chore(release): bump version to v1.4.10

Wrap fs.mkdirSync(DATA_DIR) in try/catch so OmniRoute doesn't crash
when the user's home directory is not writable (e.g. restricted
environments, npm global install with different user).
Prints a clear warning with DATA_DIR env var recommendation.

.agent/workflows/git-workflow.md

@@ -1,54 +0,0 @@
----
-description: Git workflow — NEVER commit directly to main. Always use feature branches.
----
-
-# Git Workflow
-
-## ⚠️ CRITICAL RULE: NEVER commit directly to `main`
-
-## Steps
-
-1. **Before starting any work**, create a feature branch from `main`:
-
-   ```bash
-   git checkout main && git pull origin main
-   git checkout -b feature/<feature-name>
-   ```
-
-2. **During development**, commit to the feature branch:
-
-   ```bash
-   git add -A && git commit -m "<type>(<scope>): <description>"
-   ```
-
-3. **Before pushing**, verify the build passes:
-
-   ```bash
-   npm run build
-   ```
-
-4. **When the feature is complete and verified**, push the branch and STOP:
-
-   ```bash
-   git push origin feature/<feature-name>
-   ```
-
-5. **DO NOT** create a PR, merge, or push to `main`. Let the user handle that.
-
-## Branch naming convention
-
-- `feature/<name>` — new features
-- `fix/<name>` — bugfixes
-- `refactor/<name>` — refactoring
-- `docker/<name>` — Docker / infrastructure changes
-- `style/<name>` — UI / CSS changes
-
-## Commit types
-
-- `feat` — new feature
-- `fix` — bugfix
-- `refactor` — code refactoring
-- `style` — UI / CSS changes
-- `docker` — Docker / infrastructure
-- `docs` — documentation
-- `chore` — maintenance

.agents/workflows/implement-features.md

@@ -0,0 +1,131 @@
+---
+description: Analyze open feature request issues, implement viable ones on dedicated branches, and respond to authors
+---
+
+# /implement-features — Feature Request Implementation Workflow
+
+## Overview
+
+Fetches open feature request issues, analyzes each against the current codebase, implements viable ones on dedicated branches, and responds to authors with results. Does NOT merge to main — leaves branches for author validation.
+
+## Steps
+
+### 1. Identify the Repository
+
+// turbo
+
+- Run: `git -C <project_root> remote get-url origin` to extract owner/repo
+
+### 2. Fetch Open Feature Request Issues
+
+// turbo
+
+- Run: `gh issue list --repo <owner>/<repo> --state open --limit 50 --json number,title,labels,body,comments,createdAt,author`
+- Filter for issues that are feature requests (label `enhancement`/`feature`, or body describes new functionality, or previously classified as feature request)
+- Sort by oldest first
+
+### 3. Analyze Each Feature Request
+
+For each feature request issue, perform a **two-level analysis**:
+
+#### Level 1 — Viability Assessment
+
+Ask yourself:
+
+- Does this feature align with the project's goals and architecture?
+- Is the request technically feasible with the current codebase?
+- Does it duplicate existing functionality?
+- Would it introduce breaking changes or security risks?
+- Is there enough detail to implement it?
+
+**Verdict options:**
+
+1. ✅ **VIABLE** — Makes sense, enough detail to implement → Go to Level 2
+2. ❓ **NEEDS MORE INFO** — Good idea but insufficient detail → Post comment asking for specifics
+3. ❌ **NOT VIABLE** — Doesn't fit the project or is fundamentally flawed → Post comment explaining why, close issue
+
+#### Level 2 — Implementation (only for VIABLE features)
+
+1. **Research** — Read all related source files to understand the current architecture
+2. **Design** — Plan the implementation, filling gaps in the original request
+3. **Create branch** — Name format: `feat/issue-<NUMBER>-<short-slug>`
+   ```bash
+   git checkout main
+   git pull origin main
+   git checkout -b feat/issue-<NUMBER>-<short-slug>
+   ```
+4. **Implement** — Build the complete solution following project patterns
+5. **Build** — Run `npm run build` to verify compilation
+6. **Commit** — Commit with: `feat: <description> (#<NUMBER>)`
+7. **Push** — Push the branch: `git push -u origin feat/issue-<NUMBER>-<short-slug>`
+8. **Return to main** — `git checkout main`
+
+### 4. Respond to Authors
+
+#### For VIABLE (implemented) features:
+
+// turbo
+Post a comment on the issue:
+
+````markdown
+## ✅ Feature Implemented!
+
+Hi @<author>! We've analyzed your request and implemented it on a dedicated branch.
+
+**Branch:** `feat/issue-<NUMBER>-<short-slug>`
+
+### What was implemented:
+
+- <bullet list of what was done>
+
+### How to try it:
+
+```bash
+git fetch origin
+git checkout feat/issue-<NUMBER>-<short-slug>
+npm install && npm run dev
+```
+````
+
+### Next steps:
+
+1. **Test it** — Please verify it works as you expected
+2. **Want to improve it?** — You're welcome to contribute! Just:
+   ```bash
+   git checkout feat/issue-<NUMBER>-<short-slug>
+   # Make your improvements
+   git add -A && git commit -m "improve: <your changes>"
+   git push origin feat/issue-<NUMBER>-<short-slug>
+   ```
+   Then open a Pull Request from your branch to `main` 🎉
+3. **Not quite right?** — Let us know in this issue what needs to change
+
+Looking forward to your feedback! 🚀
+
+```
+
+#### For NEEDS MORE INFO:
+// turbo
+Post a comment asking for specific missing details needed to implement, e.g.:
+- "Could you describe the exact behavior when X happens?"
+- "Which API endpoints should be affected?"
+- "Should this apply to all providers or only specific ones?"
+
+Add the context of WHY you need each piece of information.
+
+#### For NOT VIABLE:
+// turbo
+Post a polite comment explaining why the feature doesn't fit at this time:
+- If the idea is decent but timing is wrong: "This is an interesting idea, but it doesn't align with our current priorities. Feel free to open a new issue with more details if you'd like us to reconsider."
+- If fundamentally flawed: Explain the technical or architectural reasons why it won't work, suggest alternatives if possible.
+- Close the issue after posting the comment.
+
+### 5. Summary Report
+Present a summary report to the user via `notify_user`:
+
+| Issue | Title | Verdict | Branch / Action |
+|---|---|---|---|
+| #N | Title | ✅ Implemented | `feat/issue-N-slug` |
+| #N | Title | ❓ Needs Info | Comment posted |
+| #N | Title | ❌ Not Viable | Closed with explanation |
+```

.agents/workflows/resolve-issues.md

@@ -0,0 +1,100 @@
+---
+description: Fetch all open GitHub issues, analyze bugs, resolve what's possible, triage the rest, then commit and release
+---
+
+# /resolve-issues — Automated Issue Resolution Workflow
+
+## Overview
+
+This workflow fetches all open issues from the project's GitHub repository, classifies them, analyzes bugs, resolves what can be fixed, triages issues with insufficient information, and generates a release with all fixes.
+
+## Steps
+
+### 1. Identify the GitHub Repository
+
+// turbo
+
+- Run: `git -C <project_root> remote get-url origin` to extract the owner/repo
+- Parse the owner and repo name from the URL
+
+### 2. Fetch All Open Issues
+
+// turbo
+
+- Run: `gh issue list --repo <owner>/<repo> --state open --limit 100 --json number,title,labels,body,comments,createdAt,author`
+- Parse the JSON output to get a list of all open issues
+- Sort by oldest first (FIFO)
+
+### 3. Classify Each Issue
+
+For each issue, determine its type:
+
+- **Bug** — Has `bug` label, or body contains error messages, stack traces, "doesn't work", "broken", "crash", "error"
+- **Feature Request** — Has `enhancement`/`feature` label, or body describes new functionality
+- **Question** — Has `question` label, or is asking "how to" something
+- **Other** — Anything else
+
+Focus ONLY on **Bugs** for resolution. Feature requests and questions should be skipped with a note in the final report.
+
+### 4. Analyze Each Bug — For each bug issue:
+
+#### 4a. Check Information Sufficiency
+
+Verify the issue contains enough information to reproduce and fix:
+
+- [ ] Clear description of the problem
+- [ ] Steps to reproduce
+- [ ] Error messages or logs
+- [ ] Expected vs actual behavior
+
+#### 4b. If Information Is INSUFFICIENT
+
+Call the `/issue-triage` workflow (located at `~/.gemini/antigravity/global_workflows/issue-triage.md`):
+// turbo
+
+- Post a comment asking for more details using `gh issue comment`
+- Add `needs-info` label using `gh issue edit`
+- Mark this issue as **DEFERRED** and move to the next one
+
+#### 4c. If Information Is SUFFICIENT
+
+Proceed with resolution:
+
+1. **Research** — Search the codebase for files related to the issue
+2. **Root Cause** — Identify the root cause by reading the relevant source files
+3. **Implement Fix** — Apply the fix following existing code patterns and conventions
+4. **Test** — Build the project and run tests to verify the fix
+5. **Commit** — Commit with message format: `fix: <description> (#<issue_number>)`
+
+### 5. Commit All Fixes
+
+After processing all issues:
+
+- Ensure all fixes are committed with proper issue references
+- Each fix should be its own commit for clean git history
+
+### 6. Close Resolved Issues
+
+For each successfully fixed issue:
+// turbo
+
+- Close with a comment: `gh issue close <NUMBER> --repo <owner>/<repo> --comment "Fixed in <commit_hash>. The fix will be included in the next release."`
+
+### 7. Generate Report
+
+Present a summary report to the user via `notify_user`:
+
+| Issue | Title | Status        | Action                      |
+| ----- | ----- | ------------- | --------------------------- |
+| #N    | Title | ✅ Fixed      | Commit hash                 |
+| #N    | Title | ❓ Needs Info | Triage comment posted       |
+| #N    | Title | ⏭️ Skipped    | Feature request / not a bug |
+
+### 8. Update Docs & Release
+
+If any fixes were committed:
+
+1. Run the `/update-docs` workflow (at `~/.gemini/antigravity/global_workflows/update-docs.md`) to update CHANGELOG and README
+2. Run the `/generate-release` workflow (at `.agents/workflows/generate-release.md`) to bump version, tag, and publish
+
+If NO fixes were committed, skip this step and just present the report.

.agents/workflows/review-prs.md

@@ -0,0 +1,96 @@
+---
+description: Analyze open Pull Requests from the project's GitHub repository, generate a critical report, and optionally implement approved changes
+---
+
+# /review-prs — PR Review & Analysis Workflow
+
+## Overview
+
+This workflow fetches all open PRs from the project's GitHub repository, performs a critical analysis of each one, generates a detailed report, and waits for user approval before proceeding with implementation.
+
+## Steps
+
+### 1. Identify the GitHub Repository
+
+- Read `package.json` to get the repository URL, or use the git remote origin URL
+  // turbo
+- Run: `git -C <project_root> remote get-url origin` to extract the owner/repo
+
+### 2. Fetch Open Pull Requests
+
+- Navigate to `https://github.com/<owner>/<repo>/pulls` and scrape all open PRs
+- For each open PR, collect:
+  - PR number, title, author, branch, number of commits, date
+  - PR description/body
+  - Files changed (diff)
+  - Existing review comments (from bots or humans)
+
+### 3. Analyze Each PR — For each open PR, perform the following analysis:
+
+#### 3a. Feature Assessment
+
+- **Does it make sense?** Evaluate if the feature fills a real gap or solves a valid problem
+- **Alignment** — Check if it aligns with the project's architecture and roadmap
+- **Complexity** — Assess if the scope is reasonable or if it should be split
+
+#### 3b. Code Quality Review
+
+- Check for code duplication
+- Evaluate error handling patterns (consistent with existing codebase?)
+- Check naming conventions and code style
+- Verify TypeScript types (any `any` usage, missing types?)
+
+#### 3c. Security Review
+
+- Check for missing authentication/authorization on new endpoints
+- Check for injection vulnerabilities (URL params, SQL, XSS)
+- Verify input validation on all user-controlled data
+- Check for hardcoded secrets or credentials
+
+#### 3d. Architecture Review
+
+- Does the change follow existing patterns?
+- Are there any breaking changes to public APIs?
+- Is the database schema affected? Migration needed?
+- Impact on performance (N+1 queries, missing indexes?)
+
+#### 3e. Test Coverage
+
+- Does the PR include tests?
+- Are edge cases covered?
+- Would existing tests break?
+
+### 4. Generate Report — Create a markdown report for each PR including:
+
+- **PR Summary** — What it does, files affected, commit count
+- **Improvements/Benefits** — Numbered list with impact level (HIGH/MEDIUM/LOW)
+- **Risks & Issues** — Categorized as CRITICAL / IMPORTANT / MINOR
+- **Scoring Table** — Rate across: Feature Relevance, Code Quality, Security, Robustness, Tests
+- **Verdict** — Ready to merge? With mandatory vs optional fixes
+- **Next Steps** — What will happen if approved
+
+### 5. Present to User
+
+- Show the report via `notify_user` with `BlockedOnUser: true`
+- Wait for user decision:
+  - **Approved** → Proceed to step 6
+  - **Approved with changes** → Implement the fixes and corrections before merging
+  - **Rejected** → Close the PR or leave a review comment
+
+### 6. Implementation (if approved)
+
+- Checkout the PR branch or apply changes locally
+- Implement any required fixes identified in the analysis
+- Run the project's test suite to verify nothing breaks
+  // turbo
+- Run: `npm test` or equivalent test command
+- Build the project to verify compilation
+  // turbo
+- Run: `npm run build` or equivalent build command
+- If all checks pass, prepare the merge
+
+### 7. Post-Merge (if applicable)
+
+- Update CHANGELOG.md with the new feature
+- Consider version bump if warranted
+- Follow the `/generate-release` workflow if a release is needed

.env.example

@@ -44,6 +44,9 @@ REQUIRE_API_KEY=false
 BASE_URL=http://localhost:20128
 CLOUD_URL=
 # Backward-compatible/public variables:
+# NEXT_PUBLIC_BASE_URL is also used as the OAuth redirect_uri origin when running behind a
+# reverse proxy (e.g., nginx). Set this to your public-facing URL so OAuth callbacks work.
+# Example: NEXT_PUBLIC_BASE_URL=https://omniroute.example.com
 NEXT_PUBLIC_BASE_URL=http://localhost:20128
 NEXT_PUBLIC_CLOUD_URL=
 
@@ -79,17 +82,45 @@ NEXT_PUBLIC_ENABLE_SOCKS5_PROXY=true
 # Provider OAuth Credentials (optional — override hardcoded defaults)
 # These can also be set via data/provider-credentials.json
 # CLAUDE_OAUTH_CLIENT_ID=
-# GEMINI_OAUTH_CLIENT_ID=
-# GEMINI_OAUTH_CLIENT_SECRET=
+
+# ─────────────────────────────────────────────────────────────────────────────
+# ⚠️  GOOGLE OAUTH (Antigravity, Gemini CLI) — IMPORTANT FOR REMOTE SERVERS
+# ─────────────────────────────────────────────────────────────────────────────
+# The built-in Google OAuth credentials ONLY work when OmniRoute runs on
+# localhost (127.0.0.1 / local network). They are registered with
+# redirect_uri = http://localhost:PORT/callback and Google will reject any
+# other redirect URI with: redirect_uri_mismatch.
+#
+# If you are hosting OmniRoute on a remote server (VPS, Docker, cloud), you
+# MUST register your own Google Cloud OAuth 2.0 credentials:
+#
+#   1. Go to https://console.cloud.google.com/apis/credentials
+#   2. Create an OAuth 2.0 Client ID (type: "Web application")
+#   3. Add your server URL as Authorized redirect URI:
+#        https://your-server.com/callback
+#   4. Copy the Client ID and Client Secret below.
+#
+# See the full tutorial in README.md → "OAuth em Servidor Remoto" section.
+#
+# Antigravity (Google Gemini Code Assist):
+# ANTIGRAVITY_OAUTH_CLIENT_ID=your-client-id.apps.googleusercontent.com
+# ANTIGRAVITY_OAUTH_CLIENT_SECRET=GOCSPX-your-secret
+ANTIGRAVITY_OAUTH_CLIENT_SECRET=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
+
+# Gemini CLI (Google AI):
+# GEMINI_OAUTH_CLIENT_ID=your-client-id.apps.googleusercontent.com
+# GEMINI_OAUTH_CLIENT_SECRET=GOCSPX-your-secret
 # GEMINI_CLI_OAUTH_CLIENT_ID=
-# GEMINI_CLI_OAUTH_CLIENT_SECRET=
+GEMINI_OAUTH_CLIENT_SECRET=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
+GEMINI_CLI_OAUTH_CLIENT_SECRET=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
+# ─────────────────────────────────────────────────────────────────────────────
+
+# CLAUDE_OAUTH_CLIENT_ID=
 # CODEX_OAUTH_CLIENT_ID=
 # CODEX_OAUTH_CLIENT_SECRET=
 # QWEN_OAUTH_CLIENT_ID=
 # IFLOW_OAUTH_CLIENT_ID=
-# IFLOW_OAUTH_CLIENT_SECRET=
-# ANTIGRAVITY_OAUTH_CLIENT_ID=
-# ANTIGRAVITY_OAUTH_CLIENT_SECRET=
+IFLOW_OAUTH_CLIENT_SECRET=4Z3YjXycVsQvyGF1etiNlIBB4RsqSDtW
 
 # API Key Providers (Phase 1 + Phase 4)
 # Add via Dashboard → Providers → Add API Key, or set here
@@ -118,3 +149,7 @@ NEXT_PUBLIC_ENABLE_SOCKS5_PROXY=true
 # Logging
 # LOG_LEVEL=info
 # LOG_FORMAT=text
+LOG_TO_FILE=true
+# LOG_FILE_PATH=logs/application/app.log
+# LOG_MAX_FILE_SIZE=50M
+# LOG_RETENTION_DAYS=7

.github/workflows/ci.yml

@@ -36,7 +36,8 @@ jobs:
       - name: Dependency audit
         run: npm audit --audit-level=high --omit=dev
       - name: Check for known vulnerabilities
-        run: npx is-my-node-vulnerable || true
+        run: npx is-my-node-vulnerable
+        continue-on-error: true
 
   build:
     name: Build
@@ -108,3 +109,39 @@ jobs:
       - run: npx playwright install --with-deps chromium
       - run: npm run build
       - run: npm run test:e2e
+
+  test-integration:
+    name: Integration Tests
+    runs-on: ubuntu-latest
+    needs: build
+    env:
+      JWT_SECRET: ci-test-secret-with-sufficient-length-for-validation
+      API_KEY_SECRET: ci-test-api-key-secret-long
+      INITIAL_PASSWORD: ci-test-password-for-integration
+      DATA_DIR: /tmp/omniroute-ci
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 22
+          cache: npm
+      - run: npm ci
+      - run: npm run test:integration
+        continue-on-error: true
+
+  test-security:
+    name: Security Tests
+    runs-on: ubuntu-latest
+    needs: build
+    env:
+      JWT_SECRET: ci-test-secret-with-sufficient-length-for-validation
+      API_KEY_SECRET: ci-test-api-key-secret-long
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 22
+          cache: npm
+      - run: npm ci
+      - run: npm run test:security
+        continue-on-error: true

.github/workflows/codex-review.yml

@@ -1,22 +1,22 @@
-name: Codex PR Review
+# name: Codex PR Review
 
-on:
-  pull_request:
-    types: [opened, synchronize]
+# on:
+#   pull_request:
+#     types: [opened, synchronize]
 
-jobs:
-  request-codex-review:
-    runs-on: ubuntu-latest
-    permissions:
-      pull-requests: write
-    steps:
-      - name: Request Codex Review
-        uses: actions/github-script@v8
-        with:
-          script: |
-            await github.rest.issues.createComment({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              issue_number: context.payload.pull_request.number,
-              body: '@codex review'
-            });
+# jobs:
+#   request-codex-review:
+#     runs-on: ubuntu-latest
+#     permissions:
+#       pull-requests: write
+#     steps:
+#       - name: Request Codex Review
+#         uses: actions/github-script@v8
+#         with:
+#           script: |
+#             await github.rest.issues.createComment({
+#               owner: context.repo.owner,
+#               repo: context.repo.repo,
+#               issue_number: context.payload.pull_request.number,
+#               body: '@codex review'
+#             });

.github/workflows/deploy-vps.yml

@@ -0,0 +1,44 @@
+name: Deploy to VPS
+
+on:
+  workflow_run:
+    workflows: ["Publish to Docker Hub"]
+    types: [completed]
+  workflow_dispatch:
+
+jobs:
+  deploy:
+    if: ${{ github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success' }}
+    name: Deploy OmniRoute to VPS
+    runs-on: ubuntu-latest
+    steps:
+      - name: Install Tailscale
+        uses: tailscale/github-action@v3
+        with:
+          oauth-client-id: ""
+          oauth-secret: ""
+          tags: tag:ci-deploy
+        continue-on-error: true
+
+      - name: Deploy via SSH
+        uses: appleboy/ssh-action@v1
+        with:
+          host: ${{ secrets.VPS_HOST }}
+          username: ${{ secrets.VPS_USER }}
+          key: ${{ secrets.VPS_SSH_KEY }}
+          port: 22
+          timeout: 30s
+          script: |
+            echo "=== Updating OmniRoute ==="
+            npm install -g omniroute@latest 2>&1
+            INSTALLED_VERSION=$(omniroute --version 2>/dev/null || echo "unknown")
+            echo "Installed version: $INSTALLED_VERSION"
+
+            echo "=== Restarting PM2 ==="
+            pm2 restart omniroute || pm2 start omniroute --name omniroute -- --port 20128
+            pm2 save
+
+            echo "=== Health Check ==="
+            sleep 3
+            curl -sf http://localhost:20128/api/settings > /dev/null && echo "✅ OmniRoute is healthy" || echo "❌ Health check failed"
+            echo "=== Deploy complete ==="

.github/workflows/docker-publish.yml

@@ -8,9 +8,65 @@ permissions:
   contents: read
 
 jobs:
-  docker:
-    name: Build & Push Docker Image
+  build:
+    name: Build (${{ matrix.platform }})
+    runs-on: ${{ matrix.runner }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - platform: linux/amd64
+            platform_pair: linux-amd64
+            runner: ubuntu-latest
+          - platform: linux/arm64
+            platform_pair: linux-arm64
+            runner: ubuntu-24.04-arm
+    env:
+      IMAGE_NAME: diegosouzapw/omniroute
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build and push by digest
+        id: build
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          target: runner-base
+          platforms: ${{ matrix.platform }}
+          outputs: type=image,name=${{ env.IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=true
+          cache-from: type=gha,scope=omniroute-runner-base-${{ matrix.platform_pair }}
+          cache-to: type=gha,mode=max,scope=omniroute-runner-base-${{ matrix.platform_pair }}
+
+      - name: Export digest
+        run: |
+          mkdir -p "${{ runner.temp }}/digests"
+          digest="${{ steps.build.outputs.digest }}"
+          touch "${{ runner.temp }}/digests/${digest#sha256:}"
+
+      - name: Upload digest
+        uses: actions/upload-artifact@v4
+        with:
+          name: digests-${{ matrix.platform_pair }}
+          path: ${{ runner.temp }}/digests/*
+          if-no-files-found: error
+          retention-days: 1
+
+  merge:
+    name: Merge manifest and publish tags
     runs-on: ubuntu-latest
+    needs: build
+    env:
+      IMAGE_NAME: diegosouzapw/omniroute
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -23,8 +79,12 @@ jobs:
           echo "version=$VERSION" >> "$GITHUB_OUTPUT"
           echo "Publishing Docker image version: $VERSION"
 
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+      - name: Download digests
+        uses: actions/download-artifact@v4
+        with:
+          path: ${{ runner.temp }}/digests
+          pattern: digests-*
+          merge-multiple: true
 
       - name: Login to Docker Hub
         uses: docker/login-action@v3
@@ -32,18 +92,20 @@ jobs:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
-      - name: Build and push
-        uses: docker/build-push-action@v6
-        with:
-          context: .
-          target: runner-base
-          push: true
-          tags: |
-            diegosouzapw/omniroute:${{ steps.version.outputs.version }}
-            diegosouzapw/omniroute:latest
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
-          platforms: linux/amd64
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Create manifest list and push
+        working-directory: ${{ runner.temp }}/digests
+        run: |
+          docker buildx imagetools create \
+            -t "${{ env.IMAGE_NAME }}:${{ steps.version.outputs.version }}" \
+            -t "${{ env.IMAGE_NAME }}:latest" \
+            $(printf '${{ env.IMAGE_NAME }}@sha256:%s ' *)
+
+      - name: Inspect image
+        run: |
+          docker buildx imagetools inspect "${{ env.IMAGE_NAME }}:${{ steps.version.outputs.version }}"
 
       - name: Update Docker Hub description
         uses: peter-evans/dockerhub-description@v5

.gitignore

@@ -71,6 +71,9 @@ docs/*
 !docs/planning/
 !docs/improvement-plans/
 !docs/api/
+!docs/VM_DEPLOYMENT_GUIDE.md
+!docs/FEATURES.md
+!docs/screenshots/
 
 # open-sse tests
 open-sse/test/*
@@ -88,3 +91,9 @@ omnirouteSite/
 
 # Security Analysis (standalone project with own git)
 security-analysis/
+
+# Deploy workflow (contains sensitive VPS credentials)
+.agent/workflows/deploy.md
+clipr/
+app.log
+*.tgz

CHANGELOG.md

@@ -7,196 +7,690 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ---
 
-## [0.8.5] — 2026-02-17
+## [1.4.10] — 2026-02-25
 
-### Added
+> ### 🔒 Proxy Visibility + Bug Fixes
+>
+> Color-coded proxy badges, provider-level proxy configuration, CLI tools page fix, and EACCES fix for restricted environments.
 
-- 🔒 **TLS fingerprint spoofing** — Implement browser-like TLS fingerprinting via `wreq-js` to bypass bot detection on providers that enforce TLS client fingerprint checks (`3dd0cc1`, PR #52)
-- 💾 **SQLite proxy log persistence** — Proxy request/response logs now persist to SQLite database, surviving server restarts. Previously, logs were lost on restart (`f1664fe`, PR #53)
-- 📋 **Unified test logging** — Shared `Logger` + Proxy logging infrastructure for all provider connection test flows. Consistent log formatting across batch and individual tests (`bce302e`, PR #55)
+### ✨ New Features
 
-### Refactored
+- **Color-Coded Proxy Badges** — Each provider connection now shows its proxy status with color-coded badges: 🟢 green (global proxy), 🟡 amber (provider-level proxy), 🔵 blue (per-connection proxy). Badge always displays the proxy IP/host
+- **Provider-Level Proxy Button** — New "Provider Proxy" button in the Connections header of each provider detail page. Allows configuring a proxy that applies to all connections of that provider
+- **Proxy IP Display** — The proxy badge now always shows the proxy host/IP address for quick identification
 
-- 🔷 **Full TypeScript migration — `src/`** — Migrated the entire `src/` directory from JavaScript to TypeScript. All `.js`/`.jsx` files converted to `.ts`/`.tsx` with proper type annotations across API routes, lib modules, components, services, stores, domain layer, and shared utilities (`d0ca595`)
-  - **Wave 1**: Shared component interfaces + EventTarget fixes (`dfdd2a2`)
-  - **Wave 2**: Utils & services typed fields, Zustand stores, logger, sync scheduler (`89dd107`, `b2907cd`)
-  - **Wave 3a**: Lib layer, DB, compliance, domain layer typed (`9e13fe2`)
-  - **Wave 3b**: Usage, CLI runtime, SSE auth/logger typed (`a291abd`)
-  - **Wave 3c**: OAuth services + server utils typed (`d62cf8d`)
-  - **Wave 4a**: 7 API routes — providers, cli-tools, oauth (`7cdb923`)
-  - **Wave 4b**: 7 more API routes — providers, test, usage, nodes (`5592c2e`)
-  - **Wave 4c**: 8 files — components, SSE handlers, services (`d8ce9dc`)
-  - **Dashboard hardening**: Resolve all TypeScript errors across dashboard pages (`7a463a3`, PR #61)
-- 🔷 **Full TypeScript migration — `open-sse/`** — Migrated all 94 `.js` files in the SSE routing engine to TypeScript (PR #62)
-  - **Phase 1**: Rename all 94 `.js` → `.ts` files (`256e443`)
-  - **Phase 6**: Reduce `@ts-ignore` from 231 → 186 with targeted fixes (`6a54b84`)
-  - **Phase 7**: Eliminate ALL `@ts-ignore` annotations (186 → 0) and ALL TypeScript errors (237 → 0) — zero `@ts-ignore`, zero errors (`7b37a3c`)
-  - Typing strategies: `Record<string, any>` for dynamic objects, optional function params, `as any` casts for custom Error/Array properties, `declare var EdgeRuntime` for edge compatibility, proper `fs`/`path` imports
+### 🐛 Bug Fixes
 
-### Fixed
-
-- 🐛 **Qwen token refresh** — Detect `invalid_request` as unrecoverable error and switch broken test endpoints to `checkExpiry` method instead of failing silently (`1e0ffbc`, PR #60)
-- 🐛 **VPS batch test compatibility** — Eliminate HTTP self-calls in batch provider connection tests for VPS environments where localhost is unreachable (`a3bbbb5`, PR #54)
-- 🐛 **E2E test assertions** — Correct API endpoints and response format assertions in end-to-end tests (`92b5e66`)
-- 🐛 **CI coverage thresholds** — Lower coverage thresholds, use production server for E2E, block ESLint major upgrades from breaking CI (`3ca4b6b`, PR #51)
-
-### Changed
-
-- 📖 **Documentation update** — Updated all documentation to reflect JS → TS migration, corrected file extensions and import paths (`7ff8aa2`)
-- ⬆️ **CI/CD** — Bump `actions/checkout` v4 → v6, `actions/setup-node` v4 → v6, `peter-evans/dockerhub-description` v4 → v5
-
-### Dependencies
-
-- ⬆️ `undici` 7.21.0 → 7.22.0 (production)
-- ⬆️ `actions/checkout` 4 → 6
-- ⬆️ `actions/setup-node` 4 → 6
-- ⬆️ `peter-evans/dockerhub-description` 4 → 5
-- 🚫 `eslint` 10.0.0 blocked — major version incompatible with `eslint-config-next`
+- **CLI Tools Page Stuck in Loading** — Fixed the `/api/cli-tools/status` endpoint hanging indefinitely when binary checks stall on VPS. Added 5s server-side timeout per tool and 8s client-side AbortController timeout (#cli-tools-hang)
+- **EACCES on Restricted Home Directories** — Fixed crash when `~/.omniroute` directory cannot be created due to permission issues. Now gracefully warns and suggests using the `DATA_DIR` environment variable (#133)
 
 ---
 
-## [0.8.0] — 2026-02-16
+> ### 🌐 Full Internationalization (i18n) + Multi-Account Fix
+>
+> Complete dashboard i18n migration with next-intl, supporting English and Portuguese (Brazil). Fixes production build issues and enables multiple Codex accounts from the same workspace.
 
