    logger.info("    • Database: ✅ Ready")
+    logger.info("    • Services: 5 initialized (DB, Auth, Credit, Audit, API Key)")
+    logger.info("    • Workers: 15 active")
+    logger.info("    • Endpoint: http://0.0.0.0:8000")
+    logger.info("═" * 60)
+    logger.info("")
     
     yield
     
@@ -184,16 +216,12 @@ app = FastAPI(
 )
 
 
-allowed_origins = os.getenv("CORS_ORIGINS", "http://localhost:3000,http://localhost:5173").split(",")
-logger.info(f"CORS allowed origins: {allowed_origins}")
+# Middleware order matters! They execute in reverse order (bottom to top)
+# Request flow: CORS → Auth → APIKey → Audit → Credit → Router
+# So we add them in REVERSE order (last added = first to run on REQUEST)
 
-app.add_middleware(
-    CORSMiddleware,
-    allow_origins=allowed_origins,
-    allow_credentials=True,
-    allow_methods=["*"],
-    allow_headers=["*"],
-)
+from services.credit_service import CreditMiddleware
+app.add_middleware(CreditMiddleware)
 
 
 from services.audit_service import AuditMiddleware
@@ -204,14 +232,22 @@ from services.gemini_service import APIKeyMiddleware
 app.add_middleware(APIKeyMiddleware)
 
 
-from services.credit_service import CreditMiddleware
-app.add_middleware(CreditMiddleware)
-
-
 from services.auth_service import AuthMiddleware
 app.add_middleware(AuthMiddleware)
 
 
+# CORS middleware MUST be added last to ensure error responses also have CORS headers
+allowed_origins = os.getenv("CORS_ORIGINS").split(",")
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=allowed_origins,
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
+
 app.include_router(general.router)
 app.include_router(auth.router)
 app.include_router(blink.router)

services/priority_worker_pool.py

@@ -170,7 +170,7 @@ class PriorityWorker(Generic[JobType]):
     async def start(self):
         """Start the worker polling loop."""
         self._running = True
-        logger.info(f"Worker {self.worker_id} ({self.priority}) started, polling every {self.poll_interval}s")
+        logger.debug(f"Worker {self.worker_id} ({self.priority}) started, polling every {self.poll_interval}s")
         asyncio.create_task(self._poll_loop())
     
     async def stop(self):