-### Added
+### ✨ New Features
 
-- 🌐 **Official website** — [omniroute.online](https://omniroute.online) live with static site on Akamai VM + Cloudflare proxy
-- 🛡️ **Comprehensive SECURITY.md** — Full codebase audit documenting 10+ security features (AES-256-GCM, prompt injection guard, PII redaction, circuit breaker, etc.)
-- 📖 **Documentation tracking** — `USER_GUIDE.md`, `API_REFERENCE.md`, `TROUBLESHOOTING.md` now tracked in git
-- 🏷️ **Website badge** — Official website badge and links in README, npm, and Docker Hub
-- 🔗 **36+ providers** — Updated provider count across documentation
+- **Full Dashboard Internationalization** — Complete i18n migration of 21+ pages and components using `next-intl`. Every dashboard string is now translatable with full EN and PT-BR support. Includes language selector (globe icon) in the header for real-time language switching
+- **Portuguese (Brazil) Translation** — Complete `pt-BR.json` translation file with 500+ keys covering all pages: Home, Providers, Settings, Combos, Analytics, Costs, Logs, Health, CLI Tools, Endpoint, API Manager, and Onboarding
+- **Language Selector Component** — New `LanguageSelector` component in the header with flag icons and dropdown for switching between 🇺🇸 English and 🇧🇷 Português
 
-### Changed
+### 🐛 Bug Fixes
 
-- 📦 **npm homepage** — Points to `omniroute.online` instead of GitHub
-- 🐳 **Docker OCI labels** — Added `org.opencontainers.image.url` for Docker Hub
-- 🔒 **Security policy** — Updated supported versions, replaced email with GitHub Security Advisories
+- **Multiple Codex Accounts from Same Workspace** — Fixed deduplication logic in `createProviderConnection` that prevented adding multiple OpenAI Pro Business accounts from the same Team workspace. Now uses compound check (workspaceId + email) instead of workspaceId-only, allowing separate connections per user
+- **Production Build — Crypto Import** — Fixed `instrumentation.ts` using `eval('require')('crypto')` to bypass webpack's static analysis that blocked the Node.js crypto module in the bundled instrumentation file
+- **Production Build — Translation Scope** — Fixed sub-components `ProviderOverviewCard` and `ProviderModelsModal` in `HomePageClient.tsx` that referenced parent-scope translation hooks. Each sub-component now has its own `useTranslations()` call
+- **Production Build — app/ Directory Conflict** — Resolved Next.js 16 confusing the production `app/` directory (server build output) with the `src/app/` app router directory, which caused "missing root layout" build failures
+
+### 📄 i18n Pages Migrated
+
+Home, Endpoint, API Manager, Providers (list + detail + new), Combos, Logs, Costs, Analytics, Health, CLI Tools, Settings (General, Security, Routing, Session, IP Filter, Compliance, Fallback Chains, Thinking Budget, Policies, Pricing, Resilience, Advanced), Onboarding Wizard, Audit Log, Usage
 
 ---
 
-## [0.7.0] — 2026-02-16
+## [1.4.7] — 2026-02-25
 
-### Added
+> ### 🐛 Bugfix — Antigravity Model Prefix & Version Sync
+>
+> Fixes model name sent to Antigravity upstream API containing `antigravity/` prefix, causing 400 errors for non-opus models. Also syncs package-lock.json version.
 
-- 🐳 **Docker Hub public image** — `diegosouzapw/omniroute` available on [Docker Hub](https://hub.docker.com/r/diegosouzapw/omniroute) with `latest` and versioned tags
-- 🔄 **Docker CI/CD** — GitHub Actions workflow (`docker-publish.yml`) auto-builds and pushes Docker image on every release
-- ☁️ **Akamai VM deployment** — Nanode 1GB instance created for remote hosting
-- 🎯 **Provider model filtering** — Filter model suggestions by selected provider in Translator and Chat Tester
-- 🔌 **CLI status badges** — Extract `CliStatusBadge` component; status visible on collapsed tool cards
-- ☁️ **Cloud connection UX** — GET status endpoint, toast feedback, and sidebar indicator for cloud sync
-- 🔐 **OAuth provider secrets** — Default cloud URL and OAuth provider secrets set via environment variables
-- ⚡ **Edge compatibility** — Replace `uuid` package with native `crypto.randomUUID()` for Cloudflare Workers compatibility
+### 🐛 Bug Fixes
+
+- **Antigravity Model Prefix Stripping** — Model names sent to the Antigravity upstream API (Google Cloud Code) now have any `provider/` prefix defensively stripped. Previously, models like `antigravity/gemini-3-flash` were sent with the prefix intact, causing 400 errors from the upstream API. Only `claude-opus-4-6-thinking` worked because its routing path differed. Fix applied in 3 locations: `antigravity.ts` executor, and both `wrapInCloudCodeEnvelope` and `wrapInCloudCodeEnvelopeForClaude` in the translator
+- **Package-lock.json Version Sync** — Fixed `package-lock.json` being stuck at `1.4.3` while `package.json` was at `1.4.6`, which prevented npm from publishing the correct version and caused the VPS deploy to stay on the old version
 
 ---
 
-## [0.6.0] — 2026-02-16
+## [1.4.6] — 2026-02-25
 
-### Added
+> ### ✨ Community Release — Security Fix, Multi-Platform Docker, Model Updates & Plus Tier
+>
+> Enforces API key model restrictions across all endpoints, adds ARM64 Docker support, updates model registry for latest AI models, and introduces Plus tier in ProviderLimits.
 
-- 💰 **Costs & Budget page** — Dedicated dashboard page for cost tracking and budget management
-- 📊 **Provider metrics display** — Show per-provider usage metrics and statistics
-- 📥 **Model import for passthrough providers** — Import models from API-compatible providers (Deepgram, AssemblyAI, NanoBanana)
-- 🎨 **App icon redesign** — New network node graph icon with updated color scheme
+### 🔒 Security
+
+- **API Key Model Restrictions Enforced** — `isModelAllowedForKey()` was never called, allowing API keys with `allowedModels` restrictions to access any model. Created centralized `enforceApiKeyPolicy()` middleware and wired it into all `/v1/*` endpoints (chat, embeddings, images, audio, moderations, rerank). Supports exact match, prefix match (`openai/*`), and wildcard patterns ([#130](https://github.com/diegosouzapw/OmniRoute/issues/130), [PR #131](https://github.com/diegosouzapw/OmniRoute/pull/131) by [@ersintarhan](https://github.com/ersintarhan))
+- **ApiKeyMetadata Type Safety** — Replaced `any` types with proper `ApiKeyMetadata` interface in the policy middleware. Added error logging in catch blocks for metadata fetch and budget check failures
+
+### ✨ New Features
+
+- **Docker Multi-Platform Builds** — Restructured Docker CI workflow to support both `linux/amd64` and `linux/arm64` using native runners and digest-based manifest merging. ARM64 users (Apple Silicon, AWS Graviton, Raspberry Pi) can now run OmniRoute natively ([PR #127](https://github.com/diegosouzapw/OmniRoute/pull/127) by [@npmSteven](https://github.com/npmSteven))
+- **Plus Tier in ProviderLimits** — Added "Plus" as a separate category in the ProviderLimits dashboard, distinguishing Plus/Paid plans from Pro plans with proper ranking and filtering ([PR #126](https://github.com/diegosouzapw/OmniRoute/pull/126) by [@nyatoru](https://github.com/nyatoru))
+
+### 🔧 Improvements
+
+- **Model Registry Updates** — Updated provider registry, usage tracking, CLI tools config, and pricing for latest AI models: added Claude Sonnet 4.6, Gemini 3.1 Pro (High/Low), GPT OSS 120B Medium; removed deprecated Claude 4.5 variants and Gemini 2.5 Flash ([PR #128](https://github.com/diegosouzapw/OmniRoute/pull/128) by [@nyatoru](https://github.com/nyatoru))
+- **Model ID Consistency** — Fixed `claude-sonnet-4-6-thinking` → `claude-sonnet-4-6` mismatch in `importantModels` to match the provider registry
 
 ---
 
-## [0.5.0] — 2026-02-15
+## [1.4.5] — 2026-02-24
 
-### Added
+> ### 🐛 Bugfix Release — Claude Code OAuth & OAuth Proxy Routing
+>
+> Fixes Claude Code OAuth failures on remote deployments and routes all OAuth token exchanges through configured proxy.
 
-- 🧪 **LLM Evaluations (Evals)** — Golden set testing framework with 4 match strategies (`exact`, `contains`, `regex`, `custom`)
-- 🎲 **Advanced combo strategies** — `random`, `least-used`, and `cost-optimized` balancing strategies for combos
-- 📊 **API key usage in Evals** — Evals tab uses API key auth for real LLM calls through the proxy
-- 🏷️ **Model availability badge** — Visual indicator for model availability per provider
-- 🎨 **Landing page retheme** — Updated landing page design with new aesthetic
-- 🧩 **Shared UI component library** — Refactored dashboard with reusable component library
+### 🐛 Bug Fixes
 
-### Fixed
-
-- 🐛 Fix `TypeError` in `chat/completions` `ensureInitialized` call
+- **Claude Code OAuth** — Fixed `400 Bad Request` on remote deployments by using Anthropic's registered `redirect_uri` (`https://platform.claude.com/oauth/code/callback`) instead of the dynamic server URL. Added missing OAuth scopes (`user:sessions:claude_code`, `user:mcp_servers`) to match the official Claude CLI. Configurable via `CLAUDE_CODE_REDIRECT_URI` env var ([#124](https://github.com/diegosouzapw/OmniRoute/issues/124))
+- **OAuth Token Exchange Through Proxy** — OAuth token exchange during new connection setup now routes through the configured proxy (provider-level → global → direct), fixing `unsupported_country_region_territory` errors for region-restricted providers like OpenAI Codex ([#119](https://github.com/diegosouzapw/OmniRoute/issues/119))
 
 ---
 
-## [0.4.0] — 2026-02-15
+## [1.4.4] — 2026-02-24
 
-### Added
+> ### ✨ Feature Release — Custom Provider Models in /v1/models
+>
+> Compatible provider models are now saved to the customModels database, making them visible via `/v1/models` for all OpenAI-compatible clients.
 
-- 🧠 **LLM Gateway Intelligence** (Phase 9) — Smart routing, semantic caching, request idempotency, progress tracking
-- 📄 **Missing flows & pages** (Phase 8) — Error pages, UX components, telemetry dashboards
-- 🔧 **API & code quality** (Phase 7) — API restructuring, JSDoc documentation, code quality improvements
-- 📚 **Documentation restructuring** (Phase 10) — Component decomposition, docs cleanup
-- ✅ **26 action items** from critical analysis resolved
+### ✨ New Features
 
-### Changed
+- **Custom Provider Model Persistence** — Compatible provider models (manual or imported) are now saved to the `customModels` database so they appear in `/v1/models` listing for clients like Cursor, Cline, Antigravity, and Claude Code ([PR #122](https://github.com/diegosouzapw/OmniRoute/pull/122) by [@nyatoru](https://github.com/nyatoru))
+- **Provider Models API** — New `/api/provider-models` endpoint (GET/POST/DELETE) for managing custom model entries with full authentication via `isAuthenticated`
+- **Unified Model Deletion** — New `handleDeleteModel` removes models from both alias configuration and `customModels` database, preventing orphaned entries
+- **Provider Node Prefix Resolution** — `getModelInfo` refactored to use provider node prefixes for accurate custom provider model resolution
 
-- ♻️ **Architecture refactor** (Phase 5-6) — Domain persistence, policy engine, OAuth extraction, proxy decoupling
+### 🔒 Security
 
-### Fixed
+- **Authentication on Provider Models API** — All `/api/provider-models` endpoints require API key or JWT session authentication via shared `isAuthenticated` utility
+- **URL Parameter Injection Fix** — Applied `encodeURIComponent` to all user-controlled URL parameters (`providerStorageAlias`, `providerId`) to prevent query string injection attacks
+- **Shared Auth Utility** — Authentication logic extracted to `@/shared/utils/apiAuth.ts`, eliminating code duplication across `/api/models/alias` and `/api/provider-models`
 
-- 🐛 Fix CI build and lint failures
-- 🐛 Fix ghost import in `chatHelpers.js` SSE handling
+### 🔧 Improvements
+
+- **Toast Notifications** — Replaced blocking `alert()` calls with non-blocking `notify.error`/`notify.success` toast notifications matching the project's notification system
+- **Transactional Save** — Model persistence is now transactional: database save must succeed before alias creation, preventing inconsistent state
+- **Consistent Error Handling** — All model operations (add, import, delete) now provide user-facing error/success feedback via toast notifications
+- **ComboFormModal Matching** — Improved provider node matching by ID or prefix for combo model selection
 
 ---
 
-## [0.3.0] — 2026-02-15
+## [1.4.3] — 2026-02-23
 
-### Added
+### 🐛 Bug Fix
 
-- ⚡ **Resilience system** — Exponential backoff, circuit breaker, anti-thundering herd mutex, Resilience UI settings page
-- 🖥️ **100% frontend API coverage** — 7 implementation batches covering all backend routes
-- 📊 **9 new API routes** — Budget, telemetry, compliance, tags, storage health, and more
-- 🧪 **Eval framework & compliance** — ADRs, accessibility, CLI specs, Playwright test specs (46 tasks)
-- 🏗️ **Pipeline integration** — 7 backend modules wired into request processing pipeline
-- 🔐 **Security hardening** — Phases 01–06 (input validation, CSRF, rate limiting, auth hardening)
-- 🤖 **Advanced features** — Phases 07–09 (domain extraction, error codes, request ID, fetch timeout)
-- 🔄 **Unrecoverable token handling** — Detect and mark connections as expired on fatal refresh errors
-
-### Changed
-
-- ♻️ Decompose `usageDb`, `handleSingleModelChat`, and UI components for maintainability
-- ⬇️ Downgrade ESLint v10 → v9 for `eslint-config-next` compatibility
+- **OAuth LAN Access** — Fixed OAuth flow for remote/LAN IP access (`192.168.x.x`). Previously, LAN IPs incorrectly used popup mode, leading to a broken redirect loop. Now defaults to manual callback URL input mode for non-localhost access
 
 ---
 
-## [0.2.0] — 2026-02-14
+## [1.4.2] — 2026-02-23
 
-### Added
+### 🐛 Bug Fix
 
-- 🛣️ **Advanced routing services** — Priority-based routing, global strategy configuration
-- 💰 **Cost analytics dashboard** — Token cost tracking and analytics visualization
-- 💎 **Pricing overhaul** — Comprehensive pricing data for all supported providers and models
-- 📦 **npm badge & CLI options** — npm version badge in README, CLI options table, automated release docs
+- **OAuth Token Refresh** — Fixed `client_secret is missing` error for Google-based OAuth providers (Antigravity, Gemini, Gemini CLI, iFlow). Desktop/CLI OAuth secrets are now hardcoded as defaults since Next.js inlined empty strings at build time.
 
 ---
 
-## [0.1.0] — 2026-02-14
+## [1.4.1] — 2026-02-23
 
-### Added
+### 🔧 Improvements
 
-- 🎉 **Initial OmniRoute release** — Rebranded from 9router with full feature set
-- 🔄 **28 AI providers** — OpenAI, Claude, Gemini, Copilot, DeepSeek, Groq, xAI, Mistral, Qwen, iFlow, and more
-- 🎯 **Smart fallback** — 3-tier auto-routing (Subscription → Cheap → Free)
-- 🔀 **Format translation** — Seamless OpenAI ↔ Claude ↔ Gemini format conversion
-- 👥 **Multi-account support** — Multiple accounts per provider with round-robin
-- 🔐 **OAuth 2.0 (PKCE)** — Automatic token management and refresh
-- 📊 **Usage tracking** — Real-time quota monitoring with reset countdown
-- 🎨 **Custom combos** — Create model combinations with fallback chains
-- ☁️ **Cloud sync** — Sync configuration across devices via Cloudflare Worker
-- 📖 **OpenAPI specification** — Full API documentation
-- 🛡️ **SOCKS5 proxy support** — Outbound proxy for upstream provider calls
-- 🔌 **New endpoints** — `/v1/rerank`, `/v1/audio/*`, `/v1/moderations`
-- 📦 **npm CLI package** — `npm install -g omniroute` with auto-launch
-- 🐳 **Docker support** — Multi-stage Dockerfile with `base` and `cli` profiles
-- 🔒 **Security policy** — `SECURITY.md` with vulnerability reporting guidelines
-- 🧪 **CI/CD pipeline** — GitHub Actions for lint, build, test, and npm publish
+- **Endpoint Page Cleanup** — Removed redundant API Key Management section from Endpoint page (now fully managed in the dedicated API Manager page)
+- **CI/CD** — Added `deploy-vps.yml` workflow for automatic VPS deployment on new releases
 
 ---
 
-[0.8.5]: https://github.com/diegosouzapw/OmniRoute/compare/v0.8.0...v0.8.5
-[0.8.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.7.0...v0.8.0
-[0.7.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.6.0...v0.7.0
-[0.6.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.5.0...v0.6.0
-[0.5.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.4.0...v0.5.0
-[0.4.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.3.0...v0.4.0
-[0.3.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.2.0...v0.3.0
-[0.2.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.1.0...v0.2.0
-[0.1.0]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v0.1.0
+## [1.4.0] — 2026-02-23
+
+> ### ✨ Feature Release — Dedicated API Key Manager with Model Permissions
+>
+> Community-contributed API Key Manager page with model-level access control, enhanced with usage statistics, key status indicators, and improved UX.
+
+### ✨ New Features
+
+- **Dedicated API Key Manager** — New `/dashboard/api-manager` page for managing API keys, extracted from the Endpoint page. Includes create, delete, and permissions management with a clean table UI ([PR #118](https://github.com/diegosouzapw/OmniRoute/pull/118) by [@nyatoru](https://github.com/nyatoru))
+- **Model-Level API Key Permissions** — Restrict API keys to specific models using `allowed_models` with wildcard pattern support (e.g., `openai/*`). Toggle between "Allow All" and "Restrict" modes with an intuitive provider-grouped model selector
+- **API Key Validation Cache** — 3-tier caching layer (validation, metadata, permission) reduces database hits on every request, with automatic cache invalidation on key changes
+- **Usage Statistics Per Key** — Each API key shows total request count and last used timestamp, with a stats summary dashboard (total keys, restricted keys, total requests, models available)
+- **Key Status Indicators** — Color-coded lock/unlock icons and copy buttons on each key row for quick identification of restricted vs unrestricted keys
+
+### 🔧 Improvements
+
+- **Endpoint Page Simplified** — API key management removed from Endpoint page and replaced with a prominent link to the API Manager
+- **Sidebar Navigation** — New "API Manager" entry with `vpn_key` icon in the sidebar
+- **Prepared Statements** — API key database operations now use cached prepared statements for better performance
+- **Input Validation** — XSS-safe sanitization and regex validation for key names; ID format validation for API calls
+
+---
+
+## [1.3.1] — 2026-02-23
+
+> ### 🐛 Bugfix Release — Proxy Connection Tests & Compatible Provider Display
+>
+> Fixes provider connection tests bypassing configured proxy and improves compatible provider display in the request logger.
+
+### 🐛 Bug Fixes
+
+- **Connection Tests Now Use Proxy** — Provider connection tests (`Test Connection` button) now route through the configured proxy (key → combo → provider → global → direct), matching the behavior of real API calls. Previously, `fetch()` was called directly, bypassing the proxy entirely ([#119](https://github.com/diegosouzapw/OmniRoute/issues/119))
+- **Compatible Provider Display in Logs** — OpenAI/Anthropic compatible providers now show friendly labels (`OAI-COMPAT`, `ANT-COMPAT`) instead of raw UUID-based IDs in the request logger's provider column, dropdown, and quick filters ([#113](https://github.com/diegosouzapw/OmniRoute/issues/113))
+
+### 🧪 Tests
+
+- **Connection Test Unit Tests** — 26 new test cases covering error classification logic, token expiry detection, and provider display label resolution
+
+---
+
+## [1.3.0] — 2026-02-23
+
+> ### ✨ Feature Release — iFlow Fix, Health Check Logs Toggle, Kilocode Models & Model Deduplication
+>
+> Community-driven release with iFlow HMAC-SHA256 signature support, health check log management, expanded Kilocode model list, and model deduplication on the dashboard.
+
+### ✨ New Features
+
+- **Hide Health Check Logs** — New toggle in Settings → Appearance to suppress verbose `[HealthCheck]` messages from the server console. Uses a 30-second cache to minimize database reads with request coalescing for concurrent calls ([PR #111](https://github.com/diegosouzapw/OmniRoute/pull/111) by [@nyatoru](https://github.com/nyatoru))
+- **Kilocode Custom Models Endpoint** — Added `modelsUrl` support in `RegistryEntry` for providers with non-standard model endpoints. Expanded Kilocode model list from 8 to 26 models including Qwen3, GPT-5, Claude 3 Haiku, Gemini 2.5, DeepSeek V3, Llama 4, and more ([PR #115](https://github.com/diegosouzapw/OmniRoute/pull/115) by [@benzntech](https://github.com/benzntech))
+
+### 🐛 Bug Fixes
+
+- **iFlow 406 Error** — Created dedicated `IFlowExecutor` with HMAC-SHA256 signature support (`session-id`, `x-iflow-timestamp`, `x-iflow-signature` headers). The iFlow provider was previously using the default executor which lacked the required signature headers, causing 406 errors ([#114](https://github.com/diegosouzapw/OmniRoute/issues/114))
+- **Duplicate Models in Endpoint Lists** — Filtered out parent models (`!m.parent`) from all model categorization and count logic on the Endpoint page. Provider modal lists also exclude duplicates ([PR #112](https://github.com/diegosouzapw/OmniRoute/pull/112) by [@nyatoru](https://github.com/nyatoru))
+
+### 🧪 Tests
+
+- **IFlowExecutor Unit Tests** — 11 new test cases covering HMAC-SHA256 signature generation, header building, URL construction, body passthrough, and executor registry integration
+
+---
+
+## [1.2.0] — 2026-02-22
+
+> ### ✨ Feature Release — Dashboard Session Auth for Models Endpoint
+>
+> Dashboard users can now access `/v1/models` via their existing session when API key auth is required.
+
+### ✨ New Features
+
+- **JWT Session Auth Fallback** — When `requireAuthForModels` is enabled, the `/v1/models` endpoint now accepts both API key (Bearer token) for external clients **and** the dashboard JWT session cookie (`auth_token`), allowing logged-in dashboard users to view models without needing an explicit API key ([PR #110](https://github.com/diegosouzapw/OmniRoute/pull/110) by [@nyatoru](https://github.com/nyatoru))
+
+### 🔧 Improvements
+
+- **401 instead of 404** — Authentication failures on `/v1/models` now return `401 Unauthorized` with a structured JSON error body (OpenAI-compatible format) instead of a generic `404 Not Found`, improving debuggability for API clients
+- **Simplified auth logic** — Refactored the JWT cookie verification to reuse the same pattern as `apiAuth.ts`, removing redundant same-origin detection (~60 lines) since the `sameSite:lax` + `httpOnly` cookie flags already provide equivalent CSRF protection
+
+---
+
+## [1.1.1] — 2026-02-22
+
+> ### 🐛 Bugfix Release — API Key Creation & Codex Team Plan Quotas
+>
+> Fixes API key creation crash when `API_KEY_SECRET` is not set and adds Code Review rate limit window to Codex quota display.
+
+### 🐛 Bug Fixes
+
+- **API Key Creation** — Added deterministic fallback for `API_KEY_SECRET` to prevent `crypto.createHmac` crash when the environment variable is not configured. Keys created without the secret are insecure (warned at startup) but the application no longer crashes ([#108](https://github.com/diegosouzapw/OmniRoute/issues/108))
+- **Codex Code Review Quota** — Added parsing of the third rate limit window (`code_review_rate_limit`) from the ChatGPT usage API, supporting Plus/Pro/Team plan differences. The dashboard now displays all three quota bars: Session (5h), Weekly, and Code Review ([#106](https://github.com/diegosouzapw/OmniRoute/issues/106))
+
+---
+
+## [1.1.0] — 2026-02-21
+
+> ### 🐛 Bugfix Release — OAuth Client Secret and Codex Business Quotas
+>
+> Fixes missing remote-server OAuth configurations and adds ChatGPT Business account quota monitoring.
+
+### 🐛 Bug Fixes
+
+- **OAuth Client Secret** — Omitted explicitly empty `client_secret` parameters to resolve token exchange connection rejection on remote servers missing environment variables for Antigravity, Gemini and iFlow ([#103](https://github.com/diegosouzapw/OmniRoute/issues/103))
+- **Codex Business Quotas** — Automatically fetches the appropriate ChatGPT workspace to unlock the 5-hour Business usage limits directly inside the Quota tab and mapped `BIZ` string variant perfectly ([#101](https://github.com/diegosouzapw/OmniRoute/issues/101))
+
+---
+
+## [1.0.10] — 2026-02-21
+
+> ### 🐛 Bugfix — Multi-Account Support for Qwen
+>
+> Solves the issue where adding a second Qwen account would overwrite the first one.
+
+### 🐛 Bug Fixes
+
+- **OAuth Accounts** — Extracted user email from the `id_token` using JWT decoding for Qwen and similar providers, allowing multiple accounts of the same provider to be authenticated simultaneously instead of triggering the fallback overwrite logic ([#99](https://github.com/diegosouzapw/OmniRoute/issues/99))
+
+---
+
+## [1.0.9] — 2026-02-21
+
+> ### 🐛 Hotfix — Settings Persistence
+>
+> Fixes blocked providers and API auth toggle not being saved after page reload.
+
+### 🐛 Bug Fixes
+
+- **Settings Persistence** — Added `requireAuthForModels` (boolean) and `blockedProviders` (string array) to the Zod validation schema, which was silently stripping these fields during PATCH requests, preventing them from being saved to the database
+
+---
+
+## [1.0.8] — 2026-02-21
+
+> ### 🔒 API Security & Windows Support
+>
+> Adds API Endpoint Protection for `/models`, Windows server startup fixes, and UI improvements.
+
+### ✨ New Features
+
+- **API Endpoint Protection (`/models`)** — New Security Tab settings to optionally require an API key for the `/v1/models` endpoint (returns 404 when unauthorized) and to selectively block specific providers from appearing in the models list ([#100](https://github.com/diegosouzapw/OmniRoute/issues/100), [#96](https://github.com/diegosouzapw/OmniRoute/issues/96))
+- **Interactive Provider UI** — Blocked Providers setting features an interactive chip selector with visual badges for all available AI providers
+
+### 🐛 Bug Fixes
+
+- **Windows Server Startup** — Fixed `ERR_INVALID_FILE_URL_PATH` crash on Windows by safely wrapping `import.meta.url` resolution with a fallback to `process.cwd()` for globally installed npm packages ([#98](https://github.com/diegosouzapw/OmniRoute/issues/98))
+- **Combo buttons visibility** — Fixed layout overlap and tight spacing for the Quick Action buttons (Clone / Delete / Test) on the Combos page on narrower screens ([#95](https://github.com/diegosouzapw/OmniRoute/issues/95))
+
+---
+
+## [1.0.7] — 2026-02-20
+
+> ### 🐛 Bugfix Release — OpenAI Compatibility, Custom Models & OAuth UX
+>
+> Fixes three community-reported issues: stream default now follows OpenAI spec, custom OpenAI-compatible providers appear in `/v1/models`, and Google OAuth shows a clear error + tutorial for remote deployments.
+
+### 🐛 Bug Fixes
+
+- **`stream` defaults to `false`** — Aligns with the OpenAI specification which explicitly states `stream` defaults to `false`. Previously OmniRoute defaulted to `true`, causing SSE data to be returned instead of a JSON object, breaking clients like Spacebot, OpenCode, and standard Python/Rust/Go OpenAI SDKs that don't explicitly set `stream: true` ([#89](https://github.com/diegosouzapw/OmniRoute/issues/89))
+- **Custom AI providers now appear in `/v1/models`** — OpenAI-compatible custom providers (e.g. FriendLI) whose provider ID wasn't in the built-in alias map were silently excluded from the models list even when active. Fixed by also checking the raw provider ID from the database against active connections ([#90](https://github.com/diegosouzapw/OmniRoute/issues/90))
+- **OAuth `redirect_uri_mismatch` — improved UX for remote deployments** — Google OAuth providers (Antigravity, Gemini CLI) now always use `localhost` as redirect URI matching the registered credentials. Remote-access users see a targeted amber warning with a link to the new setup guide. The token exchange error message explains the root cause and guides users to configure their own credentials ([#91](https://github.com/diegosouzapw/OmniRoute/issues/91))
+
+### 📖 Documentation
+
+- **OAuth em Servidor Remoto tutorial** — New README section with step-by-step guide to configure custom Google Cloud OAuth 2.0 credentials for remote/VPS/Docker deployments
+- **`.env.example` Google OAuth block** — Added prominent warning block explaining remote credential requirements with direct links to Google Cloud Console
+
+### 📁 Files Modified
+
+| File                                   | Change                                                                                      |
+| -------------------------------------- | ------------------------------------------------------------------------------------------- |
+| `open-sse/handlers/chatCore.ts`        | `stream` defaults to `false` (was `true`) per OpenAI spec                                   |
+| `src/app/api/v1/models/route.ts`       | Added raw `providerId` check for custom models active-provider filter                       |
+| `src/shared/components/OAuthModal.tsx` | Force `localhost` redirect for Google OAuth; improved `redirect_uri_mismatch` error message |
+| `.env.example`                         | Added ⚠️ Google OAuth remote credentials block with step-by-step instructions               |
+| `README.md`                            | New "🔐 OAuth em Servidor Remoto" tutorial section                                          |
+
+---
+
+## [1.0.6] — 2026-02-20
+
+> ### ✨ Provider & Combo Toggles — Strict Model Filtering
+>
+> `/v1/models` now shows only models from providers with active connections. Combos and providers can be toggled on/off directly from the dashboard.
+
+### ✨ New Features
+
+- **Provider toggle on Providers page** — Enable/disable all connections for a provider directly from the main Providers list. Toggle is always visible, no hover needed
+- **Combo enable/disable toggle** — Each combo on the Combos page now has a toggle. Disabled combos are excluded from `/v1/models`
+- **OAuth private IP support** — Expanded localhost detection to include private/LAN IPs (`192.168.x.x`, `10.x.x.x`, `172.16-31.x.x`) for correct OAuth redirect URIs
+
+### 🐛 Bug Fixes
+
+- **`/v1/models` strict filtering** — Models are now shown only from providers with active, enabled connections. Previously, if no connections existed or all were disabled, all 378+ models were shown as a fallback
+- **Disabled provider models hidden** — Toggling off a provider immediately removes its models from `/v1/models`
+
+---
+
+## [1.0.5] — 2026-02-20
+
+> ### 🐛 Hotfix — Model Filtering & Docker DATA_DIR
+>
+> Filters all model types in `/v1/models` by active providers and fixes Docker data directory mismatch.
+
+### 🐛 Bug Fixes
+
+- **`/v1/models` full filtering** — Embedding, image, rerank, audio, and moderation models are now filtered by active provider connections, matching chat model behavior. Providers like Together AI no longer appear without a configured API key (#88)
+- **Docker `DATA_DIR`** — Added `ENV DATA_DIR=/app/data` to Dockerfile and `docker-compose.yml` ensuring the volume mount always matches the app data directory — prevents empty database on container recreation
+
+---
+
+## [1.0.4] — 2026-02-19
+
+> ### 🔧 Provider Filtering, OAuth Proxy Fix & Documentation
+>
+> Dashboard model filtering by active providers, provider enable/disable visual indicators, OAuth login fix for nginx reverse proxy, and LLM onboarding documentation.
+
+### ✨ Features
+
+- **API Models filtering** — `GET /api/models` now returns only models from active providers; use `?all=true` for all models (#85)
+- **Provider disabled indicator** — Provider cards show ⏸ "Disabled" badge with reduced opacity when all connections are inactive (#85)
+- **`llm.txt`** — Comprehensive LLM onboarding file with project overview, architecture, flows, and conventions (#84)
+- **WhatsApp Community** — Added WhatsApp group link to README badges and Support section
+
+### 🐛 Bug Fixes
+
+- **OAuth behind nginx** — Fixed OAuth login failing when behind a reverse proxy by using `window.location.origin` for redirect URI instead of hardcoded `localhost` (#86)
+- **`NEXT_PUBLIC_BASE_URL` for OAuth** — Documented env var usage as redirect URI override for proxy deployments (#86)
+
+### 📁 Files Added
+
+| File      | Purpose                                            |
+| --------- | -------------------------------------------------- |
+| `llm.txt` | LLM and contributor onboarding (llms.txt standard) |
+
+### 📁 Files Modified
+
+| File                                               | Change                                                           |
+| -------------------------------------------------- | ---------------------------------------------------------------- |
+| `src/app/api/models/route.ts`                      | Filter by active providers, `?all=true` param, `available` field |
+| `src/app/(dashboard)/dashboard/providers/page.tsx` | `allDisabled` detection + ⏸ badge + opacity-50 on provider cards |
+| `src/shared/components/OAuthModal.tsx`             | Proxy-aware redirect URI using `window.location.origin`          |
+| `.env.example`                                     | Documented `NEXT_PUBLIC_BASE_URL` for OAuth behind proxy         |
+
+---
+
+## [1.0.3] — 2026-02-19
+
+> ### 📊 Logs Dashboard & Real-Time Console Viewer
+>
+> Unified logs interface with real-time console log viewer, file-based logging via console interception, and server initialization improvements.
+
+### ✨ Features
+
+- **Logs Dashboard** — Consolidated 4-tab page at `/dashboard/logs` with Request Logs, Proxy Logs, Audit Logs, and Console tabs
+- **Console Log Viewer** — Terminal-style real-time log viewer with color-coded log levels, auto-scroll, search/filtering, level filter, and 5-second polling
+- **Console Interceptor** — Monkey-patches `console.log/info/warn/error/debug` at server start to capture all application output as JSON lines to `logs/application/app.log`
+- **Log Rotation** — Size-based rotation and retention-based cleanup for log files
+
+### 🔧 Improvements
+
+- **Instrumentation consolidation** — Moved `initAuditLog()`, `cleanupExpiredLogs()`, and console interceptor initialization to Next.js `instrumentation.ts` (runs on both dev and prod server start)
+- **Structured Logger file output** — `structuredLogger.ts` now also appends JSON log entries to the log file
+- **Pino Logger fix** — Fixed broken mix of pino `transport` targets + manual `createWriteStream`; now uses `pino/file` transport targets exclusively with absolute paths
+
+### 🗂️ Files Added
+
+| File                                                 | Purpose                                                           |
+| ---------------------------------------------------- | ----------------------------------------------------------------- |
+| `src/app/(dashboard)/dashboard/logs/page.tsx`        | Tabbed Logs Dashboard page                                        |
+| `src/app/(dashboard)/dashboard/logs/AuditLogTab.tsx` | Audit log tab component extracted from standalone page            |
+| `src/shared/components/ConsoleLogViewer.tsx`         | Terminal-style real-time log viewer                               |
+| `src/app/api/logs/console/route.ts`                  | API endpoint to read log file (filters last 1h, level, component) |
+| `src/lib/consoleInterceptor.ts`                      | Console method monkey-patching for file capture                   |
+| `src/lib/logRotation.ts`                             | Log rotation by size and cleanup by retention days                |
+
+### 🗂️ Files Modified
+
+| File                                    | Change                                                                          |
+| --------------------------------------- | ------------------------------------------------------------------------------- |
+| `src/shared/components/Sidebar.tsx`     | Nav: "Request Logs" → "Logs" with `description` icon                            |
+| `src/shared/components/Breadcrumbs.tsx` | Added breadcrumb labels for `logs`, `audit-log`, `console`                      |
+| `src/instrumentation.ts`                | Added console interceptor + audit log init + expired log cleanup                |
+| `src/server-init.ts`                    | Added console interceptor import (backup init)                                  |
+| `src/shared/utils/logger.ts`            | Fixed pino file transport using `pino/file` targets                             |
+| `src/shared/utils/structuredLogger.ts`  | Added `appendFileSync` file writing + log file config                           |
+| `.env.example`                          | Added `LOG_TO_FILE`, `LOG_FILE_PATH`, `LOG_MAX_FILE_SIZE`, `LOG_RETENTION_DAYS` |
+
+### ⚙️ Configuration
+
+New environment variables:
+
+| Variable             | Default                    | Description                   |
+| -------------------- | -------------------------- | ----------------------------- |
+| `LOG_TO_FILE`        | `true`                     | Enable/disable file logging   |
+| `LOG_FILE_PATH`      | `logs/application/app.log` | Log file path                 |
+| `LOG_MAX_FILE_SIZE`  | `50M`                      | Max file size before rotation |
+| `LOG_RETENTION_DAYS` | `7`                        | Days to retain old log files  |
+
+---
+
+## [1.0.2] — 2026-02-18
+
+> ### 🔒 Security Hardening, Architecture Improvements & UX Polish
+>
+> Comprehensive audit-driven improvements across security, architecture, testing, and user experience.
+
+### 🛡️ Security (Phase 0)
+
+- **Auth guard** — API route protection via `withAuth` middleware for all dashboard routes
+- **CSRF protection** — Token-based CSRF guard for all state-changing API routes
+- **Request payload validation** — Zod schemas for provider, combo, key, and settings endpoints
+- **Prompt injection guard** — Input sanitization against malicious prompt patterns
+- **Body size guard** — Route-specific body size limits with dedicated audio upload threshold
+- **Rate limiter** — Per-IP rate limiting with configurable windows and thresholds
+
+### 🏗️ Architecture (Phase 1–2)
+
+- **DI container** — Simple dependency injection container for service registration
+- **Policy engine** — Consolidated `PolicyEngine` for routing, security, and rate limiting
+- **SQLite migration** — Database migration system with versioned migration runner
+- **Graceful shutdown** — Clean server shutdown with connection draining
+- **TypeScript fixes** — Resolved all `tsc` errors; removed redundant `@ts-check` directives
+- **Pipeline decomposition** — `handleSingleModelChat` decomposed into composable pipeline stages
+- **Prompt template versioning** — Version-tracked prompt templates with rollback support
+- **Eval scheduling** — Automated evaluation suite scheduling with cron-based runner
+- **Plugin architecture** — Extensible plugin system for custom middleware and handlers
+
+### 🧪 Testing & CI (Phase 2)
+
+- **Coverage thresholds** — Jest coverage thresholds enforced in CI (368 tests passing)
+- **Proxy pipeline integration tests** — End-to-end tests for the proxy request pipeline
+- **CI audit workflow** — npm audit and security scanning in GitHub Actions
+- **k6 load tests** — Performance testing with ramping VUs and custom metrics
+
+### ✨ UX & Polish (Phase 3–4)
+
+- **Session management** — Session info card with login time, age, user agent, and logout
+- **Focus indicators** — Global `:focus-visible` styles and `--focus-ring` CSS utility
+- **Audit log viewer** — Security event audit log with structured data display
+- **Dashboard cleanup** — Removed unused files, fixed Quick Start links to Endpoint page
+- **Documentation** — Troubleshooting guide, deployment improvements
+
+---
+
+## [1.0.1] — 2026-02-18
+
+> ### 🔧 API Compatibility & SDK Hardening
+>
+> Response sanitization, role normalization, and structured output improvements for strict OpenAI SDK compatibility and cross-provider robustness.
+
+### 🛡️ Response Sanitization (NEW)
+
+- **Response sanitizer module** — New `responseSanitizer.ts` strips non-standard fields (`x_groq`, `usage_breakdown`, `service_tier`, etc.) from all OpenAI-format provider responses, fixing OpenAI Python SDK v1.83+ Pydantic validation failures that returned raw strings instead of parsed `ChatCompletion` objects
+- **Streaming chunk sanitization** — Passthrough streaming mode now sanitizes each SSE chunk in real-time via `sanitizeStreamingChunk()`, ensuring strict `chat.completion.chunk` schema compliance
+- **ID/Object/Usage normalization** — Ensures `id`, `object`, `created`, `model`, `choices`, and `usage` fields always exist with correct types
+- **Usage field cleanup** — Strips non-standard usage sub-fields, keeps only `prompt_tokens`, `completion_tokens`, `total_tokens`, and OpenAI detail fields
+
+### 🧠 Think Tag Extraction (NEW)
+
+- **`<think>` tag extraction** — Automatically extracts `<think>...</think>` blocks from thinking model responses (DeepSeek R1, Kimi K2 Thinking, etc.) into OpenAI's standard `reasoning_content` field
+- **Streaming think-tag stripping** — Real-time `<think>` extraction in passthrough SSE stream, preventing JSON parsing errors in downstream tools
+- **Preserves native reasoning** — Providers that already send `reasoning_content` natively (e.g., OpenAI o1) are not overwritten
+
+### 🔄 Role Normalization (NEW)
+
+- **`developer` → `system` conversion** — OpenAI's new `developer` role is automatically converted to `system` for all non-OpenAI providers (Claude, Gemini, Kiro, etc.)
+- **`system` → `user` merging** — For models that reject the `system` role (GLM, ERNIE), system messages are intelligently merged into the first user message with clear delimiters
+- **Model-aware normalization** — Uses model name prefix matching (`glm-*`, `ernie-*`) for compatibility decisions, avoiding hardcoded provider-level flags
+
+### 📐 Structured Output for Gemini (NEW)
+
+- **`response_format` → Gemini conversion** — OpenAI's `json_schema` structured output is now translated to Gemini's `responseMimeType` + `responseSchema` in the translator pipeline
+- **`json_object` support** — `response_format: { type: "json_object" }` maps to Gemini's `application/json` MIME type
+- **Schema cleanup** — Automatically removes unsupported JSON Schema keywords (`$schema`, `additionalProperties`) for Gemini compatibility
+
+### 📁 Files Added
+
+| File                                     | Purpose                                                                |
+| ---------------------------------------- | ---------------------------------------------------------------------- |
+| `open-sse/handlers/responseSanitizer.ts` | Response field stripping, think-tag extraction, ID/usage normalization |
+| `open-sse/services/roleNormalizer.ts`    | Developer→system, system→user role conversion pipeline                 |
+
+### 📁 Files Modified
+
+| File                                              | Change                                                                          |
+| ------------------------------------------------- | ------------------------------------------------------------------------------- |
+| `open-sse/handlers/chatCore.ts`                   | Integrated response sanitizer for non-streaming OpenAI responses                |
+| `open-sse/utils/stream.ts`                        | Integrated streaming chunk sanitizer + think-tag extraction in passthrough mode |
+| `open-sse/translator/index.ts`                    | Integrated role normalizer into the request translation pipeline                |
+| `open-sse/translator/request/openai-to-gemini.ts` | Added `response_format` → `responseMimeType`/`responseSchema` conversion        |
+
+---
+
+## [1.0.0] — 2026-02-18
+
+> ### 🎉 First Major Release — OmniRoute 1.0
+>
+> OmniRoute is an intelligent API gateway that unifies 20+ AI providers behind a single OpenAI-compatible endpoint. This release represents the culmination of the entire development effort — from initial prototype to production-ready platform.
+
+### 🧠 Core Routing & Intelligence
+
+- **Smart 4-tier fallback** — Auto-routing: Subscription → Cheap → Free → Emergency
+- **6 routing strategies** — Fill First, Round Robin, Power-of-Two-Choices, Random, Least Used, Cost Optimized
+- **Semantic caching** — Auto-cache responses for deduplication with configurable TTL
+- **Request idempotency** — Prevent duplicate processing of identical requests
+- **Thinking budget validation** — Control reasoning token allocation per request
+- **System prompt injection** — Configurable global system prompts for all requests
+
+### 🔌 Providers & Models
+
+- **20+ AI providers** — OpenAI, Claude (Anthropic), Gemini, GitHub Copilot, DeepSeek, Groq, xAI, Mistral, Qwen, iFlow, Kiro, OpenRouter, GLM, MiniMax, Kimi, NVIDIA NIM, and more
+- **Multi-account support** — Multiple accounts per provider with automatic rotation
+- **OAuth 2.0 (PKCE)** — Automatic token management and refresh for Claude Code, Codex, Gemini CLI, Copilot, Kiro
+- **Auto token refresh** — Background refresh with expiry detection and unrecoverable error handling
+- **Model import** — Import models from API-compatible passthrough providers
+- **OpenAI-compatible validation** — Fallback validation via chat completions for providers without `/models` endpoint
+- **TLS fingerprint spoofing** — Browser-like TLS fingerprinting via `wreq-js` to bypass bot detection
+
+### 🔄 Format Translation
+
+- **Multi-format translation** — Seamless OpenAI ↔ Claude ↔ Gemini ↔ OpenAI Responses API conversion
+- **Translator Playground** — 4 interactive modes:
+  - **Playground** — Test format translations between any provider formats
+  - **Chat Tester** — Send real requests through the proxy with visual response rendering
+  - **Test Bench** — Automated batch testing across multiple providers
+  - **Live Monitor** — Real-time stream of active proxy requests and translations
+
+### 🎯 Combos & Fallback Chains
+
+- **Custom combos** — Create model combinations with multi-provider fallback chains
+- **6 combo balancing strategies** — Fill First, Round Robin, Random, Least Used, P2C, Cost Optimized
+- **Combo circuit breaker** — Auto-disable failing providers within a combo chain
+
+### 🛡️ Resilience & Security
+
+- **Circuit breakers** — Auto-recovery with configurable thresholds and cooldown periods
+- **Exponential backoff** — Progressive retry delays for failed requests
+- **Anti-thundering herd** — Mutex-based protection against concurrent retry storms
+- **Rate limit detection** — Per-provider RPM, min gap, and max concurrent request tracking
+- **Editable rate limits** — Configurable defaults via Settings → Resilience with persistence
+- **Prompt injection guard** — Input sanitization for malicious prompt patterns
+- **PII redaction** — Automatic detection and masking of personally identifiable information
+- **AES-256-GCM encryption** — Credential encryption at rest
+- **IP access control** — Whitelist/blacklist IP filtering
+- **SOCKS5 proxy support** — Outbound proxy for upstream provider calls
+
+### 📊 Observability & Analytics
+
+- **Analytics dashboard** — Recharts-based SVG charts: stat cards, model usage bar chart, provider breakdown table with success rates and latency
+- **Real-time health monitoring** — Provider health, rate limits, latency telemetry
+- **Request logs** — Dedicated page with SQLite-persisted proxy request/response logs
+- **Limits & Quotas** — Separate dashboard for quota monitoring with reset countdowns
+- **Cost analytics** — Token cost tracking and budget management per provider
+- **Request telemetry** — Correlation IDs, structured logging, request timing
+
+### 💾 Database & Backup
+
+- **Dual database** — LowDB (JSON) for config + SQLite for domain state and proxy logs
+- **Export database** — `GET /api/db-backups/export` — Download SQLite database file
+- **Export all** — `GET /api/db-backups/exportAll` — Full backup as `.tar.gz` archive (DB + settings + combos + providers + masked API keys)
+- **Import database** — `POST /api/db-backups/import` — Upload and restore with validation, integrity check, and pre-import backup
+- **Automatic backups** — Configurable backup schedule with retention
+- **Storage health** — Dashboard widget with database size, path, and backup status
+
+### 🖥️ Dashboard & UI
+
+- **Full dashboard** — Provider management, analytics, health monitoring, settings, CLI tools
+- **9 dashboard sections** — Providers, Combos, Analytics, Health, Translator, Settings, CLI Tools, Usage, Endpoint
+- **Settings restructure** — 6 tabs: Security, Routing, Resilience, AI, System/Storage, Advanced
+- **Shared UI component library** — Reusable components (Avatar, Badge, Button, Card, DataTable, Modal, etc.)
+- **Dark/Light/System theme** — Persistent theme selection with system preference detection
+- **Agent showcase grid** — Visual grid of 10 AI coding agents in README header
+- **Provider logos** — Logo assets for all supported agents and providers
+- **Red shield badges** — Styled badge icons across all documentation
+
+### ☁️ Deployment & Infrastructure
+
+- **Docker support** — Multi-stage Dockerfile with `base` and `cli` profiles
+- **Docker Hub** — `diegosouzapw/omniroute` with `latest` and versioned tags
+- **Docker CI/CD** — GitHub Actions auto-build and push on release
+- **npm CLI package** — `npx omniroute` with auto-launch
+- **npm CI/CD** — GitHub Actions auto-publish to npm on release
+- **Akamai VM deployment** — Production deployment on Nanode 1GB with nginx reverse proxy
+- **Cloud sync** — Sync configuration across devices via Cloudflare Worker
+- **Edge compatibility** — Native `crypto.randomUUID()` for Cloudflare Workers
+
+### 🧪 Testing & Quality
+
+- **100% TypeScript** — Full migration of `src/` (200+ files) and `open-sse/` (94 files) — zero `@ts-ignore`, zero TypeScript errors
+- **CI/CD pipeline** — GitHub Actions for lint, build, test, npm publish, Docker publish
+- **Unit tests** — 20+ test suites covering domain logic, security, caching, routing
+- **E2E tests** — Playwright specs for API, navigation, and responsive behavior
+- **LLM evaluations** — Golden set testing framework with 4 match strategies (`exact`, `contains`, `regex`, `custom`)
+- **Security tests** — CLI runtime, Docker hardening, cloud sync, and OpenAI compatibility
+
+### 📖 Documentation
+
+- **8 language READMEs** — English, Portuguese (pt-BR), Spanish, Russian, Chinese (zh-CN), German, French, Italian
+- **VM Deployment Guide** — Complete guide (VM + Docker + nginx + Cloudflare + security)
+- **Features Gallery** — 9 dashboard screenshots with descriptions
+- **API Reference** — Full endpoint documentation including backup/export/import
+- **User Guide** — Step-by-step setup, configuration, and usage instructions
+- **Architecture docs** — System design, component decomposition, ADRs
+- **OpenAPI specification** — Machine-readable API documentation
+- **Troubleshooting guide** — Common issues and solutions
+- **Security policy** — `SECURITY.md` with vulnerability reporting via GitHub Security Advisories
+- **Roadmap** — 150+ planned features across 6 categories
+
+### 🔌 API Endpoints
+
+- `/v1/chat/completions` — OpenAI-compatible chat endpoint with format translation
+- `/v1/embeddings` — Embedding generation
+- `/v1/images/generations` — Image generation
+- `/v1/models` — Model listing with provider filtering
+- `/v1/rerank` — Re-ranking endpoint
+- `/v1/audio/*` — Audio transcription and translation
+- `/v1/moderations` — Content moderation
+- `/api/db-backups/export` — Database export
+- `/api/db-backups/exportAll` — Full archive export
+- `/api/db-backups/import` — Database import with validation
+- 30+ dashboard API routes for providers, combos, settings, analytics, health, CLI tools
+
+---
+
+[1.4.7]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.4.7
+[1.4.6]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.4.6
+[1.4.5]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.4.5
+[1.4.4]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.4.4
+[1.4.3]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.4.3
+[1.4.2]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.4.2
+[1.4.1]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.4.1
+[1.4.0]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.4.0
+[1.3.1]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.3.1
+[1.3.0]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.3.0
+[1.2.0]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.2.0
+[1.1.1]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.1.1
+[1.0.7]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.7
+[1.0.6]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.6
+[1.0.5]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.5
+[1.0.4]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.4
+[1.1.0]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.1.0
+[1.0.1]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.1
+[1.0.3]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.3
+[1.0.2]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.2
+[1.0.0]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.0

CONTRIBUTING.md

@@ -159,7 +159,7 @@ src/                        # TypeScript (.ts / .tsx)
 │   ├── cacheLayer.ts       # LRU cache
 │   ├── semanticCache.ts    # Semantic response cache
 │   ├── idempotencyLayer.ts # Request deduplication
-│   └── localDb.ts          # LowDB (JSON) storage
+│   └── localDb.ts          # Settings facade (LowDB for config, SQLite for domain data)
 ├── shared/
 │   ├── components/         # React components (.tsx)
 │   ├── middleware/          # Correlation IDs, etc.

Dockerfile

@@ -20,7 +20,8 @@ ENV NODE_ENV=production
 ENV PORT=20128
 ENV HOSTNAME=0.0.0.0
 
-# Runtime writable location for localDb when DATA_DIR is configured to /app/data
+# Data directory inside Docker — must match the volume mount in docker-compose.yml
+ENV DATA_DIR=/app/data
 RUN mkdir -p /app/data
 
 COPY --from=builder /app/public ./public

README.es.md

@@ -0,0 +1,999 @@
+<div align="center">
+  <img src="./docs/screenshots/MainOmniRoute.png" alt="OmniRoute Dashboard" width="800"/>
+  
+  # 🚀 OmniRoute — El Gateway de IA Gratuito
+
+### Nunca dejes de programar. Enrutamiento inteligente hacia **modelos de IA GRATUITOS y económicos** con fallback automático.
+
+_Tu proxy de API universal — un endpoint, 36+ proveedores, cero tiempo de inactividad._
+
+**Chat Completions • Embeddings • Generación de Imágenes • Audio • Reranking • 100% TypeScript**
+
+---
+
+### 🤖 Proveedor de IA Gratuito para tus agentes de programación favoritos
+
+_Conecta cualquier IDE o herramienta CLI con IA a través de OmniRoute — gateway de API gratuito para programación ilimitada._
+
+  <table>
+    <tr>
+      <td align="center" width="110">
+        <a href="https://github.com/cline/cline">
+          <img src="./public/providers/openclaw.png" alt="OpenClaw" width="48"/><br/>
+          <b>OpenClaw</b>
+        </a><br/>
+        <sub>⭐ 205K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/HKUDS/nanobot">
+          <img src="./public/providers/nanobot.png" alt="NanoBot" width="48"/><br/>
+          <b>NanoBot</b>
+        </a><br/>
+        <sub>⭐ 20.9K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/sipeed/picoclaw">
+          <img src="./public/providers/picoclaw.jpg" alt="PicoClaw" width="48"/><br/>
+          <b>PicoClaw</b>
+        </a><br/>
+        <sub>⭐ 14.6K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/zeroclaw-labs/zeroclaw">
+          <img src="./public/providers/zeroclaw.png" alt="ZeroClaw" width="48"/><br/>
+          <b>ZeroClaw</b>
+        </a><br/>
+        <sub>⭐ 9.9K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/nearai/ironclaw">
+          <img src="./public/providers/ironclaw.png" alt="IronClaw" width="48"/><br/>
+          <b>IronClaw</b>
+        </a><br/>
+        <sub>⭐ 2.1K</sub>
+      </td>
+    </tr>
+    <tr>
+      <td align="center" width="110">
+        <a href="https://github.com/anomalyco/opencode">
+          <img src="./public/providers/opencode.svg" alt="OpenCode" width="48"/><br/>
+          <b>OpenCode</b>
+        </a><br/>
+        <sub>⭐ 106K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/openai/codex">
+          <img src="./public/providers/codex.png" alt="Codex CLI" width="48"/><br/>
+          <b>Codex CLI</b>
+        </a><br/>
+        <sub>⭐ 60.8K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/anthropics/claude-code">
+          <img src="./public/providers/claude.png" alt="Claude Code" width="48"/><br/>
+          <b>Claude Code</b>
+        </a><br/>
+        <sub>⭐ 67.3K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/google-gemini/gemini-cli">
+          <img src="./public/providers/gemini-cli.png" alt="Gemini CLI" width="48"/><br/>
+          <b>Gemini CLI</b>
+        </a><br/>
+        <sub>⭐ 94.7K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/Kilo-Org/kilocode">
+          <img src="./public/providers/kilocode.png" alt="Kilo Code" width="48"/><br/>
+          <b>Kilo Code</b>
+        </a><br/>
+        <sub>⭐ 15.5K</sub>
+      </td>
+    </tr>
+  </table>
+
+<sub>📡 Todos los agentes se conectan vía <code>http://localhost:20128/v1</code> o <code>http://cloud.omniroute.online/v1</code> — una configuración, modelos y cuota ilimitados</sub>
+
+---
+
+[![npm version](https://img.shields.io/npm/v/omniroute?color=cb3837&logo=npm)](https://www.npmjs.com/package/omniroute)
+[![Docker Hub](https://img.shields.io/docker/v/diegosouzapw/omniroute?label=Docker%20Hub&logo=docker&color=2496ED)](https://hub.docker.com/r/diegosouzapw/omniroute)
+[![License](https://img.shields.io/github/license/diegosouzapw/OmniRoute)](https://github.com/diegosouzapw/OmniRoute/blob/main/LICENSE)
+[![Website](https://img.shields.io/badge/Website-omniroute.online-blue?logo=google-chrome&logoColor=white)](https://omniroute.online)
+[![WhatsApp](https://img.shields.io/badge/WhatsApp-Community-25D366?logo=whatsapp&logoColor=white)](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
+
+[🌐 Website](https://omniroute.online) • [🚀 Inicio Rápido](#-inicio-rápido) • [💡 Características](#-características-principales) • [📖 Docs](#-documentación) • [💰 Precios](#-precios-resumidos)
+
+🌐 **Disponible en:** [English](README.md) | [Português](README.pt-BR.md) | [Español](README.es.md) | [Русский](README.ru.md) | [中文](README.zh-CN.md) | [Deutsch](README.de.md) | [Français](README.fr.md) | [Italiano](README.it.md)
+
+</div>
+
+---
+
+## 🤔 ¿Por qué OmniRoute?
+
+**Deja de desperdiciar dinero y chocar con límites:**
+
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> La cuota de suscripción expira sin usar cada mes
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> Los límites de tasa te detienen en medio de la programación
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> APIs caras ($20-50/mes por proveedor)
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> Cambiar manualmente entre proveedores
+
+**OmniRoute resuelve esto:**
+
+- ✅ **Maximiza suscripciones** - Rastrea cuotas, usa cada bit antes del reset
+- ✅ **Fallback automático** - Suscripción → API Key → Barato → Gratuito, cero tiempo de inactividad
+- ✅ **Multi-cuenta** - Round-robin entre cuentas por proveedor
+- ✅ **Universal** - Funciona con Claude Code, Codex, Gemini CLI, Cursor, Cline, OpenClaw, cualquier herramienta CLI
+
+---
+
+## 🔄 Cómo Funciona
+
+```
+┌─────────────┐
+│  Tu CLI     │  (Claude Code, Codex, Gemini CLI, OpenClaw, Cursor, Cline...)
+│   Tool      │
+└──────┬──────┘
+       │ http://localhost:20128/v1
+       ↓
+┌─────────────────────────────────────────┐
+│        OmniRoute (Enrutador Inteligente)  │
+│  • Traducción de formato (OpenAI ↔ Claude) │
+│  • Rastreo de cuota + Embeddings + Imágenes │
+│  • Renovación automática de tokens        │
+└──────┬──────────────────────────────────┘
+       │
+       ├─→ [Tier 1: SUSCRIPCIÓN] Claude Code, Codex, Gemini CLI
+       │   ↓ cuota agotada
+       ├─→ [Tier 2: API KEY] DeepSeek, Groq, xAI, Mistral, NVIDIA NIM, etc.
+       │   ↓ límite de presupuesto
+       ├─→ [Tier 3: BARATO] GLM ($0.6/1M), MiniMax ($0.2/1M)
+       │   ↓ límite de presupuesto
+       └─→ [Tier 4: GRATUITO] iFlow, Qwen, Kiro (ilimitado)
+
+Resultado: Nunca dejes de programar, costo mínimo
+```
+
+---
+
+## ⚡ Inicio Rápido
+
+**1. Instala globalmente:**
+
+```bash
+npm install -g omniroute
+omniroute
+```
+
+🎉 El Dashboard se abre en `http://localhost:20128`
+
+| Comando                 | Descripción                                    |
+| ----------------------- | ---------------------------------------------- |
+| `omniroute`             | Iniciar servidor (puerto predeterminado 20128) |
+| `omniroute --port 3000` | Usar puerto personalizado                      |
+| `omniroute --no-open`   | No abrir navegador automáticamente             |
+| `omniroute --help`      | Mostrar ayuda                                  |
+
+**2. Conecta un proveedor GRATUITO:**
+
+Dashboard → Proveedores → Conectar **Claude Code** o **Antigravity** → Login OAuth → ¡Listo!
+
+**3. Usa en tu herramienta CLI:**
+
+```
+Claude Code/Codex/Gemini CLI/OpenClaw/Cursor/Cline Configuración:
+  Endpoint: http://localhost:20128/v1
+  API Key: [copiar del dashboard]
+  Model: if/kimi-k2-thinking
+```
+
+**¡Eso es todo!** Comienza a programar con modelos de IA GRATUITOS.
+
+**Alternativa — ejecutar desde código fuente:**
+
+```bash
+cp .env.example .env
+npm install
+PORT=20128 NEXT_PUBLIC_BASE_URL=http://localhost:20128 npm run dev
+```
+
+---
+
+## 🐳 Docker
+
+OmniRoute está disponible como imagen Docker pública en [Docker Hub](https://hub.docker.com/r/diegosouzapw/omniroute).
+
+**Ejecución rápida:**
+
+```bash
+docker run -d \
+  --name omniroute \
+  --restart unless-stopped \
+  -p 20128:20128 \
+  -v omniroute-data:/app/data \
+  diegosouzapw/omniroute:latest
+```
+
+**Con archivo de entorno:**
+
+```bash
+# Copia y edita el .env primero
+cp .env.example .env
+
+docker run -d \
+  --name omniroute \
+  --restart unless-stopped \
+  --env-file .env \
+  -p 20128:20128 \
+  -v omniroute-data:/app/data \
+  diegosouzapw/omniroute:latest
+```
+
+**Usando Docker Compose:**
+
+```bash
+# Perfil base (sin herramientas CLI)
+docker compose --profile base up -d
+
+# Perfil CLI (Claude Code, Codex, OpenClaw integrados)
+docker compose --profile cli up -d
+```
+
+| Imagen                   | Tag      | Tamaño | Descripción            |
+| ------------------------ | -------- | ------ | ---------------------- |
+| `diegosouzapw/omniroute` | `latest` | ~250MB | Última versión estable |
+| `diegosouzapw/omniroute` | `1.0.6`  | ~250MB | Versión actual         |
+
+---
+
+## 💰 Precios Resumidos
+
+| Tier               | Proveedor         | Costo                        | Reset de Cuota    | Mejor Para              |
+| ------------------ | ----------------- | ---------------------------- | ----------------- | ----------------------- |
+| **💳 SUSCRIPCIÓN** | Claude Code (Pro) | $20/mes                      | 5h + semanal      | Ya suscrito             |
+|                    | Codex (Plus/Pro)  | $20-200/mes                  | 5h + semanal      | Usuarios OpenAI         |
+|                    | Gemini CLI        | **GRATUITO**                 | 180K/mes + 1K/día | ¡Todos!                 |
+|                    | GitHub Copilot    | $10-19/mes                   | Mensual           | Usuarios GitHub         |
+| **🔑 API KEY**     | NVIDIA NIM        | **GRATUITO** (1000 créditos) | Único             | Pruebas gratuitas       |
+|                    | DeepSeek          | Por uso                      | Ninguno           | Mejor precio/calidad    |
+|                    | Groq              | Tier gratuito + pago         | Limitado          | Inferencia ultra-rápida |
+|                    | xAI (Grok)        | Por uso                      | Ninguno           | Modelos Grok            |
+|                    | Mistral           | Tier gratuito + pago         | Limitado          | IA Europea              |
+|                    | OpenRouter        | Por uso                      | Ninguno           | 100+ modelos            |
+| **💰 BARATO**      | GLM-4.7           | $0.6/1M                      | Diario 10h        | Respaldo económico      |
+|                    | MiniMax M2.1      | $0.2/1M                      | Rotativo 5h       | Opción más barata       |
+|                    | Kimi K2           | $9/mes fijo                  | 10M tokens/mes    | Costo predecible        |
+| **🆓 GRATUITO**    | iFlow             | $0                           | Ilimitado         | 8 modelos gratuitos     |
+|                    | Qwen              | $0                           | Ilimitado         | 3 modelos gratuitos     |
+|                    | Kiro              | $0                           | Ilimitado         | Claude gratuito         |
+
+**💡 Consejo Pro:** ¡Comienza con Gemini CLI (180K gratis/mes) + iFlow (ilimitado gratis) = $0 de costo!
+
+---
+
+## 🎯 Casos de Uso
+
+### Caso 1: "Tengo suscripción Claude Pro"
+
+**Problema:** La cuota expira sin usar, límites de tasa durante programación intensa
+
+```
+Combo: "maximize-claude"
+  1. cc/claude-opus-4-6        (usar suscripción al máximo)
+  2. glm/glm-4.7               (respaldo barato cuando la cuota se agota)
+  3. if/kimi-k2-thinking       (fallback de emergencia gratuito)
+
+Costo mensual: $20 (suscripción) + ~$5 (respaldo) = $25 total
+vs. $20 + chocar con límites = frustración
+```
+
+### Caso 2: "Quiero costo cero"
+
+**Problema:** No puede pagar suscripciones, necesita IA confiable para programar
+
+```
+Combo: "free-forever"
+  1. gc/gemini-3-flash         (180K gratis/mes)
+  2. if/kimi-k2-thinking       (ilimitado gratis)
+  3. qw/qwen3-coder-plus       (ilimitado gratis)
+
+Costo mensual: $0
+Calidad: Modelos listos para producción
+```
+
+### Caso 3: "Necesito programar 24/7, sin interrupciones"
+
+**Problema:** Plazos ajustados, no puede permitirse tiempo de inactividad
+
+```
+Combo: "always-on"
+  1. cc/claude-opus-4-6        (mejor calidad)
+  2. cx/gpt-5.2-codex          (segunda suscripción)
+  3. glm/glm-4.7               (barato, reset diario)
+  4. minimax/MiniMax-M2.1      (más barato, reset 5h)
+  5. if/kimi-k2-thinking       (gratuito ilimitado)
+
+Resultado: 5 capas de fallback = cero tiempo de inactividad
+```
+
+### Caso 4: "Quiero IA GRATUITA en OpenClaw"
+
+**Problema:** Necesita asistente de IA en apps de mensajería, completamente gratuito
+
+```
+Combo: "openclaw-free"
+  1. if/glm-4.7                (ilimitado gratis)
+  2. if/minimax-m2.1           (ilimitado gratis)
+  3. if/kimi-k2-thinking       (ilimitado gratis)
+
+Costo mensual: $0
+Acceso vía: WhatsApp, Telegram, Slack, Discord, iMessage, Signal...
+```
+
+---
+
+## 💡 Características Principales
+
+### 🧠 Enrutamiento e Inteligencia
+
+| Característica                         | Qué Hace                                                                        |
+| -------------------------------------- | ------------------------------------------------------------------------------- |
+| 🎯 **Fallback Inteligente 4 Tiers**    | Auto-enrutamiento: Suscripción → API Key → Barato → Gratuito                    |
+| 📊 **Rastreo de Cuota en Tiempo Real** | Conteo de tokens en vivo + countdown de reset por proveedor                     |
+| 🔄 **Traducción de Formato**           | OpenAI ↔ Claude ↔ Gemini ↔ Cursor ↔ Kiro transparente                           |
+| 👥 **Soporte Multi-Cuenta**            | Múltiples cuentas por proveedor con selección inteligente                       |
+| 🔄 **Renovación Automática de Token**  | Tokens OAuth se renuevan automáticamente con reintentos                         |
+| 🎨 **Combos Personalizados**           | 6 estrategias: fill-first, round-robin, p2c, random, least-used, cost-optimized |
+| 🧩 **Modelos Personalizados**          | Agrega cualquier ID de modelo a cualquier proveedor                             |
+| 🌐 **Enrutador Wildcard**              | Enruta patrones `provider/*` a cualquier proveedor dinámicamente                |
+| 🧠 **Presupuesto de Razonamiento**     | Modos passthrough, auto, custom y adaptativo para modelos de razonamiento       |
+| 💬 **Inyección de System Prompt**      | System prompt global aplicado en todas las solicitudes                          |
+| 📄 **API Responses**                   | Soporte completo de la API Responses de OpenAI (`/v1/responses`) para Codex     |
+
+### 🎵 APIs Multi-Modal
+
+| Característica                | Qué Hace                                               |
+| ----------------------------- | ------------------------------------------------------ |
+| 🖼️ **Generación de Imágenes** | `/v1/images/generations` — 4 proveedores, 9+ modelos   |
+| 📐 **Embeddings**             | `/v1/embeddings` — 6 proveedores, 9+ modelos           |
+| 🎤 **Transcripción de Audio** | `/v1/audio/transcriptions` — Compatible con Whisper    |
+| 🔊 **Texto a Voz**            | `/v1/audio/speech` — Síntesis de audio multi-proveedor |
+| 🛡️ **Moderaciones**           | `/v1/moderations` — Verificaciones de seguridad        |
+| 🔀 **Reranking**              | `/v1/rerank` — Reranking de relevancia de documentos   |
+
+### 🛡️ Resiliencia y Seguridad
+
+| Característica                     | Qué Hace                                                         |
+| ---------------------------------- | ---------------------------------------------------------------- |
+| 🔌 **Circuit Breaker**             | Auto-apertura/cierre por proveedor con umbrales configurables    |
+| 🛡️ **Anti-Thundering Herd**        | Mutex + semáforo rate-limit para proveedores con API key         |
+| 🧠 **Caché Semántico**             | Caché de dos niveles (firma + semántico) reduce costo y latencia |
+| ⚡ **Idempotencia de Solicitud**   | Ventana de dedup de 5s para solicitudes duplicadas               |
+| 🔒 **Spoofing de Fingerprint TLS** | Bypass de detección de bot vía TLS con wreq-js                   |
+| 🌐 **Filtrado de IP**              | Allowlist/blocklist para control de acceso a la API              |
+| 📊 **Rate Limits Editables**       | RPM, gap mínimo y concurrencia máxima configurables              |
+
+### 📊 Observabilidad y Analytics
+
+| Característica                 | Qué Hace                                                              |
+| ------------------------------ | --------------------------------------------------------------------- |
+| 📝 **Logs de Solicitud**       | Modo debug con logs completos de request/response                     |
+| 💾 **Logs SQLite**             | Logs de proxy persistentes sobreviven a reinicios                     |
+| 📊 **Dashboard de Analytics**  | Recharts: cards de estadísticas, gráfico de uso, tabla de proveedores |
+| 📈 **Rastreo de Progreso**     | Eventos de progreso SSE opt-in para streaming                         |
+| 🧪 **Evaluaciones de LLM**     | Pruebas con conjunto golden y 4 estrategias de match                  |
+| 🔍 **Telemetría de Solicitud** | Agregación de latencia p50/p95/p99 + rastreo X-Request-Id             |
+| 📋 **Logs + Cuotas**           | Páginas dedicadas para navegación de logs y rastreo de cuotas         |
+| 🏥 **Dashboard de Salud**      | Uptime, estados de circuit breaker, lockouts, stats de caché          |
+| 💰 **Rastreo de Costos**       | Gestión de presupuesto + configuración de precios por modelo          |
+
+### ☁️ Deploy y Sincronización
+
+| Característica                    | Qué Hace                                                                        |
+| --------------------------------- | ------------------------------------------------------------------------------- |
+| 💾 **Cloud Sync**                 | Sincroniza configuraciones entre dispositivos vía Cloudflare Workers            |
+| 🌐 **Deploy en Cualquier Lugar**  | Localhost, VPS, Docker, Cloudflare Workers                                      |
+| 🔑 **Gestión de API Keys**        | Genera, rota y define alcance de API keys por proveedor                         |
+| 🧙 **Asistente de Configuración** | Setup guiado en 4 pasos para nuevos usuarios                                    |
+| 🔧 **Dashboard CLI Tools**        | Configuración en un clic para Claude, Codex, Cline, OpenClaw, Kilo, Antigravity |
+| 🔄 **Backups de DB**              | Backup y restauración automáticos de todas las configuraciones                  |
+
+<details>
+<summary><b>📖 Detalles de Características</b></summary>
+
+### 🎯 Fallback Inteligente 4 Tiers
+
+Crea combos con fallback automático:
+
+```
+Combo: "my-coding-stack"
+  1. cc/claude-opus-4-6        (tu suscripción)
+  2. nvidia/llama-3.3-70b      (API NVIDIA gratuita)
+  3. glm/glm-4.7               (respaldo barato, $0.6/1M)
+  4. if/kimi-k2-thinking       (fallback gratuito)
+
+→ Cambia automáticamente cuando la cuota se agota o ocurren errores
+```
+
+### 📊 Rastreo de Cuota en Tiempo Real
+
+- Consumo de tokens por proveedor
+- Countdown de reset (5 horas, diario, semanal)
+- Estimación de costo para tiers pagos
+- Reportes de gastos mensuales
+
+### 🔄 Traducción de Formato
+
+Traducción transparente entre formatos:
+
+- **OpenAI** ↔ **Claude** ↔ **Gemini** ↔ **OpenAI Responses**
+- Tu herramienta CLI envía formato OpenAI → OmniRoute traduce → El proveedor recibe formato nativo
+- Funciona con cualquier herramienta que soporte endpoints OpenAI personalizados
+
+### 👥 Soporte Multi-Cuenta
+
+- Agrega múltiples cuentas por proveedor
+- Round-robin automático o enrutamiento por prioridad
+- Fallback a la siguiente cuenta cuando una alcanza la cuota
+
+### 🔄 Renovación Automática de Token
+
+- Los tokens OAuth se renuevan automáticamente antes de expirar
+- Sin necesidad de re-autenticación manual
+- Experiencia transparente en todos los proveedores
+
+### 🎨 Combos Personalizados
+
+- Crea combinaciones ilimitadas de modelos
+- 6 estrategias: fill-first, round-robin, power-of-two-choices, random, least-used, cost-optimized
+- Comparte combos entre dispositivos con Cloud Sync
+
+### 🏥 Dashboard de Salud
+
+- Estado del sistema (uptime, versión, uso de memoria)
+- Estados de circuit breaker por proveedor (Closed/Open/Half-Open)
+- Estado de rate limit y lockouts activos
+- Estadísticas de caché de firma
+- Telemetría de latencia (p50/p95/p99) + caché de prompt
+- Reset de salud con un clic
+
+### 🔧 Playground del Traductor
+
+- Debug, prueba y visualiza traducciones de formato de API
+- Envía solicitudes y ve cómo OmniRoute traduce entre formatos de proveedores
+- Invaluable para troubleshooting de problemas de integración
+
+### 💾 Cloud Sync
+
+- Sincroniza proveedores, combos y configuraciones entre dispositivos
+- Sincronización automática en segundo plano
+- Almacenamiento cifrado seguro
+
+</details>
+
+---
+
+## 📖 Guía de Configuración
+
+<details>
+<summary><b>💳 Proveedores por Suscripción</b></summary>
+
+### Claude Code (Pro/Max)
+
+```bash
+Dashboard → Proveedores → Conectar Claude Code
+→ Login OAuth → Renovación automática de token
+→ Rastreo de cuota 5h + semanal
+
+Modelos:
+  cc/claude-opus-4-6
+  cc/claude-sonnet-4-5-20250929
+  cc/claude-haiku-4-5-20251001
+```
+
+**Consejo Pro:** Usa Opus para tareas complejas, Sonnet para velocidad. ¡OmniRoute rastrea cuota por modelo!
+
+### OpenAI Codex (Plus/Pro)
+
+```bash
+Dashboard → Proveedores → Conectar Codex
+→ Login OAuth (puerto 1455)
+→ Reset 5h + semanal
+
+Modelos:
+  cx/gpt-5.2-codex
+  cx/gpt-5.1-codex-max
+```
+
+### Gemini CLI (¡GRATUITO 180K/mes!)
+
+```bash
+Dashboard → Proveedores → Conectar Gemini CLI
+→ Google OAuth
+→ 180K completions/mes + 1K/día
+
+Modelos:
+  gc/gemini-3-flash-preview
+  gc/gemini-2.5-pro
+```
+
+**Mejor Valor:** ¡Tier gratuito enorme! Úsalo antes de los tiers pagos.
+
+### GitHub Copilot
+
+```bash
+Dashboard → Proveedores → Conectar GitHub
+→ OAuth vía GitHub
+→ Reset mensual (1ro del mes)
+
+Modelos:
+  gh/gpt-5
+  gh/claude-4.5-sonnet
+  gh/gemini-3-pro
+```
+
+</details>
+
+<details>
+<summary><b>🔑 Proveedores por API Key</b></summary>
+
+### NVIDIA NIM (¡GRATUITO 1000 créditos!)
+
+1. Regístrate: [build.nvidia.com](https://build.nvidia.com)
+2. Obtén API key gratuita (1000 créditos de inferencia incluidos)
+3. Dashboard → Agregar Proveedor → NVIDIA NIM:
+   - API Key: `nvapi-your-key`
+
+**Modelos:** `nvidia/llama-3.3-70b-instruct`, `nvidia/mistral-7b-instruct`, y 50+ más
+
+**Consejo Pro:** ¡API compatible con OpenAI — funciona perfectamente con la traducción de formato de OmniRoute!
+
+### DeepSeek
+
+1. Regístrate: [platform.deepseek.com](https://platform.deepseek.com)
+2. Obtén API key
+3. Dashboard → Agregar Proveedor → DeepSeek
+
+**Modelos:** `deepseek/deepseek-chat`, `deepseek/deepseek-coder`
+
+### Groq (¡Tier Gratuito Disponible!)
+
+1. Regístrate: [console.groq.com](https://console.groq.com)
+2. Obtén API key (tier gratuito incluido)
+3. Dashboard → Agregar Proveedor → Groq
+
+**Modelos:** `groq/llama-3.3-70b`, `groq/mixtral-8x7b`
+
+**Consejo Pro:** ¡Inferencia ultra-rápida — mejor para programación en tiempo real!
+
+### OpenRouter (100+ Modelos)
+
+1. Regístrate: [openrouter.ai](https://openrouter.ai)
+2. Obtén API key
+3. Dashboard → Agregar Proveedor → OpenRouter
+
+**Modelos:** Accede a 100+ modelos de todos los principales proveedores a través de una única API key.
+
+</details>
+
+<details>
+<summary><b>💰 Proveedores Baratos (Respaldo)</b></summary>
+
+### GLM-4.7 (Reset diario, $0.6/1M)
+
+1. Regístrate: [Zhipu AI](https://open.bigmodel.cn/)
+2. Obtén API key del Plan Coding
+3. Dashboard → Agregar API Key:
+   - Proveedor: `glm`
+   - API Key: `your-key`
+
+**Usa:** `glm/glm-4.7`
+
+**Consejo Pro:** ¡El Plan Coding ofrece 3× cuota a 1/7 del costo! Reset diario 10:00 AM.
+
+### MiniMax M2.1 (Reset 5h, $0.20/1M)
+
+1. Regístrate: [MiniMax](https://www.minimax.io/)
+2. Obtén API key
+3. Dashboard → Agregar API Key
+
+**Usa:** `minimax/MiniMax-M2.1`
+
+**Consejo Pro:** ¡Opción más barata para contexto largo (1M tokens)!
+
+### Kimi K2 ($9/mes fijo)
+
+1. Suscríbete: [Moonshot AI](https://platform.moonshot.ai/)
+2. Obtén API key
+3. Dashboard → Agregar API Key
+
+**Usa:** `kimi/kimi-latest`
+
+**Consejo Pro:** ¡$9/mes fijo por 10M tokens = $0.90/1M de costo efectivo!
+
+</details>
+
+<details>
+<summary><b>🆓 Proveedores GRATUITOS (Respaldo de Emergencia)</b></summary>
+
+### iFlow (8 modelos GRATUITOS)
+
+```bash
+Dashboard → Conectar iFlow
+→ Login OAuth iFlow
+→ Uso ilimitado
+
+Modelos:
+  if/kimi-k2-thinking
+  if/qwen3-coder-plus
+  if/glm-4.7
+  if/minimax-m2
+  if/deepseek-r1
+```
+
+### Qwen (3 modelos GRATUITOS)
+
+```bash
+Dashboard → Conectar Qwen
+→ Autorización por código de dispositivo
+→ Uso ilimitado
+
+Modelos:
+  qw/qwen3-coder-plus
+  qw/qwen3-coder-flash
+```
+
+### Kiro (Claude GRATUITO)
+
+```bash
+Dashboard → Conectar Kiro
+→ AWS Builder ID o Google/GitHub
+→ Uso ilimitado
+
+Modelos:
+  kr/claude-sonnet-4.5
+  kr/claude-haiku-4.5
+```
+
+</details>
+
+<details>
+<summary><b>🎨 Crear Combos</b></summary>
+
+### Ejemplo 1: Maximizar Suscripción → Respaldo Barato
+
+```
+Dashboard → Combos → Crear Nuevo
+
+Nombre: premium-coding
+Modelos:
+  1. cc/claude-opus-4-6 (Suscripción primaria)
+  2. glm/glm-4.7 (Respaldo barato, $0.6/1M)
+  3. minimax/MiniMax-M2.1 (Fallback más barato, $0.20/1M)
+
+Usa en CLI: premium-coding
+```
+
+### Ejemplo 2: Solo Gratuito (Costo Cero)
+
+```
+Nombre: free-combo
+Modelos:
+  1. gc/gemini-3-flash-preview (180K gratis/mes)
+  2. if/kimi-k2-thinking (ilimitado)
+  3. qw/qwen3-coder-plus (ilimitado)
+
+Costo: ¡$0 para siempre!
+```
+
+</details>
+
+<details>
+<summary><b>🔧 Integración CLI</b></summary>
+
+### Cursor IDE
+
+```
+Configuración → Modelos → Avanzado:
+  OpenAI API Base URL: http://localhost:20128/v1
+  OpenAI API Key: [del dashboard OmniRoute]
+  Model: cc/claude-opus-4-6
+```
+
+### Claude Code
+
+Usa la página **CLI Tools** en el dashboard para configuración en un clic, o edita `~/.claude/settings.json` manualmente.
+
+### Codex CLI
+
+```bash
+export OPENAI_BASE_URL="http://localhost:20128"
+export OPENAI_API_KEY="your-omniroute-api-key"
+
+codex "your prompt"
+```
+
+### OpenClaw
+
+**Opción 1 — Dashboard (recomendado):**
+
+```
+Dashboard → CLI Tools → OpenClaw → Seleccionar Modelo → Aplicar
+```
+
+**Opción 2 — Manual:** Edita `~/.openclaw/openclaw.json`:
+
+```json
+{
+  "models": {
+    "providers": {
+      "omniroute": {
+        "baseUrl": "http://127.0.0.1:20128/v1",
+        "apiKey": "sk_omniroute",
+        "api": "openai-completions"
+      }
+    }
+  }
+}
+```
+
+> **Nota:** OpenClaw solo funciona con OmniRoute local. Usa `127.0.0.1` en lugar de `localhost` para evitar problemas de resolución IPv6.
+
+### Cline / Continue / RooCode
+
+```
+Configuración → Configuración de API:
+  Proveedor: OpenAI Compatible
+  Base URL: http://localhost:20128/v1
+  API Key: [del dashboard OmniRoute]
+  Model: if/kimi-k2-thinking
+```
+
+</details>
+
+---
+
+## 📊 Modelos Disponibles
+
+<details>
+<summary><b>Ver todos los modelos disponibles</b></summary>
+
+**Claude Code (`cc/`)** - Pro/Max:
+
+- `cc/claude-opus-4-6`
+- `cc/claude-sonnet-4-5-20250929`
+- `cc/claude-haiku-4-5-20251001`
+
+**Codex (`cx/`)** - Plus/Pro:
+
+- `cx/gpt-5.2-codex`
+- `cx/gpt-5.1-codex-max`
+
+**Gemini CLI (`gc/`)** - GRATUITO:
+
+- `gc/gemini-3-flash-preview`
+- `gc/gemini-2.5-pro`
+
+**GitHub Copilot (`gh/`)**:
+
+- `gh/gpt-5`
+- `gh/claude-4.5-sonnet`
+
+**NVIDIA NIM (`nvidia/`)** - Créditos GRATUITOS:
+
+- `nvidia/llama-3.3-70b-instruct`
+- `nvidia/mistral-7b-instruct`
+- 50+ más modelos en [build.nvidia.com](https://build.nvidia.com)
+
+**GLM (`glm/`)** - $0.6/1M:
+
+- `glm/glm-4.7`
+
+**MiniMax (`minimax/`)** - $0.2/1M:
+
+- `minimax/MiniMax-M2.1`
+
+**iFlow (`if/`)** - GRATUITO:
+
+- `if/kimi-k2-thinking`
+- `if/qwen3-coder-plus`
+- `if/deepseek-r1`
+- `if/glm-4.7`
+- `if/minimax-m2`
+
+**Qwen (`qw/`)** - GRATUITO:
+
+- `qw/qwen3-coder-plus`
+- `qw/qwen3-coder-flash`
+
+**Kiro (`kr/`)** - GRATUITO:
+
+- `kr/claude-sonnet-4.5`
+- `kr/claude-haiku-4.5`
+
+**OpenRouter (`or/`)** - 100+ modelos:
+
+- `or/anthropic/claude-4-sonnet`
+- `or/google/gemini-2.5-pro`
+- Cualquier modelo de [openrouter.ai/models](https://openrouter.ai/models)
+
+</details>
+
+---
+
+## 🧪 Evaluaciones (Evals)
+
+OmniRoute incluye un framework de evaluación integrado para probar la calidad de respuestas de LLM contra un conjunto golden. Accede vía **Analytics → Evals** en el dashboard.
+
+### Conjunto Golden Integrado
+
+El "OmniRoute Golden Set" precargado contiene 10 casos de prueba que cubren:
+
+- Saludos, matemáticas, geografía, generación de código
+- Conformidad de formato JSON, traducción, markdown
+- Rechazo de seguridad (contenido dañino), conteo, lógica booleana
+
+### Estrategias de Evaluación
+
+| Estrategia | Descripción                                          | Ejemplo                          |
+| ---------- | ---------------------------------------------------- | -------------------------------- |
+| `exact`    | La salida debe coincidir exactamente                 | `"4"`                            |
+| `contains` | La salida debe contener subcadena (case-insensitive) | `"Paris"`                        |
+| `regex`    | La salida debe coincidir con el patrón regex         | `"1.*2.*3"`                      |
+| `custom`   | Función JS personalizada retorna true/false          | `(output) => output.length > 10` |
+
+---
+
+## 🐛 Solución de Problemas
+
+<details>
+<summary><b>Haz clic para expandir la guía de solución de problemas</b></summary>
+
+**"Language model did not provide messages"**
+
+- Cuota del proveedor agotada → Verifica el rastreador de cuota en el dashboard
+- Solución: Usa combo con fallback o cambia a tier más barato
+
+**Rate limiting**
+
+- Cuota de suscripción agotada → Fallback a GLM/MiniMax
+- Agrega combo: `cc/claude-opus-4-6 → glm/glm-4.7 → if/kimi-k2-thinking`
+
+**Token OAuth expirado**
+
+- Renovado automáticamente por OmniRoute
+- Si persiste: Dashboard → Proveedor → Reconectar
+
+**Costos altos**
+
+- Verifica estadísticas de uso en Dashboard → Costos
+- Cambia modelo primario a GLM/MiniMax
+- Usa tier gratuito (Gemini CLI, iFlow) para tareas no críticas
+
+**Dashboard se abre en el puerto equivocado**
+
+- Establece `PORT=20128` y `NEXT_PUBLIC_BASE_URL=http://localhost:20128`
+
+**Errores de cloud sync**
+
+- Verifica que `BASE_URL` apunte a tu instancia en ejecución
+- Verifica que `CLOUD_URL` apunte a tu endpoint cloud esperado
+- Mantén los valores `NEXT_PUBLIC_*` alineados con los valores del servidor
+
+**Primer login no funciona**
+
+- Verifica `INITIAL_PASSWORD` en `.env`
+- Si no está definido, la contraseña predeterminada es `123456`
+
+**Sin logs de solicitud**
+
+- Establece `ENABLE_REQUEST_LOGS=true` en `.env`
+
+**Prueba de conexión muestra "Invalid" para proveedores compatibles con OpenAI**
+
+- Muchos proveedores no exponen el endpoint `/models`
+- OmniRoute v1.0.6+ incluye validación vía chat completions como fallback
+- Asegúrate de que la URL base incluya el sufijo `/v1`
+
+</details>
+
+---
+
+## 🛠️ Stack Tecnológico
+
+- **Runtime**: Node.js 20+
+- **Lenguaje**: TypeScript 5.9 — **100% TypeScript** en `src/` y `open-sse/` (v1.0.6)
+- **Framework**: Next.js 16 + React 19 + Tailwind CSS 4
+- **Base de Datos**: LowDB (JSON) + SQLite (estado del dominio + logs de proxy)
+- **Streaming**: Server-Sent Events (SSE)
+- **Auth**: OAuth 2.0 (PKCE) + JWT + API Keys
+- **Testing**: Node.js test runner (368+ tests unitarios)
+- **CI/CD**: GitHub Actions (publicación automática npm + Docker Hub en release)
+- **Website**: [omniroute.online](https://omniroute.online)
+- **Paquete**: [npmjs.com/package/omniroute](https://www.npmjs.com/package/omniroute)
+- **Docker**: [hub.docker.com/r/diegosouzapw/omniroute](https://hub.docker.com/r/diegosouzapw/omniroute)
+- **Resiliencia**: Circuit breaker, backoff exponencial, anti-thundering herd, spoofing TLS
+
+---
+
+## 📖 Documentación
+
+| Documento                                        | Descripción                                        |
+| ------------------------------------------------ | -------------------------------------------------- |
+| [Guía del Usuario](docs/USER_GUIDE.md)           | Proveedores, combos, integración CLI, deploy       |
+| [Referencia de API](docs/API_REFERENCE.md)       | Todos los endpoints con ejemplos                   |
+| [Solución de Problemas](docs/TROUBLESHOOTING.md) | Problemas comunes y soluciones                     |
+| [Arquitectura](docs/ARCHITECTURE.md)             | Arquitectura del sistema e internos                |
+| [Contribuir](CONTRIBUTING.md)                    | Setup de desarrollo y directrices                  |
+| [Spec OpenAPI](docs/openapi.yaml)                | Especificación OpenAPI 3.0                         |
+| [Política de Seguridad](SECURITY.md)             | Reportar vulnerabilidades y prácticas de seguridad |
+
+---
+
+## 📧 Soporte
+
+> 💬 **¡Únete a la comunidad!** [Grupo WhatsApp](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t) — Obtén ayuda, comparte consejos y mantente al día.
+
+- **Website**: [omniroute.online](https://omniroute.online)
+- **GitHub**: [github.com/diegosouzapw/OmniRoute](https://github.com/diegosouzapw/OmniRoute)
+- **Issues**: [github.com/diegosouzapw/OmniRoute/issues](https://github.com/diegosouzapw/OmniRoute/issues)
+- **WhatsApp**: [Grupo de la Comunidad](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
+- **Proyecto Original**: [9router por decolua](https://github.com/decolua/9router)
+
+---
+
+## 👥 Contribuidores
+
+[![Contributors](https://contrib.rocks/image?repo=diegosouzapw/OmniRoute&max=100&columns=20&anon=1)](https://github.com/diegosouzapw/OmniRoute/graphs/contributors)
+
+### Cómo Contribuir
+
+1. Haz fork del repositorio
+2. Crea tu rama de funcionalidad (`git checkout -b feature/amazing-feature`)
+3. Haz commit de tus cambios (`git commit -m 'Add amazing feature'`)
+4. Haz push a la rama (`git push origin feature/amazing-feature`)
+5. Abre un Pull Request
+
+Consulta [CONTRIBUTING.md](CONTRIBUTING.md) para directrices detalladas.
+
+### Lanzar una Nueva Versión
+
+```bash
+# Crea un release — la publicación en npm ocurre automáticamente
+gh release create v1.0.6 --title "v1.0.6" --generate-notes
+```
+
+---
+
+## 📊 Historial de Stars
+
+<a href="https://star-history.com/#diegosouzapw/OmniRoute&Date">
+ <picture>
+   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=diegosouzapw/OmniRoute&type=Date&theme=dark" />
+   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=diegosouzapw/OmniRoute&type=Date" />
+   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=diegosouzapw/OmniRoute&type=Date" />
+ </picture>
+</a>
+
+---
+
+## 🙏 Agradecimientos
+
+Agradecimiento especial a **[9router](https://github.com/decolua/9router)** por **[decolua](https://github.com/decolua)** — el proyecto original que inspiró este fork. OmniRoute se construye sobre esa increíble base con características adicionales, APIs multi-modal y una reescritura completa en TypeScript.
+
+Agradecimiento especial a **[CLIProxyAPI](https://github.com/router-for-me/CLIProxyAPI)** — la implementación original en Go que inspiró esta adaptación a JavaScript.
+
+---
+
+## 📄 Licencia
+
+Licencia MIT - consulta [LICENSE](LICENSE) para detalles.
+
+---
+
+<div align="center">
+  <sub>Hecho con ❤️ para desarrolladores que programan 24/7</sub>
+  <br/>
+  <sub><a href="https://omniroute.online">omniroute.online</a></sub>
+</div>

README.fr.md

@@ -0,0 +1,999 @@
+<div align="center">
+  <img src="./docs/screenshots/MainOmniRoute.png" alt="OmniRoute Dashboard" width="800"/>
+  
+  # 🚀 OmniRoute — La Passerelle IA Gratuite
+
+### N'arrêtez jamais de coder. Routage intelligent vers des **modèles IA GRATUITS et économiques** avec fallback automatique.
+
+_Votre proxy API universel — un endpoint, 36+ fournisseurs, zéro temps d'arrêt._
+
+**Chat Completions • Embeddings • Génération d'images • Audio • Reranking • 100% TypeScript**
+
+---
+
+### 🤖 Fournisseur IA gratuit pour vos agents de programmation préférés
+
+_Connectez n'importe quel IDE ou outil CLI alimenté par l'IA via OmniRoute — passerelle API gratuite pour un codage illimité._
+
+  <table>
+    <tr>
+      <td align="center" width="110">
+        <a href="https://github.com/cline/cline">
+          <img src="./public/providers/openclaw.png" alt="OpenClaw" width="48"/><br/>
+          <b>OpenClaw</b>
+        </a><br/>
+        <sub>⭐ 205K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/HKUDS/nanobot">
+          <img src="./public/providers/nanobot.png" alt="NanoBot" width="48"/><br/>
+          <b>NanoBot</b>
+        </a><br/>
+        <sub>⭐ 20.9K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/sipeed/picoclaw">
+          <img src="./public/providers/picoclaw.jpg" alt="PicoClaw" width="48"/><br/>
+          <b>PicoClaw</b>
+        </a><br/>
+        <sub>⭐ 14.6K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/zeroclaw-labs/zeroclaw">
+          <img src="./public/providers/zeroclaw.png" alt="ZeroClaw" width="48"/><br/>
+          <b>ZeroClaw</b>
+        </a><br/>
+        <sub>⭐ 9.9K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/nearai/ironclaw">
+          <img src="./public/providers/ironclaw.png" alt="IronClaw" width="48"/><br/>
+          <b>IronClaw</b>
+        </a><br/>
+        <sub>⭐ 2.1K</sub>
+      </td>
+    </tr>
+    <tr>
+      <td align="center" width="110">
+        <a href="https://github.com/anomalyco/opencode">
+          <img src="./public/providers/opencode.svg" alt="OpenCode" width="48"/><br/>
+          <b>OpenCode</b>
+        </a><br/>
+        <sub>⭐ 106K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/openai/codex">
+          <img src="./public/providers/codex.png" alt="Codex CLI" width="48"/><br/>
+          <b>Codex CLI</b>
+        </a><br/>
+        <sub>⭐ 60.8K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/anthropics/claude-code">
+          <img src="./public/providers/claude.png" alt="Claude Code" width="48"/><br/>
+          <b>Claude Code</b>
+        </a><br/>
+        <sub>⭐ 67.3K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/google-gemini/gemini-cli">
+          <img src="./public/providers/gemini-cli.png" alt="Gemini CLI" width="48"/><br/>
+          <b>Gemini CLI</b>
+        </a><br/>
+        <sub>⭐ 94.7K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/Kilo-Org/kilocode">
+          <img src="./public/providers/kilocode.png" alt="Kilo Code" width="48"/><br/>
+          <b>Kilo Code</b>
+        </a><br/>
+        <sub>⭐ 15.5K</sub>
+      </td>
+    </tr>
+  </table>
+
+<sub>📡 Tous les agents se connectent via <code>http://localhost:20128/v1</code> ou <code>http://cloud.omniroute.online/v1</code> — une configuration, modèles et quota illimités</sub>
+
+---
+
+[![npm version](https://img.shields.io/npm/v/omniroute?color=cb3837&logo=npm)](https://www.npmjs.com/package/omniroute)
+[![Docker Hub](https://img.shields.io/docker/v/diegosouzapw/omniroute?label=Docker%20Hub&logo=docker&color=2496ED)](https://hub.docker.com/r/diegosouzapw/omniroute)
+[![License](https://img.shields.io/github/license/diegosouzapw/OmniRoute)](https://github.com/diegosouzapw/OmniRoute/blob/main/LICENSE)
+[![Website](https://img.shields.io/badge/Website-omniroute.online-blue?logo=google-chrome&logoColor=white)](https://omniroute.online)
+[![WhatsApp](https://img.shields.io/badge/WhatsApp-Community-25D366?logo=whatsapp&logoColor=white)](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
+
+[🌐 Site web](https://omniroute.online) • [🚀 Démarrage rapide](#-démarrage-rapide) • [💡 Fonctionnalités](#-fonctionnalités-principales) • [📖 Docs](#-documentation) • [💰 Tarifs](#-aperçu-des-tarifs)
+
+🌐 **Disponible en :** [English](README.md) | [Português](README.pt-BR.md) | [Español](README.es.md) | [Русский](README.ru.md) | [中文](README.zh-CN.md) | [Deutsch](README.de.md) | [Français](README.fr.md) | [Italiano](README.it.md)
+
+</div>
+
+---
+
+## 🤔 Pourquoi OmniRoute ?
+
+**Arrêtez de gaspiller de l'argent et de vous heurter aux limites :**
+
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> Le quota d'abonnement expire inutilisé chaque mois
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> Les limites de débit vous arrêtent en plein codage
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> APIs coûteuses (20-50 $/mois par fournisseur)
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> Changement manuel entre fournisseurs
+
+**OmniRoute résout ces problèmes :**
+
+- ✅ **Maximisez les abonnements** — Suivez les quotas, utilisez chaque bit avant la réinitialisation
+- ✅ **Fallback automatique** — Abonnement → Clé API → Économique → Gratuit, zéro temps d'arrêt
+- ✅ **Multi-comptes** — Round-robin entre les comptes par fournisseur
+- ✅ **Universel** — Fonctionne avec Claude Code, Codex, Gemini CLI, Cursor, Cline, OpenClaw, tout outil CLI
+
+---
+
+## 🔄 Comment ça fonctionne
+
+```
+┌─────────────┐
+│  Votre CLI  │  (Claude Code, Codex, Gemini CLI, OpenClaw, Cursor, Cline...)
+│   Tool      │
+└──────┬──────┘
+       │ http://localhost:20128/v1
+       ↓
+┌─────────────────────────────────────────┐
+│        OmniRoute (Routeur intelligent)   │
+│  • Traduction de format (OpenAI ↔ Claude) │
+│  • Suivi des quotas + Embeddings + Images │
+│  • Renouvellement automatique des tokens   │
+└──────┬──────────────────────────────────┘
+       │
+       ├─→ [Tier 1: ABONNEMENT] Claude Code, Codex, Gemini CLI
+       │   ↓ quota épuisé
+       ├─→ [Tier 2: CLÉ API] DeepSeek, Groq, xAI, Mistral, NVIDIA NIM, etc.
+       │   ↓ limite de budget
+       ├─→ [Tier 3: ÉCONOMIQUE] GLM ($0.6/1M), MiniMax ($0.2/1M)
+       │   ↓ limite de budget
+       └─→ [Tier 4: GRATUIT] iFlow, Qwen, Kiro (illimité)
+
+Résultat : Ne jamais arrêter de coder, coût minimal
+```
+
+---
+
+## ⚡ Démarrage rapide
+
+**1. Installer globalement :**
+
+```bash
+npm install -g omniroute
+omniroute
+```
+
+🎉 Le tableau de bord s'ouvre sur `http://localhost:20128`
+
+| Commande                | Description                                 |
+| ----------------------- | ------------------------------------------- |
+| `omniroute`             | Démarrer le serveur (port par défaut 20128) |
+| `omniroute --port 3000` | Utiliser un port personnalisé               |
+| `omniroute --no-open`   | Ne pas ouvrir le navigateur automatiquement |
+| `omniroute --help`      | Afficher l'aide                             |
+
+**2. Connecter un fournisseur GRATUIT :**
+
+Tableau de bord → Fournisseurs → Connecter **Claude Code** ou **Antigravity** → Connexion OAuth → Terminé !
+
+**3. Utiliser dans votre outil CLI :**
+
+```
+Claude Code/Codex/Gemini CLI/OpenClaw/Cursor/Cline Paramètres :
+  Endpoint : http://localhost:20128/v1
+  API Key : [copier depuis le tableau de bord]
+  Model : if/kimi-k2-thinking
+```
+
+**C'est tout !** Commencez à coder avec des modèles IA GRATUITS.
+
+**Alternative — exécuter depuis le code source :**
+
+```bash
+cp .env.example .env
+npm install
+PORT=20128 NEXT_PUBLIC_BASE_URL=http://localhost:20128 npm run dev
+```
+
+---
+
+## 🐳 Docker
+
+OmniRoute est disponible en tant qu'image Docker publique sur [Docker Hub](https://hub.docker.com/r/diegosouzapw/omniroute).
+
+**Démarrage rapide :**
+
+```bash
+docker run -d \
+  --name omniroute \
+  --restart unless-stopped \
+  -p 20128:20128 \
+  -v omniroute-data:/app/data \
+  diegosouzapw/omniroute:latest
+```
+
+**Avec fichier d'environnement :**
+
+```bash
+# Copier et modifier le .env d'abord
+cp .env.example .env
+
+docker run -d \
+  --name omniroute \
+  --restart unless-stopped \
+  --env-file .env \
+  -p 20128:20128 \
+  -v omniroute-data:/app/data \
+  diegosouzapw/omniroute:latest
+```
+
+**Avec Docker Compose :**
+
+```bash
+# Profil de base (sans outils CLI)
+docker compose --profile base up -d
+
+# Profil CLI (Claude Code, Codex, OpenClaw intégrés)
+docker compose --profile cli up -d
+```
+
+| Image                    | Tag      | Taille | Description             |
+| ------------------------ | -------- | ------ | ----------------------- |
+| `diegosouzapw/omniroute` | `latest` | ~250MB | Dernière version stable |
+| `diegosouzapw/omniroute` | `1.0.6`  | ~250MB | Version actuelle        |
+
+---
+
+## 💰 Aperçu des tarifs
+
+| Tier              | Fournisseur       | Coût                       | Réinitialisation    | Idéal pour                    |
+| ----------------- | ----------------- | -------------------------- | ------------------- | ----------------------------- |
+| **💳 ABONNEMENT** | Claude Code (Pro) | 20 $/mois                  | 5h + hebdomadaire   | Déjà abonné                   |
+|                   | Codex (Plus/Pro)  | 20-200 $/mois              | 5h + hebdomadaire   | Utilisateurs OpenAI           |
+|                   | Gemini CLI        | **GRATUIT**                | 180K/mois + 1K/jour | Tout le monde !               |
+|                   | GitHub Copilot    | 10-19 $/mois               | Mensuel             | Utilisateurs GitHub           |
+| **🔑 CLÉ API**    | NVIDIA NIM        | **GRATUIT** (1000 crédits) | Unique              | Tests gratuits                |
+|                   | DeepSeek          | À l'usage                  | Aucune              | Meilleur rapport qualité-prix |
+|                   | Groq              | Niveau gratuit + payant    | Limité              | Inférence ultra-rapide        |
+|                   | xAI (Grok)        | À l'usage                  | Aucune              | Modèles Grok                  |
+|                   | Mistral           | Niveau gratuit + payant    | Limité              | IA européenne                 |
+|                   | OpenRouter        | À l'usage                  | Aucune              | 100+ modèles                  |
+| **💰 ÉCONOMIQUE** | GLM-4.7           | 0,6 $/1M                   | Quotidien 10h       | Backup économique             |
+|                   | MiniMax M2.1      | 0,2 $/1M                   | Rotatif 5h          | Option la moins chère         |
+|                   | Kimi K2           | 9 $/mois fixe              | 10M tokens/mois     | Coût prévisible               |
+| **🆓 GRATUIT**    | iFlow             | 0 $                        | Illimité            | 8 modèles gratuits            |
+|                   | Qwen              | 0 $                        | Illimité            | 3 modèles gratuits            |
+|                   | Kiro              | 0 $                        | Illimité            | Claude gratuit                |
+
+**💡 Conseil Pro :** Commencez avec Gemini CLI (180K gratuits/mois) + iFlow (illimité gratuit) = 0 $ de coût !
+
+---
+
+## 🎯 Cas d'utilisation
+
+### Cas 1 : « J'ai un abonnement Claude Pro »
+
+**Problème :** Le quota expire inutilisé, limites de débit pendant le codage intensif
+
+```
+Combo : "maximize-claude"
+  1. cc/claude-opus-4-6        (utiliser l'abonnement au maximum)
+  2. glm/glm-4.7               (backup économique quand le quota est épuisé)
+  3. if/kimi-k2-thinking       (fallback d'urgence gratuit)
+
+Coût mensuel : 20 $ (abonnement) + ~5 $ (backup) = 25 $ au total
+vs. 20 $ + atteindre les limites = frustration
+```
+
+### Cas 2 : « Je veux zéro coût »
+
+**Problème :** Impossible de payer des abonnements, besoin d'IA fiable pour coder
+
+```
+Combo : "free-forever"
+  1. gc/gemini-3-flash         (180K gratuits/mois)
+  2. if/kimi-k2-thinking       (illimité gratuit)
+  3. qw/qwen3-coder-plus       (illimité gratuit)
+
+Coût mensuel : 0 $
+Qualité : Modèles prêts pour la production
+```
+
+### Cas 3 : « Je dois coder 24/7, sans interruption »
+
+**Problème :** Délais serrés, ne peut pas se permettre de temps d'arrêt
+
+```
+Combo : "always-on"
+  1. cc/claude-opus-4-6        (meilleure qualité)
+  2. cx/gpt-5.2-codex          (deuxième abonnement)
+  3. glm/glm-4.7               (économique, reset quotidien)
+  4. minimax/MiniMax-M2.1      (le moins cher, reset 5h)
+  5. if/kimi-k2-thinking       (gratuit illimité)
+
+Résultat : 5 niveaux de fallback = zéro temps d'arrêt
+```
+
+### Cas 4 : « Je veux l'IA GRATUITE dans OpenClaw »
+
+**Problème :** Besoin d'assistant IA dans les apps de messagerie, entièrement gratuit
+
+```
+Combo : "openclaw-free"
+  1. if/glm-4.7                (illimité gratuit)
+  2. if/minimax-m2.1           (illimité gratuit)
+  3. if/kimi-k2-thinking       (illimité gratuit)
+
+Coût mensuel : 0 $
+Accès via : WhatsApp, Telegram, Slack, Discord, iMessage, Signal...
+```
+
+---
+
+## 💡 Fonctionnalités principales
+
+### 🧠 Routage & Intelligence
+
+| Fonctionnalité                        | Ce qu'elle fait                                                                 |
+| ------------------------------------- | ------------------------------------------------------------------------------- |
+| 🎯 **Fallback intelligent 4 niveaux** | Auto-routage : Abonnement → Clé API → Économique → Gratuit                      |
+| 📊 **Suivi des quotas en temps réel** | Comptage de tokens en direct + compte à rebours de réinitialisation             |
+| 🔄 **Traduction de format**           | OpenAI ↔ Claude ↔ Gemini ↔ Cursor ↔ Kiro transparent                            |
+| 👥 **Support multi-comptes**          | Plusieurs comptes par fournisseur avec sélection intelligente                   |
+| 🔄 **Renouvellement auto des tokens** | Les tokens OAuth se renouvellent automatiquement avec retry                     |
+| 🎨 **Combos personnalisés**           | 6 stratégies : fill-first, round-robin, p2c, random, least-used, cost-optimized |
+| 🧩 **Modèles personnalisés**          | Ajoutez n'importe quel ID de modèle à n'importe quel fournisseur                |
+| 🌐 **Routeur wildcard**               | Routez les patterns `provider/*` vers n'importe quel fournisseur dynamiquement  |
+| 🧠 **Budget de raisonnement**         | Modes passthrough, auto, custom et adaptive pour les modèles de raisonnement    |
+| 💬 **Injection System Prompt**        | System prompt global appliqué à toutes les requêtes                             |
+| 📄 **API Responses**                  | Support complet de l'API Responses d'OpenAI (`/v1/responses`) pour Codex        |
+
+### 🎵 APIs multi-modales
+
+| Fonctionnalité             | Ce qu'elle fait                                         |
+| -------------------------- | ------------------------------------------------------- |
+| 🖼️ **Génération d'images** | `/v1/images/generations` — 4 fournisseurs, 9+ modèles   |
+| 📐 **Embeddings**          | `/v1/embeddings` — 6 fournisseurs, 9+ modèles           |
+| 🎤 **Transcription audio** | `/v1/audio/transcriptions` — compatible Whisper         |
+| 🔊 **Texte vers parole**   | `/v1/audio/speech` — synthèse audio multi-fournisseur   |
+| 🛡️ **Modérations**         | `/v1/moderations` — vérifications de sécurité           |
+| 🔀 **Reranking**           | `/v1/rerank` — reclassement de pertinence des documents |
+
+### 🛡️ Résilience & Sécurité
+
+| Fonctionnalité                  | Ce qu'elle fait                                                      |
+| ------------------------------- | -------------------------------------------------------------------- |
+| 🔌 **Circuit Breaker**          | Ouverture/fermeture auto par fournisseur avec seuils configurables   |
+| 🛡️ **Anti-Thundering Herd**     | Mutex + sémaphore de rate-limit pour les fournisseurs avec clé API   |
+| 🧠 **Cache sémantique**         | Cache à deux niveaux (signature + sémantique) réduit coût et latence |
+| ⚡ **Idempotence des requêtes** | Fenêtre de dédup 5s pour les requêtes dupliquées                     |
+| 🔒 **Spoofing TLS Fingerprint** | Contournement de détection de bot via wreq-js                        |
+| 🌐 **Filtrage IP**              | Allowlist/blocklist pour le contrôle d'accès API                     |
+| 📊 **Rate limits éditables**    | RPM configurable, intervalle minimum, concurrence max                |
+
+### 📊 Observabilité & Analytique
+
+| Fonctionnalité                    | Ce qu'elle fait                                                           |
+| --------------------------------- | ------------------------------------------------------------------------- |
+| 📝 **Logs de requêtes**           | Mode debug avec logs complets requête/réponse                             |
+| 💾 **Logs SQLite**                | Logs proxy persistants survivant aux redémarrages                         |
+| 📊 **Tableau de bord analytique** | Recharts : cartes de stats, graphique d'utilisation, tableau fournisseurs |
+| 📈 **Suivi de progression**       | Événements SSE de progression opt-in pour le streaming                    |
+| 🧪 **Évaluations LLM**            | Tests avec golden set et 4 stratégies de correspondance                   |
+| 🔍 **Télémétrie des requêtes**    | Agrégation de latence p50/p95/p99 + traçage X-Request-Id                  |
+| 📋 **Logs + Quotas**              | Pages dédiées pour navigation des logs et suivi des quotas                |
+| 🏥 **Tableau de bord santé**      | Uptime, états circuit breaker, lockouts, stats cache                      |
+| 💰 **Suivi des coûts**            | Gestion de budget + configuration des prix par modèle                     |
+
+### ☁️ Déploiement & Synchronisation
+
+| Fonctionnalité                    | Ce qu'elle fait                                                                 |
+| --------------------------------- | ------------------------------------------------------------------------------- |
+| 💾 **Cloud Sync**                 | Synchroniser les paramètres entre appareils via Cloudflare Workers              |
+| 🌐 **Déployer partout**           | Localhost, VPS, Docker, Cloudflare Workers                                      |
+| 🔑 **Gestion des clés API**       | Générer, faire tourner et limiter les clés API par fournisseur                  |
+| 🧙 **Assistant de configuration** | Setup guidé en 4 étapes pour les nouveaux utilisateurs                          |
+| 🔧 **Tableau de bord CLI Tools**  | Configuration en un clic pour Claude, Codex, Cline, OpenClaw, Kilo, Antigravity |
+| 🔄 **Sauvegardes DB**             | Sauvegarde et restauration automatiques de tous les paramètres                  |
+
+<details>
+<summary><b>📖 Détails des fonctionnalités</b></summary>
+
+### 🎯 Fallback intelligent 4 niveaux
+
+Créez des combos avec fallback automatique :
+
+```
+Combo : "my-coding-stack"
+  1. cc/claude-opus-4-6        (votre abonnement)
+  2. nvidia/llama-3.3-70b      (API NVIDIA gratuite)
+  3. glm/glm-4.7               (backup économique, $0.6/1M)
+  4. if/kimi-k2-thinking       (fallback gratuit)
+
+→ Bascule automatiquement lorsque le quota est épuisé ou en cas d'erreurs
+```
+
+### 📊 Suivi des quotas en temps réel
+
+- Consommation de tokens par fournisseur
+- Compte à rebours de réinitialisation (5 heures, quotidien, hebdomadaire)
+- Estimation des coûts pour les niveaux payants
+- Rapports de dépenses mensuels
+
+### 🔄 Traduction de format
+
+Traduction transparente entre les formats :
+
+- **OpenAI** ↔ **Claude** ↔ **Gemini** ↔ **OpenAI Responses**
+- Votre CLI envoie le format OpenAI → OmniRoute traduit → Le fournisseur reçoit le format natif
+- Fonctionne avec tout outil supportant les endpoints OpenAI personnalisés
+
+### 👥 Support multi-comptes
+
+- Ajouter plusieurs comptes par fournisseur
+- Round-robin automatique ou routage par priorité
+- Basculement vers le compte suivant lorsqu'un quota est atteint
+
+### 🔄 Renouvellement automatique des tokens
+
+- Les tokens OAuth se renouvellent automatiquement avant expiration
+- Pas de réauthentification manuelle nécessaire
+- Expérience transparente sur tous les fournisseurs
+
+### 🎨 Combos personnalisés
+
+- Créer des combinaisons de modèles illimitées
+- 6 stratégies : fill-first, round-robin, power-of-two-choices, random, least-used, cost-optimized
+- Partager les combos entre appareils avec Cloud Sync
+
+### 🏥 Tableau de bord santé
+
+- Statut du système (uptime, version, utilisation mémoire)
+- États des circuit breakers par fournisseur (Closed/Open/Half-Open)
+- Statut des rate limits et lockouts actifs
+- Statistiques du cache de signatures
+- Télémétrie de latence (p50/p95/p99) + cache de prompt
+- Réinitialisation de la santé en un clic
+
+### 🔧 Playground du traducteur
+
+- Déboguer, tester et visualiser les traductions de format d'API
+- Envoyer des requêtes et voir comment OmniRoute traduit entre les formats des fournisseurs
+- Inestimable pour résoudre les problèmes d'intégration
+
+### 💾 Cloud Sync
+
+- Synchroniser fournisseurs, combos et paramètres entre appareils
+- Synchronisation en arrière-plan automatique
+- Stockage chiffré sécurisé
+
+</details>
+
+---
+
+## 📖 Guide de configuration
+
+<details>
+<summary><b>💳 Fournisseurs par abonnement</b></summary>
+
+### Claude Code (Pro/Max)
+
+```bash
+Tableau de bord → Fournisseurs → Connecter Claude Code
+→ Connexion OAuth → Renouvellement auto des tokens
+→ Suivi de quota 5h + hebdomadaire
+
+Modèles :
+  cc/claude-opus-4-6
+  cc/claude-sonnet-4-5-20250929
+  cc/claude-haiku-4-5-20251001
+```
+
+**Conseil Pro :** Utilisez Opus pour les tâches complexes, Sonnet pour la vitesse. OmniRoute suit les quotas par modèle !
+
+### OpenAI Codex (Plus/Pro)
+
+```bash
+Tableau de bord → Fournisseurs → Connecter Codex
+→ Connexion OAuth (port 1455)
+→ Reset 5h + hebdomadaire
+
+Modèles :
+  cx/gpt-5.2-codex
+  cx/gpt-5.1-codex-max
+```
+
+### Gemini CLI (GRATUIT 180K/mois !)
+
+```bash
+Tableau de bord → Fournisseurs → Connecter Gemini CLI
+→ Google OAuth
+→ 180K completions/mois + 1K/jour
+
+Modèles :
+  gc/gemini-3-flash-preview
+  gc/gemini-2.5-pro
+```
+
+**Meilleure valeur :** Niveau gratuit énorme ! Utilisez avant les niveaux payants.
+
+### GitHub Copilot
+
+```bash
+Tableau de bord → Fournisseurs → Connecter GitHub
+→ OAuth via GitHub
+→ Reset mensuel (1er du mois)
+
+Modèles :
+  gh/gpt-5
+  gh/claude-4.5-sonnet
+  gh/gemini-3-pro
+```
+
+</details>
+
+<details>
+<summary><b>🔑 Fournisseurs par clé API</b></summary>
+
+### NVIDIA NIM (GRATUIT 1000 crédits !)
+
+1. S'inscrire : [build.nvidia.com](https://build.nvidia.com)
+2. Obtenir une clé API gratuite (1000 crédits d'inférence inclus)
+3. Tableau de bord → Ajouter fournisseur → NVIDIA NIM :
+   - API Key : `nvapi-your-key`
+
+**Modèles :** `nvidia/llama-3.3-70b-instruct`, `nvidia/mistral-7b-instruct` et 50+ autres
+
+**Conseil Pro :** API compatible OpenAI — fonctionne parfaitement avec la traduction de format d'OmniRoute !
+
+### DeepSeek
+
+1. S'inscrire : [platform.deepseek.com](https://platform.deepseek.com)
+2. Obtenir une clé API
+3. Tableau de bord → Ajouter fournisseur → DeepSeek
+
+**Modèles :** `deepseek/deepseek-chat`, `deepseek/deepseek-coder`
+
+### Groq (Niveau gratuit disponible !)
+
+1. S'inscrire : [console.groq.com](https://console.groq.com)
+2. Obtenir une clé API (niveau gratuit inclus)
+3. Tableau de bord → Ajouter fournisseur → Groq
+
+**Modèles :** `groq/llama-3.3-70b`, `groq/mixtral-8x7b`
+
+**Conseil Pro :** Inférence ultra-rapide — idéal pour le codage en temps réel !
+
+### OpenRouter (100+ modèles)
+
+1. S'inscrire : [openrouter.ai](https://openrouter.ai)
+2. Obtenir une clé API
+3. Tableau de bord → Ajouter fournisseur → OpenRouter
+
+**Modèles :** Accès à 100+ modèles de tous les grands fournisseurs via une seule clé API.
+
+</details>
+
+<details>
+<summary><b>💰 Fournisseurs économiques (Backup)</b></summary>
+
+### GLM-4.7 (Reset quotidien, $0.6/1M)
+
+1. S'inscrire : [Zhipu AI](https://open.bigmodel.cn/)
+2. Obtenir une clé API du Coding Plan
+3. Tableau de bord → Ajouter clé API :
+   - Fournisseur : `glm`
+   - API Key : `your-key`
+
+**Utilisez :** `glm/glm-4.7`
+
+**Conseil Pro :** Le Coding Plan offre 3× le quota à 1/7 du coût ! Reset quotidien à 10h.
+
+### MiniMax M2.1 (Reset 5h, $0.20/1M)
+
+1. S'inscrire : [MiniMax](https://www.minimax.io/)
+2. Obtenir une clé API
+3. Tableau de bord → Ajouter clé API
+
+**Utilisez :** `minimax/MiniMax-M2.1`
+
+**Conseil Pro :** L'option la moins chère pour le contexte long (1M tokens) !
+
+### Kimi K2 (9 $/mois fixe)
+
+1. S'abonner : [Moonshot AI](https://platform.moonshot.ai/)
+2. Obtenir une clé API
+3. Tableau de bord → Ajouter clé API
+
+**Utilisez :** `kimi/kimi-latest`
+
+**Conseil Pro :** 9 $/mois fixe pour 10M tokens = 0,90 $/1M de coût effectif !
+
+</details>
+
+<details>
+<summary><b>🆓 Fournisseurs GRATUITS (Backup d'urgence)</b></summary>
+
+### iFlow (8 modèles GRATUITS)
+
+```bash
+Tableau de bord → Connecter iFlow
+→ Connexion OAuth iFlow
+→ Utilisation illimitée
+
+Modèles :
+  if/kimi-k2-thinking
+  if/qwen3-coder-plus
+  if/glm-4.7
+  if/minimax-m2
+  if/deepseek-r1
+```
+
+### Qwen (3 modèles GRATUITS)
+
+```bash
+Tableau de bord → Connecter Qwen
+→ Autorisation par code d'appareil
+→ Utilisation illimitée
+
+Modèles :
+  qw/qwen3-coder-plus
+  qw/qwen3-coder-flash
+```
+
+### Kiro (Claude GRATUIT)
+
+```bash
+Tableau de bord → Connecter Kiro
+→ AWS Builder ID ou Google/GitHub
+→ Utilisation illimitée
+
+Modèles :
+  kr/claude-sonnet-4.5
+  kr/claude-haiku-4.5
+```
+
+</details>
+
+<details>
+<summary><b>🎨 Créer des combos</b></summary>
+
+### Exemple 1 : Maximiser l'abonnement → Backup économique
+
+```
+Tableau de bord → Combos → Créer nouveau
+
+Nom : premium-coding
+Modèles :
+  1. cc/claude-opus-4-6 (Abonnement principal)
+  2. glm/glm-4.7 (Backup économique, $0.6/1M)
+  3. minimax/MiniMax-M2.1 (Fallback le moins cher, $0.20/1M)
+
+Utilisez en CLI : premium-coding
+```
+
+### Exemple 2 : Gratuit uniquement (Zéro coût)
+
+```
+Nom : free-combo
+Modèles :
+  1. gc/gemini-3-flash-preview (180K gratuits/mois)
+  2. if/kimi-k2-thinking (illimité)
+  3. qw/qwen3-coder-plus (illimité)
+
+Coût : 0 $ pour toujours !
+```
+
+</details>
+
+<details>
+<summary><b>🔧 Intégration CLI</b></summary>
+
+### Cursor IDE
+
+```
+Paramètres → Modèles → Avancé :
+  OpenAI API Base URL : http://localhost:20128/v1
+  OpenAI API Key : [du tableau de bord OmniRoute]
+  Model : cc/claude-opus-4-6
+```
+
+### Claude Code
+
+Utilisez la page **CLI Tools** dans le tableau de bord pour la configuration en un clic, ou modifiez `~/.claude/settings.json` manuellement.
+
+### Codex CLI
+
+```bash
+export OPENAI_BASE_URL="http://localhost:20128"
+export OPENAI_API_KEY="your-omniroute-api-key"
+
+codex "your prompt"
+```
+
+### OpenClaw
+
+**Option 1 — Tableau de bord (recommandé) :**
+
+```
+Tableau de bord → CLI Tools → OpenClaw → Sélectionner modèle → Appliquer
+```
+
+**Option 2 — Manuel :** Modifier `~/.openclaw/openclaw.json` :
+
+```json
+{
+  "models": {
+    "providers": {
+      "omniroute": {
+        "baseUrl": "http://127.0.0.1:20128/v1",
+        "apiKey": "sk_omniroute",
+        "api": "openai-completions"
+      }
+    }
+  }
+}
+```
+
+> **Note :** OpenClaw fonctionne uniquement avec OmniRoute local. Utilisez `127.0.0.1` au lieu de `localhost` pour éviter les problèmes de résolution IPv6.
+
+### Cline / Continue / RooCode
+
+```
+Paramètres → Configuration API :
+  Fournisseur : OpenAI Compatible
+  Base URL : http://localhost:20128/v1
+  API Key : [du tableau de bord OmniRoute]
+  Model : if/kimi-k2-thinking
+```
+
+</details>
+
+---
+
+## 📊 Modèles disponibles
+
+<details>
+<summary><b>Voir tous les modèles disponibles</b></summary>
+
+**Claude Code (`cc/`)** - Pro/Max :
+
+- `cc/claude-opus-4-6`
+- `cc/claude-sonnet-4-5-20250929`
+- `cc/claude-haiku-4-5-20251001`
+
+**Codex (`cx/`)** - Plus/Pro :
+
+- `cx/gpt-5.2-codex`
+- `cx/gpt-5.1-codex-max`
+
+**Gemini CLI (`gc/`)** - GRATUIT :
+
+- `gc/gemini-3-flash-preview`
+- `gc/gemini-2.5-pro`
+
+**GitHub Copilot (`gh/`)** :
+
+- `gh/gpt-5`
+- `gh/claude-4.5-sonnet`
+
+**NVIDIA NIM (`nvidia/`)** - Crédits GRATUITS :
+
+- `nvidia/llama-3.3-70b-instruct`
+- `nvidia/mistral-7b-instruct`
+- 50+ modèles sur [build.nvidia.com](https://build.nvidia.com)
+
+**GLM (`glm/`)** - $0.6/1M :
+
+- `glm/glm-4.7`
+
+**MiniMax (`minimax/`)** - $0.2/1M :
+
+- `minimax/MiniMax-M2.1`
+
+**iFlow (`if/`)** - GRATUIT :
+
+- `if/kimi-k2-thinking`
+- `if/qwen3-coder-plus`
+- `if/deepseek-r1`
+- `if/glm-4.7`
+- `if/minimax-m2`
+
+**Qwen (`qw/`)** - GRATUIT :
+
+- `qw/qwen3-coder-plus`
+- `qw/qwen3-coder-flash`
+
+**Kiro (`kr/`)** - GRATUIT :
+
+- `kr/claude-sonnet-4.5`
+- `kr/claude-haiku-4.5`
+
+**OpenRouter (`or/`)** - 100+ modèles :
+
+- `or/anthropic/claude-4-sonnet`
+- `or/google/gemini-2.5-pro`
+- Tout modèle de [openrouter.ai/models](https://openrouter.ai/models)
+
+</details>
+
+---
+
+## 🧪 Évaluations (Evals)
+
+OmniRoute inclut un framework d'évaluation intégré pour tester la qualité des réponses LLM contre un golden set. Accès via **Analytics → Evals** dans le tableau de bord.
+
+### Golden Set intégré
+
+Le « OmniRoute Golden Set » préchargé contient 10 cas de test :
+
+- Salutations, mathématiques, géographie, génération de code
+- Conformité format JSON, traduction, markdown
+- Rejet de sécurité (contenu nocif), comptage, logique booléenne
+
+### Stratégies d'évaluation
+
+| Stratégie  | Description                                                    | Exemple                          |
+| ---------- | -------------------------------------------------------------- | -------------------------------- |
+| `exact`    | La sortie doit correspondre exactement                         | `"4"`                            |
+| `contains` | La sortie doit contenir la sous-chaîne (insensible à la casse) | `"Paris"`                        |
+| `regex`    | La sortie doit correspondre au motif regex                     | `"1.*2.*3"`                      |
+| `custom`   | Fonction JS personnalisée retourne true/false                  | `(output) => output.length > 10` |
+
+---
+
+## 🐛 Dépannage
+
+<details>
+<summary><b>Cliquez pour développer le guide de dépannage</b></summary>
+
+**« Language model did not provide messages »**
+
+- Quota du fournisseur épuisé → Vérifiez le suivi de quota dans le tableau de bord
+- Solution : Utilisez un combo avec fallback ou passez à un niveau moins cher
+
+**Rate limiting**
+
+- Quota d'abonnement épuisé → Fallback vers GLM/MiniMax
+- Ajoutez un combo : `cc/claude-opus-4-6 → glm/glm-4.7 → if/kimi-k2-thinking`
+
+**Token OAuth expiré**
+
+- Renouvelé automatiquement par OmniRoute
+- Si le problème persiste : Tableau de bord → Fournisseur → Reconnecter
+
+**Coûts élevés**
+
+- Vérifiez les statistiques d'utilisation dans Tableau de bord → Coûts
+- Changez le modèle principal pour GLM/MiniMax
+- Utilisez le niveau gratuit (Gemini CLI, iFlow) pour les tâches non critiques
+
+**Le tableau de bord s'ouvre sur le mauvais port**
+
+- Définissez `PORT=20128` et `NEXT_PUBLIC_BASE_URL=http://localhost:20128`
+
+**Erreurs de cloud sync**
+
+- Vérifiez que `BASE_URL` pointe vers votre instance en cours d'exécution
+- Vérifiez que `CLOUD_URL` pointe vers le point de terminaison cloud attendu
+- Gardez les valeurs `NEXT_PUBLIC_*` alignées avec les valeurs du serveur
+
+**Le premier login ne fonctionne pas**
+
+- Vérifiez `INITIAL_PASSWORD` dans `.env`
+- Si non défini, le mot de passe par défaut est `123456`
+
+**Pas de logs de requêtes**
+
+- Définissez `ENABLE_REQUEST_LOGS=true` dans `.env`
+
+**Le test de connexion affiche « Invalid » pour les fournisseurs compatibles OpenAI**
+
+- Beaucoup de fournisseurs n'exposent pas le point de terminaison `/models`
+- OmniRoute v1.0.6+ inclut une validation de secours via chat completions
+- Assurez-vous que l'URL de base inclut le suffixe `/v1`
+
+</details>
+
+---
+
+## 🛠️ Stack technologique
+
+- **Runtime** : Node.js 20+
+- **Langage** : TypeScript 5.9 — **100% TypeScript** dans `src/` et `open-sse/` (v1.0.6)
+- **Framework** : Next.js 16 + React 19 + Tailwind CSS 4
+- **Base de données** : LowDB (JSON) + SQLite (état du domaine + logs proxy)
+- **Streaming** : Server-Sent Events (SSE)
+- **Auth** : OAuth 2.0 (PKCE) + JWT + API Keys
+- **Tests** : Node.js test runner (368+ tests unitaires)
+- **CI/CD** : GitHub Actions (publication automatique npm + Docker Hub lors du release)
+- **Site web** : [omniroute.online](https://omniroute.online)
+- **Package** : [npmjs.com/package/omniroute](https://www.npmjs.com/package/omniroute)
+- **Docker** : [hub.docker.com/r/diegosouzapw/omniroute](https://hub.docker.com/r/diegosouzapw/omniroute)
+- **Résilience** : Circuit breaker, backoff exponentiel, anti-thundering herd, spoofing TLS
+
+---
+
+## 📖 Documentation
+
+| Document                                   | Description                                         |
+| ------------------------------------------ | --------------------------------------------------- |
+| [Guide utilisateur](docs/USER_GUIDE.md)    | Fournisseurs, combos, intégration CLI, déploiement  |
+| [Référence API](docs/API_REFERENCE.md)     | Tous les endpoints avec exemples                    |
+| [Dépannage](docs/TROUBLESHOOTING.md)       | Problèmes courants et solutions                     |
+| [Architecture](docs/ARCHITECTURE.md)       | Architecture système et détails internes            |
+| [Contribuer](CONTRIBUTING.md)              | Configuration de développement et directives        |
+| [Spécification OpenAPI](docs/openapi.yaml) | Spécification OpenAPI 3.0                           |
+| [Politique de sécurité](SECURITY.md)       | Signalement de vulnérabilités et pratiques sécurité |
+
+---
+
+## 📧 Support
+
+> 💬 **Rejoignez notre communauté !** [Groupe WhatsApp](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t) — Obtenez de l'aide, partagez des astuces et restez informé.
+
+- **Site web** : [omniroute.online](https://omniroute.online)
+- **GitHub** : [github.com/diegosouzapw/OmniRoute](https://github.com/diegosouzapw/OmniRoute)
+- **Issues** : [github.com/diegosouzapw/OmniRoute/issues](https://github.com/diegosouzapw/OmniRoute/issues)
+- **WhatsApp** : [Groupe communautaire](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
+- **Projet original** : [9router par decolua](https://github.com/decolua/9router)
+
+---
+
+## 👥 Contributeurs
+
+[![Contributors](https://contrib.rocks/image?repo=diegosouzapw/OmniRoute&max=100&columns=20&anon=1)](https://github.com/diegosouzapw/OmniRoute/graphs/contributors)
+
+### Comment contribuer
+
+1. Forkez le dépôt
+2. Créez votre branche de fonctionnalité (`git checkout -b feature/amazing-feature`)
+3. Committez vos changements (`git commit -m 'Add amazing feature'`)
+4. Poussez vers la branche (`git push origin feature/amazing-feature`)
+5. Ouvrez une Pull Request
+
+Consultez [CONTRIBUTING.md](CONTRIBUTING.md) pour les directives détaillées.
+
+### Publier une nouvelle version
+
+```bash
+# Créer un release — la publication npm est automatique
+gh release create v1.0.6 --title "v1.0.6" --generate-notes
+```
+
+---
+
+## 📊 Historique des Stars
+
+<a href="https://star-history.com/#diegosouzapw/OmniRoute&Date">
+ <picture>
+   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=diegosouzapw/OmniRoute&type=Date&theme=dark" />
+   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=diegosouzapw/OmniRoute&type=Date" />
+   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=diegosouzapw/OmniRoute&type=Date" />
+ </picture>
+</a>
+
+---
+
+## 🙏 Remerciements
+
+Remerciements spéciaux à **[9router](https://github.com/decolua/9router)** par **[decolua](https://github.com/decolua)** — le projet original qui a inspiré ce fork. OmniRoute construit sur cette base incroyable avec des fonctionnalités supplémentaires, des APIs multi-modales et une réécriture complète en TypeScript.
+
+Remerciements spéciaux à **[CLIProxyAPI](https://github.com/router-for-me/CLIProxyAPI)** — l'implémentation originale en Go qui a inspiré ce portage en JavaScript.
+
+---
+
+## 📄 Licence
+
+Licence MIT — voir [LICENSE](LICENSE) pour les détails.
+
+---
+
+<div align="center">
+  <sub>Fait avec ❤️ pour les développeurs qui codent 24/7</sub>
+  <br/>
+  <sub><a href="https://omniroute.online">omniroute.online</a></sub>
+</div>

README.ru.md

@@ -0,0 +1,999 @@
+<div align="center">
+  <img src="./docs/screenshots/MainOmniRoute.png" alt="OmniRoute Dashboard" width="800"/>
+  
+  # 🚀 OmniRoute — Бесплатный AI Gateway
+
+### Никогда не прекращайте программировать. Умная маршрутизация к **БЕСПЛАТНЫМ и дешёвым AI-моделям** с автоматическим fallback.
+
+_Ваш универсальный API-прокси — одна точка доступа, 36+ провайдеров, нулевой простой._
+
+**Chat Completions • Embeddings • Генерация изображений • Аудио • Reranking • 100% TypeScript**
+
+---
+
+### 🤖 Бесплатный AI-провайдер для ваших любимых агентов программирования
+
+_Подключайте любую IDE или CLI-инструмент с AI через OmniRoute — бесплатный API gateway для неограниченного программирования._
+
+  <table>
+    <tr>
+      <td align="center" width="110">
+        <a href="https://github.com/cline/cline">
+          <img src="./public/providers/openclaw.png" alt="OpenClaw" width="48"/><br/>
+          <b>OpenClaw</b>
+        </a><br/>
+        <sub>⭐ 205K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/HKUDS/nanobot">
+          <img src="./public/providers/nanobot.png" alt="NanoBot" width="48"/><br/>
+          <b>NanoBot</b>
+        </a><br/>
+        <sub>⭐ 20.9K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/sipeed/picoclaw">
+          <img src="./public/providers/picoclaw.jpg" alt="PicoClaw" width="48"/><br/>
+          <b>PicoClaw</b>
+        </a><br/>
+        <sub>⭐ 14.6K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/zeroclaw-labs/zeroclaw">
+          <img src="./public/providers/zeroclaw.png" alt="ZeroClaw" width="48"/><br/>
+          <b>ZeroClaw</b>
+        </a><br/>
+        <sub>⭐ 9.9K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/nearai/ironclaw">
+          <img src="./public/providers/ironclaw.png" alt="IronClaw" width="48"/><br/>
+          <b>IronClaw</b>
+        </a><br/>
+        <sub>⭐ 2.1K</sub>
+      </td>
+    </tr>
+    <tr>
+      <td align="center" width="110">
+        <a href="https://github.com/anomalyco/opencode">
+          <img src="./public/providers/opencode.svg" alt="OpenCode" width="48"/><br/>
+          <b>OpenCode</b>
+        </a><br/>
+        <sub>⭐ 106K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/openai/codex">
+          <img src="./public/providers/codex.png" alt="Codex CLI" width="48"/><br/>
+          <b>Codex CLI</b>
+        </a><br/>
+        <sub>⭐ 60.8K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/anthropics/claude-code">
+          <img src="./public/providers/claude.png" alt="Claude Code" width="48"/><br/>
+          <b>Claude Code</b>
+        </a><br/>
+        <sub>⭐ 67.3K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/google-gemini/gemini-cli">
+          <img src="./public/providers/gemini-cli.png" alt="Gemini CLI" width="48"/><br/>
+          <b>Gemini CLI</b>
+        </a><br/>
+        <sub>⭐ 94.7K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/Kilo-Org/kilocode">
+          <img src="./public/providers/kilocode.png" alt="Kilo Code" width="48"/><br/>
+          <b>Kilo Code</b>
+        </a><br/>
+        <sub>⭐ 15.5K</sub>
+      </td>
+    </tr>
+  </table>
+
+<sub>📡 Все агенты подключаются через <code>http://localhost:20128/v1</code> или <code>http://cloud.omniroute.online/v1</code> — одна конфигурация, неограниченные модели и квота</sub>
+
+---
+
+[![npm version](https://img.shields.io/npm/v/omniroute?color=cb3837&logo=npm)](https://www.npmjs.com/package/omniroute)
+[![Docker Hub](https://img.shields.io/docker/v/diegosouzapw/omniroute?label=Docker%20Hub&logo=docker&color=2496ED)](https://hub.docker.com/r/diegosouzapw/omniroute)
+[![License](https://img.shields.io/github/license/diegosouzapw/OmniRoute)](https://github.com/diegosouzapw/OmniRoute/blob/main/LICENSE)
+[![Website](https://img.shields.io/badge/Website-omniroute.online-blue?logo=google-chrome&logoColor=white)](https://omniroute.online)
+[![WhatsApp](https://img.shields.io/badge/WhatsApp-Community-25D366?logo=whatsapp&logoColor=white)](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
+
+[🌐 Сайт](https://omniroute.online) • [🚀 Быстрый старт](#-быстрый-старт) • [💡 Функции](#-основные-функции) • [📖 Документация](#-документация) • [💰 Цены](#-обзор-цен)
+
+🌐 **Доступно на:** [English](README.md) | [Português](README.pt-BR.md) | [Español](README.es.md) | [Русский](README.ru.md) | [中文](README.zh-CN.md) | [Deutsch](README.de.md) | [Français](README.fr.md) | [Italiano](README.it.md)
+
+</div>
+
+---
+
+## 🤔 Почему OmniRoute?
+
+**Перестаньте тратить деньги и упираться в лимиты:**
+
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> Квота подписки истекает неиспользованной каждый месяц
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> Лимиты скорости останавливают вас посреди программирования
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> Дорогие API ($20-50/месяц за провайдера)
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> Ручное переключение между провайдерами
+
+**OmniRoute решает это:**
+
+- ✅ **Максимизируйте подписки** — Отслеживайте квоты, используйте всё до сброса
+- ✅ **Автоматический fallback** — Подписка → API Key → Дешёвый → Бесплатный, нулевой простой
+- ✅ **Мульти-аккаунт** — Round-robin между аккаунтами каждого провайдера
+- ✅ **Универсальный** — Работает с Claude Code, Codex, Gemini CLI, Cursor, Cline, OpenClaw, любым CLI-инструментом
+
+---
+
+## 🔄 Как это работает
+
+```
+┌─────────────┐
+│  Ваш CLI    │  (Claude Code, Codex, Gemini CLI, OpenClaw, Cursor, Cline...)
+│   Tool      │
+└──────┬──────┘
+       │ http://localhost:20128/v1
+       ↓
+┌─────────────────────────────────────────┐
+│        OmniRoute (Умный маршрутизатор)   │
+│  • Трансляция формата (OpenAI ↔ Claude) │
+│  • Отслеживание квот + Embeddings + Изображения │
+│  • Автообновление токенов               │
+└──────┬──────────────────────────────────┘
+       │
+       ├─→ [Tier 1: ПОДПИСКА] Claude Code, Codex, Gemini CLI
+       │   ↓ квота исчерпана
+       ├─→ [Tier 2: API KEY] DeepSeek, Groq, xAI, Mistral, NVIDIA NIM и др.
+       │   ↓ лимит бюджета
+       ├─→ [Tier 3: ДЕШЁВЫЙ] GLM ($0.6/1M), MiniMax ($0.2/1M)
+       │   ↓ лимит бюджета
+       └─→ [Tier 4: БЕСПЛАТНЫЙ] iFlow, Qwen, Kiro (неограниченно)
+
+Результат: Никогда не прекращайте программировать, минимальные затраты
+```
+
+---
+
+## ⚡ Быстрый старт
+
+**1. Установите глобально:**
+
+```bash
+npm install -g omniroute
+omniroute
+```
+
+🎉 Dashboard открывается на `http://localhost:20128`
+
+| Команда                 | Описание                                   |
+| ----------------------- | ------------------------------------------ |
+| `omniroute`             | Запустить сервер (порт по умолчанию 20128) |
+| `omniroute --port 3000` | Использовать другой порт                   |
+| `omniroute --no-open`   | Не открывать браузер автоматически         |
+| `omniroute --help`      | Показать справку                           |
+
+**2. Подключите БЕСПЛАТНОГО провайдера:**
+
+Dashboard → Провайдеры → Подключить **Claude Code** или **Antigravity** → OAuth вход → Готово!
+
+**3. Используйте в CLI-инструменте:**
+
+```
+Claude Code/Codex/Gemini CLI/OpenClaw/Cursor/Cline Настройки:
+  Endpoint: http://localhost:20128/v1
+  API Key: [скопируйте из dashboard]
+  Model: if/kimi-k2-thinking
+```
+
+**Готово!** Начните программировать с БЕСПЛАТНЫМИ AI-моделями.
+
+**Альтернатива — запуск из исходного кода:**
+
+```bash
+cp .env.example .env
+npm install
+PORT=20128 NEXT_PUBLIC_BASE_URL=http://localhost:20128 npm run dev
+```
+
+---
+
+## 🐳 Docker
+
+OmniRoute доступен как публичный Docker-образ на [Docker Hub](https://hub.docker.com/r/diegosouzapw/omniroute).
+
+**Быстрый запуск:**
+
+```bash
+docker run -d \
+  --name omniroute \
+  --restart unless-stopped \
+  -p 20128:20128 \
+  -v omniroute-data:/app/data \
+  diegosouzapw/omniroute:latest
+```
+
+**С файлом окружения:**
+
+```bash
+# Скопируйте и отредактируйте .env
+cp .env.example .env
+
+docker run -d \
+  --name omniroute \
+  --restart unless-stopped \
+  --env-file .env \
+  -p 20128:20128 \
+  -v omniroute-data:/app/data \
+  diegosouzapw/omniroute:latest
+```
+
+**Используя Docker Compose:**
+
+```bash
+# Базовый профиль (без CLI-инструментов)
+docker compose --profile base up -d
+
+# CLI-профиль (Claude Code, Codex, OpenClaw встроены)
+docker compose --profile cli up -d
+```
+
+| Образ                    | Тег      | Размер | Описание                   |
+| ------------------------ | -------- | ------ | -------------------------- |
+| `diegosouzapw/omniroute` | `latest` | ~250MB | Последний стабильный релиз |
+| `diegosouzapw/omniroute` | `1.0.6`  | ~250MB | Текущая версия             |
+
+---
+
+## 💰 Обзор цен
+
+| Tier              | Провайдер         | Стоимость                     | Сброс квоты        | Лучше всего для                  |
+| ----------------- | ----------------- | ----------------------------- | ------------------ | -------------------------------- |
+| **💳 ПОДПИСКА**   | Claude Code (Pro) | $20/мес                       | 5ч + еженедельно   | Уже подписан                     |
+|                   | Codex (Plus/Pro)  | $20-200/мес                   | 5ч + еженедельно   | Пользователи OpenAI              |
+|                   | Gemini CLI        | **БЕСПЛАТНО**                 | 180K/мес + 1K/день | Все!                             |
+|                   | GitHub Copilot    | $10-19/мес                    | Ежемесячно         | Пользователи GitHub              |
+| **🔑 API KEY**    | NVIDIA NIM        | **БЕСПЛАТНО** (1000 кредитов) | Одноразово         | Бесплатное тестирование          |
+|                   | DeepSeek          | По использованию              | Нет                | Лучшее соотношение цена/качество |
+|                   | Groq              | Беспл. уровень + платный      | Ограничено         | Сверхбыстрый вывод               |
+|                   | xAI (Grok)        | По использованию              | Нет                | Модели Grok                      |
+|                   | Mistral           | Беспл. уровень + платный      | Ограничено         | Европейский AI                   |
+|                   | OpenRouter        | По использованию              | Нет                | 100+ моделей                     |
+| **💰 ДЕШЁВЫЙ**    | GLM-4.7           | $0.6/1M                       | Ежедневно 10ч      | Бюджетный бэкап                  |
+|                   | MiniMax M2.1      | $0.2/1M                       | 5ч ротация         | Самый дешёвый вариант            |
+|                   | Kimi K2           | $9/мес фикс                   | 10M токенов/мес    | Предсказуемая цена               |
+| **🆓 БЕСПЛАТНЫЙ** | iFlow             | $0                            | Неограниченно      | 8 бесплатных моделей             |
+|                   | Qwen              | $0                            | Неограниченно      | 3 бесплатные модели              |
+|                   | Kiro              | $0                            | Неограниченно      | Claude бесплатно                 |
+
+**💡 Совет:** Начните с Gemini CLI (180K бесплатно/мес) + iFlow (неограниченно бесплатно) = $0!
+
+---
+
+## 🎯 Сценарии использования
+
+### Сценарий 1: «У меня подписка Claude Pro»
+
+**Проблема:** Квота истекает неиспользованной, лимиты скорости во время интенсивного программирования
+
+```
+Combo: "maximize-claude"
+  1. cc/claude-opus-4-6        (используйте подписку полностью)
+  2. glm/glm-4.7               (дешёвый бэкап при исчерпании квоты)
+  3. if/kimi-k2-thinking       (бесплатный аварийный fallback)
+
+Месячная стоимость: $20 (подписка) + ~$5 (бэкап) = $25 итого
+vs. $20 + упирание в лимиты = разочарование
+```
+
+### Сценарий 2: «Хочу нулевую стоимость»
+
+**Проблема:** Не может позволить подписки, нужен надёжный AI для программирования
+
+```
+Combo: "free-forever"
+  1. gc/gemini-3-flash         (180K бесплатно/мес)
+  2. if/kimi-k2-thinking       (неограниченно бесплатно)
+  3. qw/qwen3-coder-plus       (неограниченно бесплатно)
+
+Месячная стоимость: $0
+Качество: Модели готовые к продакшену
+```
+
+### Сценарий 3: «Мне нужно программировать 24/7, без перерывов»
+
+**Проблема:** Дедлайны, не может позволить простой
+
+```
+Combo: "always-on"
+  1. cc/claude-opus-4-6        (лучшее качество)
+  2. cx/gpt-5.2-codex          (вторая подписка)
+  3. glm/glm-4.7               (дешёвый, ежедневный сброс)
+  4. minimax/MiniMax-M2.1      (самый дешёвый, сброс 5ч)
+  5. if/kimi-k2-thinking       (бесплатно неограниченно)
+
+Результат: 5 уровней fallback = нулевой простой
+```
+
+### Сценарий 4: «Хочу БЕСПЛАТНЫЙ AI в OpenClaw»
+
+**Проблема:** Нужен AI-ассистент в мессенджерах, полностью бесплатно
+
+```
+Combo: "openclaw-free"
+  1. if/glm-4.7                (неограниченно бесплатно)
+  2. if/minimax-m2.1           (неограниченно бесплатно)
+  3. if/kimi-k2-thinking       (неограниченно бесплатно)
+
+Месячная стоимость: $0
+Доступ через: WhatsApp, Telegram, Slack, Discord, iMessage, Signal...
+```
+
+---
+
+## 💡 Основные функции
+
+### 🧠 Маршрутизация и интеллект
+
+| Функция                                     | Что делает                                                                    |
+| ------------------------------------------- | ----------------------------------------------------------------------------- |
+| 🎯 **Умный 4-уровневый Fallback**           | Авто-маршрутизация: Подписка → API Key → Дешёвый → Бесплатный                 |
+| 📊 **Отслеживание квот в реальном времени** | Счётчик токенов в реальном времени + обратный отсчёт до сброса                |
+| 🔄 **Трансляция формата**                   | OpenAI ↔ Claude ↔ Gemini ↔ Cursor ↔ Kiro бесшовно                             |
+| 👥 **Мульти-аккаунт**                       | Несколько аккаунтов на провайдера с интеллектуальным выбором                  |
+| 🔄 **Автообновление токенов**               | OAuth-токены обновляются автоматически с повторами                            |
+| 🎨 **Пользовательские комбо**               | 6 стратегий: fill-first, round-robin, p2c, random, least-used, cost-optimized |
+| 🧩 **Пользовательские модели**              | Добавьте любой ID модели к любому провайдеру                                  |
+| 🌐 **Wildcard-маршрутизатор**               | Маршрутизируйте паттерны `provider/*` к любому провайдеру динамически         |
+| 🧠 **Бюджет рассуждений**                   | Режимы passthrough, auto, custom и adaptive для моделей рассуждений           |
+| 💬 **Инъекция System Prompt**               | Глобальный system prompt для всех запросов                                    |
+| 📄 **API Responses**                        | Полная поддержка OpenAI Responses API (`/v1/responses`) для Codex             |
+
+### 🎵 Мультимодальные API
+
+| Функция                      | Что делает                                          |
+| ---------------------------- | --------------------------------------------------- |
+| 🖼️ **Генерация изображений** | `/v1/images/generations` — 4 провайдера, 9+ моделей |
+| 📐 **Embeddings**            | `/v1/embeddings` — 6 провайдеров, 9+ моделей        |
+| 🎤 **Транскрипция аудио**    | `/v1/audio/transcriptions` — Совместимо с Whisper   |
+| 🔊 **Текст в речь**          | `/v1/audio/speech` — Мульти-провайдерный синтез     |
+| 🛡️ **Модерация**             | `/v1/moderations` — Проверки безопасности контента  |
+| 🔀 **Reranking**             | `/v1/rerank` — Переранжирование релевантности       |
+
+### 🛡️ Устойчивость и безопасность
+
+| Функция                          | Что делает                                                     |
+| -------------------------------- | -------------------------------------------------------------- |
+| 🔌 **Circuit Breaker**           | Авто-открытие/закрытие по провайдеру с настраиваемыми порогами |
+| 🛡️ **Anti-Thundering Herd**      | Mutex + семафор для API key провайдеров                        |
+| 🧠 **Семантический кеш**         | Двухуровневый кеш (сигнатура + семантика) снижает стоимость    |
+| ⚡ **Идемпотентность запросов**  | 5с окно дедупликации для дублирующихся запросов                |
+| 🔒 **Спуфинг TLS Fingerprint**   | Обход обнаружения ботов через wreq-js                          |
+| 🌐 **Фильтрация IP**             | Allowlist/blocklist для контроля доступа к API                 |
+| 📊 **Настраиваемые Rate Limits** | Настраиваемые RPM, минимальный интервал, макс. конкуррентность |
+
+### 📊 Наблюдаемость и аналитика
+
+| Функция                       | Что делает                                                               |
+| ----------------------------- | ------------------------------------------------------------------------ |
+| 📝 **Логи запросов**          | Режим debug с полными логами запросов/ответов                            |
+| 💾 **Логи SQLite**            | Постоянные proxy-логи переживают перезапуски                             |
+| 📊 **Dashboard аналитики**    | Recharts: карточки статистики, график использования, таблица провайдеров |
+| 📈 **Отслеживание прогресса** | Opt-in SSE-события прогресса для стриминга                               |
+| 🧪 **Оценки LLM**             | Тестирование с golden set и 4 стратегиями сравнения                      |
+| 🔍 **Телеметрия запросов**    | Агрегация латентности p50/p95/p99 + трекинг X-Request-Id                 |
+| 📋 **Логи + Квоты**           | Отдельные страницы для просмотра логов и отслеживания квот               |
+| 🏥 **Dashboard здоровья**     | Uptime, состояния circuit breaker, блокировки, статистика кеша           |
+| 💰 **Отслеживание стоимости** | Управление бюджетом + настройка цен по моделям                           |
+
+### ☁️ Деплой и синхронизация
+
+| Функция                    | Что делает                                                                  |
+| -------------------------- | --------------------------------------------------------------------------- |
+| 💾 **Cloud Sync**          | Синхронизация настроек между устройствами через Cloudflare Workers          |
+| 🌐 **Деплой куда угодно**  | Localhost, VPS, Docker, Cloudflare Workers                                  |
+| 🔑 **Управление API Keys** | Генерация, ротация и настройка scope API keys по провайдерам                |
+| 🧙 **Мастер настройки**    | 4-шаговая настройка для новых пользователей                                 |
+| 🔧 **Dashboard CLI Tools** | Настройка в один клик для Claude, Codex, Cline, OpenClaw, Kilo, Antigravity |
+| 🔄 **Бэкапы БД**           | Автоматическое резервное копирование и восстановление всех настроек         |
+
+<details>
+<summary><b>📖 Подробности функций</b></summary>
+
+### 🎯 Умный 4-уровневый Fallback
+
+Создавайте комбо с автоматическим fallback:
+
+```
+Combo: "my-coding-stack"
+  1. cc/claude-opus-4-6        (ваша подписка)
+  2. nvidia/llama-3.3-70b      (бесплатный NVIDIA API)
+  3. glm/glm-4.7               (дешёвый бэкап, $0.6/1M)
+  4. if/kimi-k2-thinking       (бесплатный fallback)
+
+→ Автоматически переключается при исчерпании квоты или ошибках
+```
+
+### 📊 Отслеживание квот в реальном времени
+
+- Потребление токенов по провайдерам
+- Обратный отсчёт до сброса (5 часов, ежедневно, еженедельно)
+- Оценка стоимости для платных уровней
+- Ежемесячные отчёты о расходах
+
+### 🔄 Трансляция формата
+
+Бесшовная трансляция между форматами:
+
+- **OpenAI** ↔ **Claude** ↔ **Gemini** ↔ **OpenAI Responses**
+- Ваш CLI отправляет формат OpenAI → OmniRoute транслирует → Провайдер получает нативный формат
+- Работает с любым инструментом, поддерживающим пользовательские OpenAI endpoints
+
+### 👥 Мульти-аккаунт
+
+- Добавляйте несколько аккаунтов на провайдера
+- Автоматический round-robin или маршрутизация по приоритету
+- Fallback на следующий аккаунт при исчерпании квоты
+
+### 🔄 Автообновление токенов
+
+- OAuth-токены обновляются автоматически до истечения
+- Без необходимости ручной повторной аутентификации
+- Бесшовный опыт по всем провайдерам
+
+### 🎨 Пользовательские комбо
+
+- Создавайте неограниченные комбинации моделей
+- 6 стратегий: fill-first, round-robin, power-of-two-choices, random, least-used, cost-optimized
+- Делитесь комбо между устройствами с Cloud Sync
+
+### 🏥 Dashboard здоровья
+
+- Статус системы (uptime, версия, использование памяти)
+- Состояния circuit breaker по провайдерам (Closed/Open/Half-Open)
+- Статус rate limit и активные блокировки
+- Статистика кеша сигнатур
+- Телеметрия латентности (p50/p95/p99) + кеш промптов
+- Сброс состояния здоровья одним кликом
+
+### 🔧 Playground транслятора
+
+- Отладка, тестирование и визуализация трансляции форматов API
+- Отправляйте запросы и смотрите, как OmniRoute транслирует между форматами провайдеров
+- Бесценно для устранения проблем интеграции
+
+### 💾 Cloud Sync
+
+- Синхронизация провайдеров, комбо и настроек между устройствами
+- Автоматическая фоновая синхронизация
+- Безопасное шифрованное хранилище
+
+</details>
+
+---
+
+## 📖 Руководство по настройке
+
+<details>
+<summary><b>💳 Провайдеры по подписке</b></summary>
+
+### Claude Code (Pro/Max)
+
+```bash
+Dashboard → Провайдеры → Подключить Claude Code
+→ OAuth вход → Автообновление токенов
+→ Отслеживание квоты 5ч + еженедельно
+
+Модели:
+  cc/claude-opus-4-6
+  cc/claude-sonnet-4-5-20250929
+  cc/claude-haiku-4-5-20251001
+```
+
+**Совет:** Используйте Opus для сложных задач, Sonnet для скорости. OmniRoute отслеживает квоту по моделям!
+
+### OpenAI Codex (Plus/Pro)
+
+```bash
+Dashboard → Провайдеры → Подключить Codex
+→ OAuth вход (порт 1455)
+→ Сброс 5ч + еженедельно
+
+Модели:
+  cx/gpt-5.2-codex
+  cx/gpt-5.1-codex-max
+```
+
+### Gemini CLI (БЕСПЛАТНО 180K/мес!)
+
+```bash
+Dashboard → Провайдеры → Подключить Gemini CLI
+→ Google OAuth
+→ 180K completions/мес + 1K/день
+
+Модели:
+  gc/gemini-3-flash-preview
+  gc/gemini-2.5-pro
+```
+
+**Лучшая ценность:** Огромный бесплатный уровень! Используйте перед платными.
+
+### GitHub Copilot
+
+```bash
+Dashboard → Провайдеры → Подключить GitHub
+→ OAuth через GitHub
+→ Ежемесячный сброс (1-е число)
+
+Модели:
+  gh/gpt-5
+  gh/claude-4.5-sonnet
+  gh/gemini-3-pro
+```
+
+</details>
+
+<details>
+<summary><b>🔑 Провайдеры по API Key</b></summary>
+
+### NVIDIA NIM (БЕСПЛАТНО 1000 кредитов!)
+
+1. Регистрация: [build.nvidia.com](https://build.nvidia.com)
+2. Получите бесплатный API key (1000 кредитов включены)
+3. Dashboard → Добавить провайдера → NVIDIA NIM:
+   - API Key: `nvapi-your-key`
+
+**Модели:** `nvidia/llama-3.3-70b-instruct`, `nvidia/mistral-7b-instruct` и 50+ других
+
+**Совет:** OpenAI-совместимый API — работает идеально с трансляцией форматов OmniRoute!
+
+### DeepSeek
+
+1. Регистрация: [platform.deepseek.com](https://platform.deepseek.com)
+2. Получите API key
+3. Dashboard → Добавить провайдера → DeepSeek
+
+**Модели:** `deepseek/deepseek-chat`, `deepseek/deepseek-coder`
+
+### Groq (Бесплатный уровень доступен!)
+
+1. Регистрация: [console.groq.com](https://console.groq.com)
+2. Получите API key (бесплатный уровень включён)
+3. Dashboard → Добавить провайдера → Groq
+
+**Модели:** `groq/llama-3.3-70b`, `groq/mixtral-8x7b`
+
+**Совет:** Сверхбыстрый вывод — лучший для программирования в реальном времени!
+
+### OpenRouter (100+ моделей)
+
+1. Регистрация: [openrouter.ai](https://openrouter.ai)
+2. Получите API key
+3. Dashboard → Добавить провайдера → OpenRouter
+
+**Модели:** Доступ к 100+ моделям от всех основных провайдеров через один API key.
+
+</details>
+
+<details>
+<summary><b>💰 Дешёвые провайдеры (Бэкап)</b></summary>
+
+### GLM-4.7 (Ежедневный сброс, $0.6/1M)
+
+1. Регистрация: [Zhipu AI](https://open.bigmodel.cn/)
+2. Получите API key из Coding Plan
+3. Dashboard → Добавить API Key:
+   - Провайдер: `glm`
+   - API Key: `your-key`
+
+**Используйте:** `glm/glm-4.7`
+
+**Совет:** Coding Plan предлагает 3× квоту по цене 1/7! Ежедневный сброс в 10:00.
+
+### MiniMax M2.1 (Сброс 5ч, $0.20/1M)
+
+1. Регистрация: [MiniMax](https://www.minimax.io/)
+2. Получите API key
+3. Dashboard → Добавить API Key
+
+**Используйте:** `minimax/MiniMax-M2.1`
+
+**Совет:** Самый дешёвый вариант для длинного контекста (1M токенов)!
+
+### Kimi K2 ($9/мес фикс)
+
+1. Подпишитесь: [Moonshot AI](https://platform.moonshot.ai/)
+2. Получите API key
+3. Dashboard → Добавить API Key
+
+**Используйте:** `kimi/kimi-latest`
+
+**Совет:** Фикс $9/мес за 10M токенов = $0.90/1M эффективная стоимость!
+
+</details>
+
+<details>
+<summary><b>🆓 БЕСПЛАТНЫЕ провайдеры (Аварийный бэкап)</b></summary>
+
+### iFlow (8 БЕСПЛАТНЫХ моделей)
+
+```bash
+Dashboard → Подключить iFlow
+→ OAuth вход iFlow
+→ Неограниченное использование
+
+Модели:
+  if/kimi-k2-thinking
+  if/qwen3-coder-plus
+  if/glm-4.7
+  if/minimax-m2
+  if/deepseek-r1
+```
+
+### Qwen (3 БЕСПЛАТНЫЕ модели)
+
+```bash
+Dashboard → Подключить Qwen
+→ Авторизация по коду устройства
+→ Неограниченное использование
+
+Модели:
+  qw/qwen3-coder-plus
+  qw/qwen3-coder-flash
+```
+
+### Kiro (Claude БЕСПЛАТНО)
+
+```bash
+Dashboard → Подключить Kiro
+→ AWS Builder ID или Google/GitHub
+→ Неограниченное использование
+
+Модели:
+  kr/claude-sonnet-4.5
+  kr/claude-haiku-4.5
+```
+
+</details>
+
+<details>
+<summary><b>🎨 Создание комбо</b></summary>
+
+### Пример 1: Максимизация подписки → Дешёвый бэкап
+
+```
+Dashboard → Комбо → Создать новое
+
+Название: premium-coding
+Модели:
+  1. cc/claude-opus-4-6 (Основная подписка)
+  2. glm/glm-4.7 (Дешёвый бэкап, $0.6/1M)
+  3. minimax/MiniMax-M2.1 (Самый дешёвый fallback, $0.20/1M)
+
+Используйте в CLI: premium-coding
+```
+
+### Пример 2: Только бесплатные (Нулевая стоимость)
+
+```
+Название: free-combo
+Модели:
+  1. gc/gemini-3-flash-preview (180K бесплатно/мес)
+  2. if/kimi-k2-thinking (неограниченно)
+  3. qw/qwen3-coder-plus (неограниченно)
+
+Стоимость: $0 навсегда!
+```
+
+</details>
+
+<details>
+<summary><b>🔧 Интеграция с CLI</b></summary>
+
+### Cursor IDE
+
+```
+Настройки → Модели → Расширенные:
+  OpenAI API Base URL: http://localhost:20128/v1
+  OpenAI API Key: [из dashboard OmniRoute]
+  Model: cc/claude-opus-4-6
+```
+
+### Claude Code
+
+Используйте страницу **CLI Tools** в dashboard для настройки в один клик, или редактируйте `~/.claude/settings.json` вручную.
+
+### Codex CLI
+
+```bash
+export OPENAI_BASE_URL="http://localhost:20128"
+export OPENAI_API_KEY="your-omniroute-api-key"
+
+codex "your prompt"
+```
+
+### OpenClaw
+
+**Вариант 1 — Dashboard (рекомендуется):**
+
+```
+Dashboard → CLI Tools → OpenClaw → Выбрать модель → Применить
+```
+
+**Вариант 2 — Вручную:** Редактируйте `~/.openclaw/openclaw.json`:
+
+```json
+{
+  "models": {
+    "providers": {
+      "omniroute": {
+        "baseUrl": "http://127.0.0.1:20128/v1",
+        "apiKey": "sk_omniroute",
+        "api": "openai-completions"
+      }
+    }
+  }
+}
+```
+
+> **Примечание:** OpenClaw работает только с локальным OmniRoute. Используйте `127.0.0.1` вместо `localhost` для избежания проблем с IPv6.
+
+### Cline / Continue / RooCode
+
+```
+Настройки → Конфигурация API:
+  Провайдер: OpenAI Compatible
+  Base URL: http://localhost:20128/v1
+  API Key: [из dashboard OmniRoute]
+  Model: if/kimi-k2-thinking
+```
+
+</details>
+
+---
+
+## 📊 Доступные модели
+
+<details>
+<summary><b>Посмотреть все доступные модели</b></summary>
+
+**Claude Code (`cc/`)** - Pro/Max:
+
+- `cc/claude-opus-4-6`
+- `cc/claude-sonnet-4-5-20250929`
+- `cc/claude-haiku-4-5-20251001`
+
+**Codex (`cx/`)** - Plus/Pro:
+
+- `cx/gpt-5.2-codex`
+- `cx/gpt-5.1-codex-max`
+
+**Gemini CLI (`gc/`)** - БЕСПЛАТНО:
+
+- `gc/gemini-3-flash-preview`
+- `gc/gemini-2.5-pro`
+
+**GitHub Copilot (`gh/`)**:
+
+- `gh/gpt-5`
+- `gh/claude-4.5-sonnet`
+
+**NVIDIA NIM (`nvidia/`)** - БЕСПЛАТНЫЕ кредиты:
+
+- `nvidia/llama-3.3-70b-instruct`
+- `nvidia/mistral-7b-instruct`
+- 50+ моделей на [build.nvidia.com](https://build.nvidia.com)
+
+**GLM (`glm/`)** - $0.6/1M:
+
+- `glm/glm-4.7`
+
+**MiniMax (`minimax/`)** - $0.2/1M:
+
+- `minimax/MiniMax-M2.1`
+
+**iFlow (`if/`)** - БЕСПЛАТНО:
+
+- `if/kimi-k2-thinking`
+- `if/qwen3-coder-plus`
+- `if/deepseek-r1`
+- `if/glm-4.7`
+- `if/minimax-m2`
+
+**Qwen (`qw/`)** - БЕСПЛАТНО:
+
+- `qw/qwen3-coder-plus`
+- `qw/qwen3-coder-flash`
+
+**Kiro (`kr/`)** - БЕСПЛАТНО:
+
+- `kr/claude-sonnet-4.5`
+- `kr/claude-haiku-4.5`
+
+**OpenRouter (`or/`)** - 100+ моделей:
+
+- `or/anthropic/claude-4-sonnet`
+- `or/google/gemini-2.5-pro`
+- Любая модель с [openrouter.ai/models](https://openrouter.ai/models)
+
+</details>
+
+---
+
+## 🧪 Оценки (Evals)
+
+OmniRoute включает встроенный фреймворк оценки для тестирования качества ответов LLM по golden set. Доступ через **Analytics → Evals** в dashboard.
+
+### Встроенный Golden Set
+
+Предзагруженный «OmniRoute Golden Set» содержит 10 тестов:
+
+- Приветствия, математика, география, генерация кода
+- Соответствие формату JSON, перевод, markdown
+- Отказ от небезопасного контента, подсчёт, булева логика
+
+### Стратегии оценки
+
+| Стратегия  | Описание                                              | Пример                           |
+| ---------- | ----------------------------------------------------- | -------------------------------- |
+| `exact`    | Вывод должен совпадать точно                          | `"4"`                            |
+| `contains` | Вывод должен содержать подстроку (без учёта регистра) | `"Paris"`                        |
+| `regex`    | Вывод должен соответствовать regex-паттерну           | `"1.*2.*3"`                      |
+| `custom`   | Пользовательская JS-функция возвращает true/false     | `(output) => output.length > 10` |
+
+---
+
+## 🐛 Устранение неполадок
+
+<details>
+<summary><b>Нажмите для раскрытия руководства</b></summary>
+
+**«Language model did not provide messages»**
+
+- Квота провайдера исчерпана → Проверьте трекер квот в dashboard
+- Решение: Используйте комбо с fallback или переключитесь на более дешёвый уровень
+
+**Rate limiting**
+
+- Квота подписки исчерпана → Fallback на GLM/MiniMax
+- Добавьте комбо: `cc/claude-opus-4-6 → glm/glm-4.7 → if/kimi-k2-thinking`
+
+**OAuth-токен истёк**
+
+- Обновляется автоматически OmniRoute
+- Если проблема сохраняется: Dashboard → Провайдер → Переподключить
+
+**Высокие расходы**
+
+- Проверьте статистику в Dashboard → Расходы
+- Переключите основную модель на GLM/MiniMax
+- Используйте бесплатный уровень (Gemini CLI, iFlow) для некритичных задач
+
+**Dashboard открывается на неправильном порту**
+
+- Установите `PORT=20128` и `NEXT_PUBLIC_BASE_URL=http://localhost:20128`
+
+**Ошибки cloud sync**
+
+- Проверьте что `BASE_URL` указывает на ваш запущенный экземпляр
+- Проверьте что `CLOUD_URL` указывает на правильный облачный endpoint
+- Держите значения `NEXT_PUBLIC_*` синхронизированными с серверными значениями
+
+**Первый вход не работает**
+
+- Проверьте `INITIAL_PASSWORD` в `.env`
+- Если не задан, пароль по умолчанию `123456`
+
+**Нет логов запросов**
+
+- Установите `ENABLE_REQUEST_LOGS=true` в `.env`
+
+**Тест подключения показывает «Invalid» для OpenAI-совместимых провайдеров**
+
+- Многие провайдеры не предоставляют endpoint `/models`
+- OmniRoute v1.0.6+ включает fallback-валидацию через chat completions
+- Убедитесь что base URL содержит суффикс `/v1`
+
+</details>
+
+---
+
+## 🛠️ Технологический стек
+
+- **Runtime**: Node.js 20+
+- **Язык**: TypeScript 5.9 — **100% TypeScript** в `src/` и `open-sse/` (v1.0.6)
+- **Framework**: Next.js 16 + React 19 + Tailwind CSS 4
+- **База данных**: LowDB (JSON) + SQLite (состояние домена + proxy-логи)
+- **Стриминг**: Server-Sent Events (SSE)
+- **Аутентификация**: OAuth 2.0 (PKCE) + JWT + API Keys
+- **Тестирование**: Node.js test runner (368+ юнит-тестов)
+- **CI/CD**: GitHub Actions (авто-публикация npm + Docker Hub при релизе)
+- **Сайт**: [omniroute.online](https://omniroute.online)
+- **Пакет**: [npmjs.com/package/omniroute](https://www.npmjs.com/package/omniroute)
+- **Docker**: [hub.docker.com/r/diegosouzapw/omniroute](https://hub.docker.com/r/diegosouzapw/omniroute)
+- **Устойчивость**: Circuit breaker, экспоненциальный backoff, anti-thundering herd, TLS-спуфинг
+
+---
+
+## 📖 Документация
+
+| Документ                                        | Описание                                         |
+| ----------------------------------------------- | ------------------------------------------------ |
+| [Руководство пользователя](docs/USER_GUIDE.md)  | Провайдеры, комбо, интеграция CLI, деплой        |
+| [Справка API](docs/API_REFERENCE.md)            | Все endpoints с примерами                        |
+| [Устранение неполадок](docs/TROUBLESHOOTING.md) | Частые проблемы и решения                        |
+| [Архитектура](docs/ARCHITECTURE.md)             | Архитектура системы и внутреннее устройство      |
+| [Как внести вклад](CONTRIBUTING.md)             | Настройка разработки и руководящие принципы      |
+| [Спецификация OpenAPI](docs/openapi.yaml)       | Спецификация OpenAPI 3.0                         |
+| [Политика безопасности](SECURITY.md)            | Сообщение об уязвимостях и практики безопасности |
+
+---
+
+## 📧 Поддержка
+
+> 💬 **Присоединяйтесь к сообществу!** [Группа WhatsApp](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t) — Получайте помощь, делитесь советами и оставайтесь в курсе.
+
+- **Сайт**: [omniroute.online](https://omniroute.online)
+- **GitHub**: [github.com/diegosouzapw/OmniRoute](https://github.com/diegosouzapw/OmniRoute)
+- **Issues**: [github.com/diegosouzapw/OmniRoute/issues](https://github.com/diegosouzapw/OmniRoute/issues)
+- **WhatsApp**: [Группа сообщества](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
+- **Оригинальный проект**: [9router от decolua](https://github.com/decolua/9router)
+
+---
+
+## 👥 Участники
+
+[![Contributors](https://contrib.rocks/image?repo=diegosouzapw/OmniRoute&max=100&columns=20&anon=1)](https://github.com/diegosouzapw/OmniRoute/graphs/contributors)
+
+### Как внести вклад
+
+1. Сделайте fork репозитория
+2. Создайте ветку функции (`git checkout -b feature/amazing-feature`)
+3. Зафиксируйте изменения (`git commit -m 'Add amazing feature'`)
+4. Отправьте в ветку (`git push origin feature/amazing-feature`)
+5. Откройте Pull Request
+
+См. [CONTRIBUTING.md](CONTRIBUTING.md) для подробных рекомендаций.
+
+### Выпуск новой версии
+
+```bash
+# Создайте релиз — публикация в npm происходит автоматически
+gh release create v1.0.6 --title "v1.0.6" --generate-notes
+```
+
+---
+
+## 📊 История звёзд
+
+<a href="https://star-history.com/#diegosouzapw/OmniRoute&Date">
+ <picture>
+   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=diegosouzapw/OmniRoute&type=Date&theme=dark" />
+   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=diegosouzapw/OmniRoute&type=Date" />
+   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=diegosouzapw/OmniRoute&type=Date" />
+ </picture>
+</a>
+
+---
+
+## 🙏 Благодарности
+
+Особая благодарность **[9router](https://github.com/decolua/9router)** от **[decolua](https://github.com/decolua)** — оригинальному проекту, вдохновившему этот форк. OmniRoute строится на этом невероятном фундаменте с дополнительными функциями, мультимодальными API и полной переписью на TypeScript.
+
+Особая благодарность **[CLIProxyAPI](https://github.com/router-for-me/CLIProxyAPI)** — оригинальной реализации на Go, вдохновившей этот порт на JavaScript.
+
+---
+
+## 📄 Лицензия
+
+Лицензия MIT — см. [LICENSE](LICENSE) для подробностей.
+
+---
+
+<div align="center">
+  <sub>Сделано с ❤️ для разработчиков, которые программируют 24/7</sub>
+  <br/>
+  <sub><a href="https://omniroute.online">omniroute.online</a></sub>
+</div>

README.zh-CN.md

@@ -0,0 +1,999 @@
+<div align="center">
+  <img src="./docs/screenshots/MainOmniRoute.png" alt="OmniRoute Dashboard" width="800"/>
+  
+  # 🚀 OmniRoute — 免费 AI 网关
+
+### 永不停止编程。智能路由至**免费和低成本 AI 模型**，自动故障转移。
+
+_您的通用 API 代理 — 一个端点，36+ 提供商，零停机时间。_
+
+**Chat Completions • Embeddings • 图像生成 • 音频 • Reranking • 100% TypeScript**
+
+---
+
+### 🤖 为您最爱的编程代理提供免费 AI
+
+_通过 OmniRoute 连接任何 AI 驱动的 IDE 或 CLI 工具 — 免费 API 网关，无限编程。_
+
+  <table>
+    <tr>
+      <td align="center" width="110">
+        <a href="https://github.com/cline/cline">
+          <img src="./public/providers/openclaw.png" alt="OpenClaw" width="48"/><br/>
+          <b>OpenClaw</b>
+        </a><br/>
+        <sub>⭐ 205K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/HKUDS/nanobot">
+          <img src="./public/providers/nanobot.png" alt="NanoBot" width="48"/><br/>
+          <b>NanoBot</b>
+        </a><br/>
+        <sub>⭐ 20.9K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/sipeed/picoclaw">
+          <img src="./public/providers/picoclaw.jpg" alt="PicoClaw" width="48"/><br/>
+          <b>PicoClaw</b>
+        </a><br/>
+        <sub>⭐ 14.6K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/zeroclaw-labs/zeroclaw">
+          <img src="./public/providers/zeroclaw.png" alt="ZeroClaw" width="48"/><br/>
+          <b>ZeroClaw</b>
+        </a><br/>
+        <sub>⭐ 9.9K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/nearai/ironclaw">
+          <img src="./public/providers/ironclaw.png" alt="IronClaw" width="48"/><br/>
+          <b>IronClaw</b>
+        </a><br/>
+        <sub>⭐ 2.1K</sub>
+      </td>
+    </tr>
+    <tr>
+      <td align="center" width="110">
+        <a href="https://github.com/anomalyco/opencode">
+          <img src="./public/providers/opencode.svg" alt="OpenCode" width="48"/><br/>
+          <b>OpenCode</b>
+        </a><br/>
+        <sub>⭐ 106K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/openai/codex">
+          <img src="./public/providers/codex.png" alt="Codex CLI" width="48"/><br/>
+          <b>Codex CLI</b>
+        </a><br/>
+        <sub>⭐ 60.8K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/anthropics/claude-code">
+          <img src="./public/providers/claude.png" alt="Claude Code" width="48"/><br/>
+          <b>Claude Code</b>
+        </a><br/>
+        <sub>⭐ 67.3K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/google-gemini/gemini-cli">
+          <img src="./public/providers/gemini-cli.png" alt="Gemini CLI" width="48"/><br/>
+          <b>Gemini CLI</b>
+        </a><br/>
+        <sub>⭐ 94.7K</sub>
+      </td>
+      <td align="center" width="110">
+        <a href="https://github.com/Kilo-Org/kilocode">
+          <img src="./public/providers/kilocode.png" alt="Kilo Code" width="48"/><br/>
+          <b>Kilo Code</b>
+        </a><br/>
+        <sub>⭐ 15.5K</sub>
+      </td>
+    </tr>
+  </table>
+
+<sub>📡 所有代理通过 <code>http://localhost:20128/v1</code> 或 <code>http://cloud.omniroute.online/v1</code> 连接 — 一个配置，无限模型和配额</sub>
+
+---
+
+[![npm version](https://img.shields.io/npm/v/omniroute?color=cb3837&logo=npm)](https://www.npmjs.com/package/omniroute)
+[![Docker Hub](https://img.shields.io/docker/v/diegosouzapw/omniroute?label=Docker%20Hub&logo=docker&color=2496ED)](https://hub.docker.com/r/diegosouzapw/omniroute)
+[![License](https://img.shields.io/github/license/diegosouzapw/OmniRoute)](https://github.com/diegosouzapw/OmniRoute/blob/main/LICENSE)
+[![Website](https://img.shields.io/badge/Website-omniroute.online-blue?logo=google-chrome&logoColor=white)](https://omniroute.online)
+[![WhatsApp](https://img.shields.io/badge/WhatsApp-Community-25D366?logo=whatsapp&logoColor=white)](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
+
+[🌐 网站](https://omniroute.online) • [🚀 快速开始](#-快速开始) • [💡 功能特性](#-核心功能) • [📖 文档](#-文档) • [💰 定价](#-定价概览)
+
+🌐 **多语言版本：** [English](README.md) | [Português](README.pt-BR.md) | [Español](README.es.md) | [Русский](README.ru.md) | [中文](README.zh-CN.md) | [Deutsch](README.de.md) | [Français](README.fr.md) | [Italiano](README.it.md)
+
+</div>
+
+---
+
+## 🤔 为什么选择 OmniRoute？
+
+**停止浪费金钱和遭遇限制：**
+
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> 订阅配额每月未使用就过期
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> 速率限制在编程中途停止你
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> 昂贵的 API（每个提供商 $20-50/月）
+- <img src="https://img.shields.io/badge/✗-e74c3c?style=flat-square" height="16"/> 手动在提供商间切换
+
+**OmniRoute 解决这些问题：**
+
+- ✅ **最大化订阅** — 追踪配额，在重置前用完每一点
+- ✅ **自动故障转移** — 订阅 → API Key → 低价 → 免费，零停机
+- ✅ **多账号** — 每个提供商的账号轮询
+- ✅ **通用** — 适用于 Claude Code、Codex、Gemini CLI、Cursor、Cline、OpenClaw、任何 CLI 工具
+
+---
+
+## 🔄 工作原理
+
+```
+┌─────────────┐
+│  您的 CLI   │  (Claude Code, Codex, Gemini CLI, OpenClaw, Cursor, Cline...)
+│   工具      │
+└──────┬──────┘
+       │ http://localhost:20128/v1
+       ↓
+┌─────────────────────────────────────────┐
+│         OmniRoute（智能路由器）           │
+│  • 格式转换（OpenAI ↔ Claude）          │
+│  • 配额追踪 + Embeddings + 图像         │
+│  • 自动令牌刷新                         │
+└──────┬──────────────────────────────────┘
+       │
+       ├─→ [第1层: 订阅] Claude Code, Codex, Gemini CLI
+       │   ↓ 配额用完
+       ├─→ [第2层: API KEY] DeepSeek, Groq, xAI, Mistral, NVIDIA NIM 等
+       │   ↓ 预算限制
+       ├─→ [第3层: 低价] GLM ($0.6/1M), MiniMax ($0.2/1M)
+       │   ↓ 预算限制
+       └─→ [第4层: 免费] iFlow, Qwen, Kiro（无限制）
+
+结果：永不停止编程，成本最低
+```
+
+---
+
+## ⚡ 快速开始
+
+**1. 全局安装：**
+
+```bash
+npm install -g omniroute
+omniroute
+```
+
+🎉 仪表板在 `http://localhost:20128` 打开
+
+| 命令                    | 描述                         |
+| ----------------------- | ---------------------------- |
+| `omniroute`             | 启动服务器（默认端口 20128） |
+| `omniroute --port 3000` | 使用自定义端口               |
+| `omniroute --no-open`   | 不自动打开浏览器             |
+| `omniroute --help`      | 显示帮助                     |
+
+**2. 连接免费提供商：**
+
+仪表板 → 提供商 → 连接 **Claude Code** 或 **Antigravity** → OAuth 登录 → 完成！
+
+**3. 在 CLI 工具中使用：**
+
+```
+Claude Code/Codex/Gemini CLI/OpenClaw/Cursor/Cline 设置：
+  Endpoint: http://localhost:20128/v1
+  API Key: [从仪表板复制]
+  Model: if/kimi-k2-thinking
+```
+
+**完成！** 开始使用免费 AI 模型编程。
+
+**替代方案 — 从源代码运行：**
+
+```bash
+cp .env.example .env
+npm install
+PORT=20128 NEXT_PUBLIC_BASE_URL=http://localhost:20128 npm run dev
+```
+
+---
+
+## 🐳 Docker
+
+OmniRoute 作为公共 Docker 镜像在 [Docker Hub](https://hub.docker.com/r/diegosouzapw/omniroute) 上可用。
+
+**快速运行：**
+
+```bash
+docker run -d \
+  --name omniroute \
+  --restart unless-stopped \
+  -p 20128:20128 \
+  -v omniroute-data:/app/data \
+  diegosouzapw/omniroute:latest
+```
+
+**使用环境文件：**
+
+```bash
+# 先复制并编辑 .env
+cp .env.example .env
+
+docker run -d \
+  --name omniroute \
+  --restart unless-stopped \
+  --env-file .env \
+  -p 20128:20128 \
+  -v omniroute-data:/app/data \
+  diegosouzapw/omniroute:latest
+```
+
+**使用 Docker Compose：**
+
+```bash
+# 基础配置（无 CLI 工具）
+docker compose --profile base up -d
+
+# CLI 配置（内置 Claude Code、Codex、OpenClaw）
+docker compose --profile cli up -d
+```
+
+| 镜像                     | 标签     | 大小   | 描述       |
+| ------------------------ | -------- | ------ | ---------- |
+| `diegosouzapw/omniroute` | `latest` | ~250MB | 最新稳定版 |
+| `diegosouzapw/omniroute` | `1.0.6`  | ~250MB | 当前版本   |
+
+---
+
+## 💰 定价概览
+
+| 层级           | 提供商            | 费用                  | 配额重置        | 最适合       |
+| -------------- | ----------------- | --------------------- | --------------- | ------------ |
+| **💳 订阅**    | Claude Code (Pro) | $20/月                | 5小时 + 每周    | 已订阅用户   |
+|                | Codex (Plus/Pro)  | $20-200/月            | 5小时 + 每周    | OpenAI 用户  |
+|                | Gemini CLI        | **免费**              | 180K/月 + 1K/天 | 所有人！     |
+|                | GitHub Copilot    | $10-19/月             | 每月            | GitHub 用户  |
+| **🔑 API KEY** | NVIDIA NIM        | **免费**（1000 积分） | 一次性          | 免费测试     |
+|                | DeepSeek          | 按使用量              | 无              | 最佳性价比   |
+|                | Groq              | 免费层 + 付费         | 限速            | 超快推理     |
+|                | xAI (Grok)        | 按使用量              | 无              | Grok 模型    |
+|                | Mistral           | 免费层 + 付费         | 限速            | 欧洲 AI      |
+|                | OpenRouter        | 按使用量              | 无              | 100+ 模型    |
+| **💰 低价**    | GLM-4.7           | $0.6/1M               | 每日 10时       | 经济备用     |
+|                | MiniMax M2.1      | $0.2/1M               | 5小时滚动       | 最便宜选项   |
+|                | Kimi K2           | $9/月固定             | 每月 10M Token  | 可预测成本   |
+| **🆓 免费**    | iFlow             | $0                    | 无限制          | 8 个免费模型 |
+|                | Qwen              | $0                    | 无限制          | 3 个免费模型 |
+|                | Kiro              | $0                    | 无限制          | 免费 Claude  |
+
+**💡 专业建议：** 从 Gemini CLI（每月 180K 免费）+ iFlow（无限免费）开始 = $0 成本！
+
+---
+
+## 🎯 使用场景
+
+### 场景 1："我有 Claude Pro 订阅"
+
+**问题：** 配额未使用就过期，编程高峰期遇到速率限制
+
+```
+Combo: "maximize-claude"
+  1. cc/claude-opus-4-6        （充分使用订阅）
+  2. glm/glm-4.7               （配额用完时的便宜备用）
+  3. if/kimi-k2-thinking       （免费应急后备）
+
+每月成本：$20（订阅）+ ~$5（备用）= $25 总计
+对比：$20 + 遇到限制 = 受挫
+```
+
+### 场景 2："我想要零成本"
+
+**问题：** 无法承担订阅费用，需要可靠的 AI 编程
+
+```
+Combo: "free-forever"
+  1. gc/gemini-3-flash         （每月 180K 免费）
+  2. if/kimi-k2-thinking       （无限免费）
+  3. qw/qwen3-coder-plus       （无限免费）
+
+每月成本：$0
+质量：生产级模型
+```
+
+### 场景 3："我需要 24/7 编程，不中断"
+
+**问题：** 截止日期紧迫，不能有停机时间
+
+```
+Combo: "always-on"
+  1. cc/claude-opus-4-6        （最佳质量）
+  2. cx/gpt-5.2-codex          （第二个订阅）
+  3. glm/glm-4.7               （便宜，每日重置）
+  4. minimax/MiniMax-M2.1      （最便宜，5小时重置）
+  5. if/kimi-k2-thinking       （免费无限制）
+
+结果：5 层故障转移 = 零停机
+```
+
+### 场景 4："我想在 OpenClaw 中使用免费 AI"
+
+**问题：** 需要在消息应用中使用 AI 助手，完全免费
+
+```
+Combo: "openclaw-free"
+  1. if/glm-4.7                （无限免费）
+  2. if/minimax-m2.1           （无限免费）
+  3. if/kimi-k2-thinking       （无限免费）
+
+每月成本：$0
+访问方式：WhatsApp、Telegram、Slack、Discord、iMessage、Signal...
+```
+
+---
+
+## 💡 核心功能
+
+### 🧠 路由与智能
+
+| 功能                      | 功能描述                                                                   |
+| ------------------------- | -------------------------------------------------------------------------- |
+| 🎯 **智能 4 层故障转移**  | 自动路由：订阅 → API Key → 低价 → 免费                                     |
+| 📊 **实时配额追踪**       | 实时 Token 计数 + 每个提供商的重置倒计时                                   |
+| 🔄 **格式转换**           | OpenAI ↔ Claude ↔ Gemini ↔ Cursor ↔ Kiro 无缝切换                          |
+| 👥 **多账号支持**         | 每个提供商多个账号，智能选择                                               |
+| 🔄 **自动令牌刷新**       | OAuth 令牌自动刷新并重试                                                   |
+| 🎨 **自定义组合**         | 6 种策略：fill-first、round-robin、p2c、random、least-used、cost-optimized |
+| 🧩 **自定义模型**         | 为任何提供商添加任何模型 ID                                                |
+| 🌐 **通配符路由**         | 动态路由 `provider/*` 模式到任何提供商                                     |
+| 🧠 **推理预算**           | passthrough、auto、custom 和 adaptive 模式用于推理模型                     |
+| 💬 **System Prompt 注入** | 全局 System Prompt 应用于所有请求                                          |
+| 📄 **Responses API**      | 完整支持 OpenAI Responses API (`/v1/responses`) 用于 Codex                 |
+
+### 🎵 多模态 API
+
+| 功能              | 功能描述                                       |
+| ----------------- | ---------------------------------------------- |
+| 🖼️ **图像生成**   | `/v1/images/generations` — 4 个提供商，9+ 模型 |
+| 📐 **Embeddings** | `/v1/embeddings` — 6 个提供商，9+ 模型         |
+| 🎤 **音频转录**   | `/v1/audio/transcriptions` — Whisper 兼容      |
+| 🔊 **文字转语音** | `/v1/audio/speech` — 多提供商音频合成          |
+| 🛡️ **内容审核**   | `/v1/moderations` — 内容安全检查               |
+| 🔀 **重排序**     | `/v1/rerank` — 文档相关性重排序                |
+
+### 🛡️ 弹性与安全
+
+| 功能                  | 功能描述                               |
+| --------------------- | -------------------------------------- |
+| 🔌 **断路器**         | 每个提供商自动打开/关闭，可配置阈值    |
+| 🛡️ **反惊群**         | Mutex + 信号量限速用于 API Key 提供商  |
+| 🧠 **语义缓存**       | 两层缓存（签名 + 语义）降低成本和延迟  |
+| ⚡ **请求幂等性**     | 5 秒去重窗口防止重复请求               |
+| 🔒 **TLS 指纹伪装**   | 通过 wreq-js 绕过基于 TLS 的机器人检测 |
+| 🌐 **IP 过滤**        | 白名单/黑名单用于 API 访问控制         |
+| 📊 **可编辑速率限制** | 可配置的 RPM、最小间隔和最大并发       |
+
+### 📊 可观察性与分析
+
+| 功能               | 功能描述                                   |
+| ------------------ | ------------------------------------------ |
+| 📝 **请求日志**    | 调试模式，完整的请求/响应日志              |
+| 💾 **SQLite 日志** | 持久化代理日志，服务器重启后仍然保留       |
+| 📊 **分析仪表板**  | Recharts：统计卡片、使用量图表、提供商表格 |
+| 📈 **进度追踪**    | 流式传输的 SSE 进度事件（可选）            |
+| 🧪 **LLM 评估**    | 黄金集测试，4 种匹配策略                   |
+| 🔍 **请求遥测**    | p50/p95/p99 延迟聚合 + X-Request-Id 追踪   |
+| 📋 **日志 + 配额** | 专用页面用于日志浏览和配额追踪             |
+| 🏥 **健康仪表板**  | 运行时间、断路器状态、锁定、缓存统计       |
+| 💰 **成本追踪**    | 预算管理 + 每模型定价配置                  |
+
+### ☁️ 部署与同步
+
+| 功能                  | 功能描述                                                   |
+| --------------------- | ---------------------------------------------------------- |
+| 💾 **Cloud Sync**     | 通过 Cloudflare Workers 在设备间同步配置                   |
+| 🌐 **随处部署**       | Localhost、VPS、Docker、Cloudflare Workers                 |
+| 🔑 **API Key 管理**   | 按提供商生成、轮换和设定 API Key 范围                      |
+| 🧙 **配置向导**       | 4 步引导式设置，面向新用户                                 |
+| 🔧 **CLI 工具仪表板** | 一键配置 Claude、Codex、Cline、OpenClaw、Kilo、Antigravity |
+| 🔄 **数据库备份**     | 自动备份和恢复所有设置                                     |
+
+<details>
+<summary><b>📖 功能详情</b></summary>
+
+### 🎯 智能 4 层故障转移
+
+创建带自动故障转移的组合：
+
+```
+Combo: "my-coding-stack"
+  1. cc/claude-opus-4-6        （您的订阅）
+  2. nvidia/llama-3.3-70b      （免费 NVIDIA API）
+  3. glm/glm-4.7               （便宜备用，$0.6/1M）
+  4. if/kimi-k2-thinking       （免费后备）
+
+→ 配额用完或出错时自动切换
+```
+
+### 📊 实时配额追踪
+
+- 每个提供商的 Token 消耗
+- 重置倒计时（5 小时、每日、每周）
+- 付费层级的成本估算
+- 月度支出报告
+
+### 🔄 格式转换
+
+格式间的无缝转换：
+
+- **OpenAI** ↔ **Claude** ↔ **Gemini** ↔ **OpenAI Responses**
+- 您的 CLI 发送 OpenAI 格式 → OmniRoute 转换 → 提供商接收原生格式
+- 适用于任何支持自定义 OpenAI 端点的工具
+
+### 👥 多账号支持
+
+- 每个提供商添加多个账号
+- 自动轮询或基于优先级的路由
+- 当一个账号达到配额时自动切换到下一个
+
+### 🔄 自动令牌刷新
+
+- OAuth 令牌在过期前自动刷新
+- 无需手动重新认证
+- 所有提供商的无缝体验
+
+### 🎨 自定义组合
+
+- 创建无限模型组合
+- 6 种策略：fill-first、round-robin、power-of-two-choices、random、least-used、cost-optimized
+- 通过 Cloud Sync 在设备间共享组合
+
+### 🏥 健康仪表板
+
+- 系统状态（运行时间、版本、内存使用）
+- 每个提供商的断路器状态（Closed/Open/Half-Open）
+- 速率限制状态和活动锁定
+- 签名缓存统计
+- 延迟遥测（p50/p95/p99）+ 提示缓存
+- 一键重置健康状态
+
+### 🔧 翻译器 Playground
+
+- 调试、测试和可视化 API 格式转换
+- 发送请求并查看 OmniRoute 如何在提供商格式间转换
+- 对排查集成问题非常有价值
+
+### 💾 Cloud Sync
+
+- 在设备间同步提供商、组合和设置
+- 自动后台同步
+- 安全加密存储
+
+</details>
+
+---
+
+## 📖 设置指南
+
+<details>
+<summary><b>💳 订阅提供商</b></summary>
+
+### Claude Code (Pro/Max)
+
+```bash
+仪表板 → 提供商 → 连接 Claude Code
+→ OAuth 登录 → 自动令牌刷新
+→ 5 小时 + 每周配额追踪
+
+模型：
+  cc/claude-opus-4-6
+  cc/claude-sonnet-4-5-20250929
+  cc/claude-haiku-4-5-20251001
+```
+
+**专业建议：** 复杂任务用 Opus，追求速度用 Sonnet。OmniRoute 按模型追踪配额！
+
+### OpenAI Codex (Plus/Pro)
+
+```bash
+仪表板 → 提供商 → 连接 Codex
+→ OAuth 登录（端口 1455）
+→ 5 小时 + 每周重置
+
+模型：
+  cx/gpt-5.2-codex
+  cx/gpt-5.1-codex-max
+```
+
+### Gemini CLI（免费 180K/月！）
+
+```bash
+仪表板 → 提供商 → 连接 Gemini CLI
+→ Google OAuth
+→ 每月 180K completions + 每天 1K
+
+模型：
+  gc/gemini-3-flash-preview
+  gc/gemini-2.5-pro
+```
+
+**最佳价值：** 巨大的免费额度！在付费层级之前使用。
+
+### GitHub Copilot
+
+```bash
+仪表板 → 提供商 → 连接 GitHub
+→ 通过 GitHub OAuth
+→ 每月重置（每月 1 日）
+
+模型：
+  gh/gpt-5
+  gh/claude-4.5-sonnet
+  gh/gemini-3-pro
+```
+
+</details>
+
+<details>
+<summary><b>🔑 API Key 提供商</b></summary>
+
+### NVIDIA NIM（免费 1000 积分！）
+
+1. 注册：[build.nvidia.com](https://build.nvidia.com)
+2. 获取免费 API key（包含 1000 推理积分）
+3. 仪表板 → 添加提供商 → NVIDIA NIM：
+   - API Key：`nvapi-your-key`
+
+**模型：** `nvidia/llama-3.3-70b-instruct`、`nvidia/mistral-7b-instruct` 及 50+ 更多
+
+**专业建议：** OpenAI 兼容的 API — 与 OmniRoute 的格式转换完美配合！
+
+### DeepSeek
+
+1. 注册：[platform.deepseek.com](https://platform.deepseek.com)
+2. 获取 API key
+3. 仪表板 → 添加提供商 → DeepSeek
+
+**模型：** `deepseek/deepseek-chat`、`deepseek/deepseek-coder`
+
+### Groq（免费层可用！）
+
+1. 注册：[console.groq.com](https://console.groq.com)
+2. 获取 API key（包含免费层）
+3. 仪表板 → 添加提供商 → Groq
+
+**模型：** `groq/llama-3.3-70b`、`groq/mixtral-8x7b`
+
+**专业建议：** 超快推理 — 最适合实时编程！
+
+### OpenRouter（100+ 模型）
+
+1. 注册：[openrouter.ai](https://openrouter.ai)
+2. 获取 API key
+3. 仪表板 → 添加提供商 → OpenRouter
+
+**模型：** 通过一个 API key 访问所有主要提供商的 100+ 模型。
+
+</details>
+
+<details>
+<summary><b>💰 低价提供商（备用）</b></summary>
+
+### GLM-4.7（每日重置，$0.6/1M）
+
+1. 注册：[Zhipu AI](https://open.bigmodel.cn/)
+2. 从 Coding Plan 获取 API key
+3. 仪表板 → 添加 API Key：
+   - 提供商：`glm`
+   - API Key：`your-key`
+
+**使用：** `glm/glm-4.7`
+
+**专业建议：** Coding Plan 以 1/7 的价格提供 3 倍配额！每日 10:00 AM 重置。
+
+### MiniMax M2.1（5 小时重置，$0.20/1M）
+
+1. 注册：[MiniMax](https://www.minimax.io/)
+2. 获取 API key
+3. 仪表板 → 添加 API Key
+
+**使用：** `minimax/MiniMax-M2.1`
+
+**专业建议：** 长上下文（1M Token）最便宜的选项！
+
+### Kimi K2（$9/月固定）
+
+1. 订阅：[Moonshot AI](https://platform.moonshot.ai/)
+2. 获取 API key
+3. 仪表板 → 添加 API Key
+
+**使用：** `kimi/kimi-latest`
+
+**专业建议：** 固定 $9/月 10M Token = $0.90/1M 有效成本！
+
+</details>
+
+<details>
+<summary><b>🆓 免费提供商（应急备用）</b></summary>
+
+### iFlow（8 个免费模型）
+
+```bash
+仪表板 → 连接 iFlow
+→ iFlow OAuth 登录
+→ 无限使用
+
+模型：
+  if/kimi-k2-thinking
+  if/qwen3-coder-plus
+  if/glm-4.7
+  if/minimax-m2
+  if/deepseek-r1
+```
+
+### Qwen（3 个免费模型）
+
+```bash
+仪表板 → 连接 Qwen
+→ 设备码授权
+→ 无限使用
+
+模型：
+  qw/qwen3-coder-plus
+  qw/qwen3-coder-flash
+```
+
+### Kiro（免费 Claude）
+
+```bash
+仪表板 → 连接 Kiro
+→ AWS Builder ID 或 Google/GitHub
+→ 无限使用
+
+模型：
+  kr/claude-sonnet-4.5
+  kr/claude-haiku-4.5
+```
+
+</details>
+
+<details>
+<summary><b>🎨 创建组合</b></summary>
+
+### 示例 1：最大化订阅 → 便宜备用
+
+```
+仪表板 → 组合 → 创建新的
+
+名称：premium-coding
+模型：
+  1. cc/claude-opus-4-6（订阅主力）
+  2. glm/glm-4.7（便宜备用，$0.6/1M）
+  3. minimax/MiniMax-M2.1（最便宜的后备，$0.20/1M）
+
+在 CLI 中使用：premium-coding
+```
+
+### 示例 2：仅免费（零成本）
+
+```
+名称：free-combo
+模型：
+  1. gc/gemini-3-flash-preview（每月 180K 免费）
+  2. if/kimi-k2-thinking（无限制）
+  3. qw/qwen3-coder-plus（无限制）
+
+成本：永远 $0！
+```
+
+</details>
+
+<details>
+<summary><b>🔧 CLI 集成</b></summary>
+
+### Cursor IDE
+
+```
+设置 → 模型 → 高级：
+  OpenAI API Base URL: http://localhost:20128/v1
+  OpenAI API Key: [从 OmniRoute 仪表板获取]
+  Model: cc/claude-opus-4-6
+```
+
+### Claude Code
+
+使用仪表板中的 **CLI Tools** 页面一键配置，或手动编辑 `~/.claude/settings.json`。
+
+### Codex CLI
+
+```bash
+export OPENAI_BASE_URL="http://localhost:20128"
+export OPENAI_API_KEY="your-omniroute-api-key"
+
+codex "your prompt"
+```
+
+### OpenClaw
+
+**选项 1 — 仪表板（推荐）：**
+
+```
+仪表板 → CLI Tools → OpenClaw → 选择模型 → 应用
+```
+
+**选项 2 — 手动：** 编辑 `~/.openclaw/openclaw.json`：
+
+```json
+{
+  "models": {
+    "providers": {
+      "omniroute": {
+        "baseUrl": "http://127.0.0.1:20128/v1",
+        "apiKey": "sk_omniroute",
+        "api": "openai-completions"
+      }
+    }
+  }
+}
+```
+
+> **注意：** OpenClaw 仅支持本地 OmniRoute。使用 `127.0.0.1` 而非 `localhost` 以避免 IPv6 解析问题。
+
+### Cline / Continue / RooCode
+
+```
+设置 → API 配置：
+  提供商：OpenAI Compatible
+  Base URL: http://localhost:20128/v1
+  API Key: [从 OmniRoute 仪表板获取]
+  Model: if/kimi-k2-thinking
+```
+
+</details>
+
+---
+
+## 📊 可用模型
+
+<details>
+<summary><b>查看所有可用模型</b></summary>
+
+**Claude Code (`cc/`)** - Pro/Max:
+
+- `cc/claude-opus-4-6`
+- `cc/claude-sonnet-4-5-20250929`
+- `cc/claude-haiku-4-5-20251001`
+
+**Codex (`cx/`)** - Plus/Pro:
+
+- `cx/gpt-5.2-codex`
+- `cx/gpt-5.1-codex-max`
+
+**Gemini CLI (`gc/`)** - 免费:
+
+- `gc/gemini-3-flash-preview`
+- `gc/gemini-2.5-pro`
+
+**GitHub Copilot (`gh/`)**:
+
+- `gh/gpt-5`
+- `gh/claude-4.5-sonnet`
+
+**NVIDIA NIM (`nvidia/`)** - 免费积分:
+
+- `nvidia/llama-3.3-70b-instruct`
+- `nvidia/mistral-7b-instruct`
+- 50+ 更多模型在 [build.nvidia.com](https://build.nvidia.com)
+
+**GLM (`glm/`)** - $0.6/1M:
+
+- `glm/glm-4.7`
+
+**MiniMax (`minimax/`)** - $0.2/1M:
+
+- `minimax/MiniMax-M2.1`
+
+**iFlow (`if/`)** - 免费:
+
+- `if/kimi-k2-thinking`
+- `if/qwen3-coder-plus`
+- `if/deepseek-r1`
+- `if/glm-4.7`
+- `if/minimax-m2`
+
+**Qwen (`qw/`)** - 免费:
+
+- `qw/qwen3-coder-plus`
+- `qw/qwen3-coder-flash`
+
+**Kiro (`kr/`)** - 免费:
+
+- `kr/claude-sonnet-4.5`
+- `kr/claude-haiku-4.5`
+
+**OpenRouter (`or/`)** - 100+ 模型:
+
+- `or/anthropic/claude-4-sonnet`
+- `or/google/gemini-2.5-pro`
+- [openrouter.ai/models](https://openrouter.ai/models) 上的任何模型
+
+</details>
+
+---
+
+## 🧪 评估 (Evals)
+
+OmniRoute 包含内置评估框架，用于针对黄金集测试 LLM 响应质量。通过仪表板中的 **Analytics → Evals** 访问。
+
+### 内置黄金集
+
+预加载的「OmniRoute Golden Set」包含 10 个测试用例：
+
+- 问候、数学、地理、代码生成
+- JSON 格式合规性、翻译、markdown
+- 安全拒绝（有害内容）、计数、布尔逻辑
+
+### 评估策略
+
+| 策略       | 描述                             | 示例                             |
+| ---------- | -------------------------------- | -------------------------------- |
+| `exact`    | 输出必须完全匹配                 | `"4"`                            |
+| `contains` | 输出必须包含子串（不区分大小写） | `"Paris"`                        |
+| `regex`    | 输出必须匹配正则表达式模式       | `"1.*2.*3"`                      |
+| `custom`   | 自定义 JS 函数返回 true/false    | `(output) => output.length > 10` |
+
+---
+
+## 🐛 故障排除
+
+<details>
+<summary><b>点击展开故障排除指南</b></summary>
+
+**"Language model did not provide messages"**
+
+- 提供商配额已耗尽 → 检查仪表板配额追踪器
+- 解决方案：使用组合故障转移或切换到更便宜的层级
+
+**速率限制**
+
+- 订阅配额耗尽 → 回退到 GLM/MiniMax
+- 添加组合：`cc/claude-opus-4-6 → glm/glm-4.7 → if/kimi-k2-thinking`
+
+**OAuth 令牌过期**
+
+- OmniRoute 自动刷新
+- 如果问题持续：仪表板 → 提供商 → 重新连接
+
+**高成本**
+
+- 在仪表板 → 成本中检查使用统计
+- 将主要模型切换为 GLM/MiniMax
+- 对非关键任务使用免费层（Gemini CLI、iFlow）
+
+**仪表板在错误端口打开**
+
+- 设置 `PORT=20128` 和 `NEXT_PUBLIC_BASE_URL=http://localhost:20128`
+
+**Cloud sync 错误**
+
+- 验证 `BASE_URL` 指向您正在运行的实例
+- 验证 `CLOUD_URL` 指向预期的云端点
+- 保持 `NEXT_PUBLIC_*` 值与服务器端值一致
+
+**首次登录不工作**
+
+- 检查 `.env` 中的 `INITIAL_PASSWORD`
+- 如未设置，默认密码为 `123456`
+
+**没有请求日志**
+
+- 在 `.env` 中设置 `ENABLE_REQUEST_LOGS=true`
+
+**兼容 OpenAI 的提供商连接测试显示 "Invalid"**
+
+- 许多提供商不暴露 `/models` 端点
+- OmniRoute v1.0.6+ 包含通过 chat completions 的回退验证
+- 确保 base URL 包含 `/v1` 后缀
+
+</details>
+
+---
+
+## 🛠️ 技术栈
+
+- **运行时**: Node.js 20+
+- **语言**: TypeScript 5.9 — `src/` 和 `open-sse/` 中 **100% TypeScript**（v1.0.6）
+- **框架**: Next.js 16 + React 19 + Tailwind CSS 4
+- **数据库**: LowDB (JSON) + SQLite（领域状态 + 代理日志）
+- **流式传输**: Server-Sent Events (SSE)
+- **认证**: OAuth 2.0 (PKCE) + JWT + API Keys
+- **测试**: Node.js test runner（368+ 单元测试）
+- **CI/CD**: GitHub Actions（发布时自动 npm 发布 + Docker Hub）
+- **网站**: [omniroute.online](https://omniroute.online)
+- **包**: [npmjs.com/package/omniroute](https://www.npmjs.com/package/omniroute)
+- **Docker**: [hub.docker.com/r/diegosouzapw/omniroute](https://hub.docker.com/r/diegosouzapw/omniroute)
+- **弹性**: 断路器、指数退避、反惊群、TLS 伪装
+
+---
+
+## 📖 文档
+
+| 文档                                | 描述                         |
+| ----------------------------------- | ---------------------------- |
+| [用户指南](docs/USER_GUIDE.md)      | 提供商、组合、CLI 集成、部署 |
+| [API 参考](docs/API_REFERENCE.md)   | 所有端点及示例               |
+| [故障排除](docs/TROUBLESHOOTING.md) | 常见问题和解决方案           |
+| [架构](docs/ARCHITECTURE.md)        | 系统架构和内部机制           |
+| [贡献指南](CONTRIBUTING.md)         | 开发设置和指南               |
+| [OpenAPI 规范](docs/openapi.yaml)   | OpenAPI 3.0 规范             |
+| [安全策略](SECURITY.md)             | 漏洞报告和安全实践           |
+
+---
+
+## 📧 支持
+
+> 💬 **加入我们的社区！** [WhatsApp 群组](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t) — 获取帮助、分享技巧、了解最新动态。
+
+- **网站**: [omniroute.online](https://omniroute.online)
+- **GitHub**: [github.com/diegosouzapw/OmniRoute](https://github.com/diegosouzapw/OmniRoute)
+- **Issues**: [github.com/diegosouzapw/OmniRoute/issues](https://github.com/diegosouzapw/OmniRoute/issues)
+- **WhatsApp**: [社区群组](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
+- **原始项目**: [decolua 的 9router](https://github.com/decolua/9router)
+
+---
+
+## 👥 贡献者
+
+[![Contributors](https://contrib.rocks/image?repo=diegosouzapw/OmniRoute&max=100&columns=20&anon=1)](https://github.com/diegosouzapw/OmniRoute/graphs/contributors)
+
+### 如何贡献
+
+1. Fork 仓库
+2. 创建功能分支（`git checkout -b feature/amazing-feature`）
+3. 提交更改（`git commit -m 'Add amazing feature'`）
+4. 推送到分支（`git push origin feature/amazing-feature`）
+5. 打开 Pull Request
+
+详细指南请参阅 [CONTRIBUTING.md](CONTRIBUTING.md)。
+
+### 发布新版本
+
+```bash
+# 创建发布 — npm 发布自动完成
+gh release create v1.0.6 --title "v1.0.6" --generate-notes
+```
+
+---
+
+## 📊 Star 历史
+
+<a href="https://star-history.com/#diegosouzapw/OmniRoute&Date">
+ <picture>
+   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=diegosouzapw/OmniRoute&type=Date&theme=dark" />
+   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=diegosouzapw/OmniRoute&type=Date" />
+   <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=diegosouzapw/OmniRoute&type=Date" />
+ </picture>
+</a>
+
+---
+
+## 🙏 致谢
+
+特别感谢 **[decolua](https://github.com/decolua)** 的 **[9router](https://github.com/decolua/9router)** — 启发了本 fork 的原始项目。OmniRoute 在这个令人难以置信的基础上添加了额外功能、多模态 API 和完整的 TypeScript 重写。
+
+特别感谢 **[CLIProxyAPI](https://github.com/router-for-me/CLIProxyAPI)** — 启发了本 JavaScript 移植的原始 Go 实现。
+
+---
+
+## 📄 许可证
+
+MIT 许可证 — 详见 [LICENSE](LICENSE)。
+
+---
+
+<div align="center">
+  <sub>用 ❤️ 为 24/7 编程的开发者打造</sub>
+  <br/>
+  <sub><a href="https://omniroute.online">omniroute.online</a></sub>
+</div>

SECURITY.md

@@ -20,9 +20,9 @@ If you discover a security vulnerability in OmniRoute, please report it responsi
 
 | Version | Support Status |
 | ------- | -------------- |
-| 0.8.x   | ✅ Active      |
-| 0.7.x   | ✅ Security    |
-| < 0.7.0 | ❌ Unsupported |
+| 1.0.x   | ✅ Active      |
+| 0.8.x   | ✅ Security    |
+| < 0.8.0 | ❌ Unsupported |
 
 ---
 

bin/omniroute.mjs

@@ -81,17 +81,26 @@ console.log(`
   \\____/|_| |_| |_|_| |_|_|_|  \\_\\___/ \\__,_|\\__\\___|
 \x1b[0m`);
 
+// ── Node.js version check ──────────────────────────────────
+const nodeMajor = parseInt(process.versions.node.split(".")[0], 10);
+if (nodeMajor >= 24) {
+  console.warn(`\x1b[33m  ⚠  Warning: You are running Node.js ${process.versions.node}.
+     OmniRoute uses better-sqlite3, a native addon that does not yet
+     have compatible prebuilt binaries for Node.js 24+.
+     You may experience errors like "is not a valid Win32 application"
+     or "NODE_MODULE_VERSION mismatch".
+
+     Recommended: use Node.js 22 LTS (or 20 LTS).
+     Workaround:  npm rebuild better-sqlite3\x1b[0m
+`);
+}
+
 // ── Resolve server entry ───────────────────────────────────
 const serverJs = join(APP_DIR, "server.js");
 
 if (!existsSync(serverJs)) {
-  console.error(
-    "\x1b[31m✖ Server not found at:\x1b[0m",
-    serverJs,
-  );
-  console.error(
-    "  This usually means the package was not built correctly.",
-  );
+  console.error("\x1b[31m✖ Server not found at:\x1b[0m", serverJs);
+  console.error("  This usually means the package was not built correctly.");
   console.error("  Try reinstalling: npm install -g omniroute");
   process.exit(1);
 }
@@ -119,7 +128,10 @@ server.stdout.on("data", (data) => {
   process.stdout.write(text);
 
   // Detect server ready
-  if (!started && (text.includes("Ready") || text.includes("started") || text.includes("listening"))) {
+  if (
+    !started &&
+    (text.includes("Ready") || text.includes("started") || text.includes("listening"))
+  ) {
     started = true;
     onReady();
   }

docker-compose.yml

@@ -18,6 +18,8 @@
 x-common: &common
   restart: unless-stopped
   env_file: .env
+  environment:
+    - DATA_DIR=/app/data # Must match the volume mount below
   volumes:
     - omniroute-data:/app/data
   healthcheck:

docs/API_REFERENCE.md

@@ -227,6 +227,17 @@ Response example:
 | `/api/monitoring/health` | GET        | Health check            |
 | `/api/cache`             | GET/DELETE | Cache stats / clear     |
 
+### Backup & Export/Import
+
+| Endpoint                    | Method | Description                             |
+| --------------------------- | ------ | --------------------------------------- |
+| `/api/db-backups`           | GET    | List available backups                  |
+| `/api/db-backups`           | PUT    | Create a manual backup                  |
+| `/api/db-backups`           | POST   | Restore from a specific backup          |
+| `/api/db-backups/export`    | GET    | Download database as .sqlite file       |
+| `/api/db-backups/import`    | POST   | Upload .sqlite file to replace database |
+| `/api/db-backups/exportAll` | GET    | Download full backup as .tar.gz archive |
+
 ### Cloud Sync
 
 | Endpoint               | Method  | Description           |

docs/ARCHITECTURE.md

@@ -1,6 +1,6 @@
 # OmniRoute Architecture
 
-_Last updated: 2026-02-17_
+_Last updated: 2026-02-18_
 
 ## Executive Summary
 
@@ -17,6 +17,9 @@ Core capabilities:
 - Embedding generation via `/v1/embeddings` (6 providers, 9 models)
 - Image generation via `/v1/images/generations` (4 providers, 9 models)
 - Think tag parsing (`<think>...</think>`) for reasoning models
+- Response sanitization for strict OpenAI SDK compatibility
+- Role normalization (developer→system, system→user) for cross-provider compatibility
+- Structured output conversion (json_schema → Gemini responseSchema)
 - Local persistence for providers, keys, aliases, combos, settings, pricing
 - Usage/cost tracking and request logging
 - Optional cloud sync for multi-device/state sync
@@ -180,6 +183,8 @@ Main flow modules:
 - Embedding provider registry: `open-sse/config/embeddingRegistry.ts`
 - Image generation handler: `open-sse/handlers/imageGeneration.ts`
 - Image provider registry: `open-sse/config/imageRegistry.ts`
+- Response sanitization: `open-sse/handlers/responseSanitizer.ts`
+- Role normalization: `open-sse/services/roleNormalizer.ts`
 
 Services (business logic):
 
@@ -408,6 +413,9 @@ erDiagram
       number stickyRoundRobinLimit
       boolean requireLogin
       string password_hash
+      string fallbackStrategy
+      json rateLimitDefaults
+      json providerProfiles
     }
 
     PROVIDER_CONNECTION {
@@ -644,6 +652,13 @@ Source Format → OpenAI (hub) → Target Format
 
 Translations are selected dynamically based on source payload shape and provider target format.
 
+Additional processing layers in the translation pipeline:
+
+- **Response sanitization** — Strips non-standard fields from OpenAI-format responses (both streaming and non-streaming) to ensure strict SDK compliance
+- **Role normalization** — Converts `developer` → `system` for non-OpenAI targets; merges `system` → `user` for models that reject the system role (GLM, ERNIE)
+- **Think tag extraction** — Parses `<think>...</think>` blocks from content into `reasoning_content` field
+- **Structured output** — Converts OpenAI `response_format.json_schema` to Gemini's `responseMimeType` + `responseSchema`
+
 ## Supported API Endpoints
 
 | Endpoint                                           | Format             | Handler                                              |
@@ -750,13 +765,14 @@ Environment variables actively used by code:
 3. Request logger writes full headers/body when enabled; treat log directory as sensitive.
 4. Cloud behavior depends on correct `NEXT_PUBLIC_BASE_URL` and cloud endpoint reachability.
 5. The `open-sse/` directory is published as the `@omniroute/open-sse` **npm workspace package**. Source code imports it via `@omniroute/open-sse/...` (resolved by Next.js `transpilePackages`). File paths in this document still use the directory name `open-sse/` for consistency.
-6. Charts in the dashboard use **Recharts** (SVG-based) for accessible, interactive visualizations (bar charts, donut charts).
+6. Charts in the dashboard use **Recharts** (SVG-based) for accessible, interactive analytics visualizations (model usage bar charts, provider breakdown tables with success rates).
 7. E2E tests use **Playwright** (`tests/e2e/`), run via `npm run test:e2e`. Unit tests use **Node.js test runner** (`tests/unit/`), run via `npm run test:plan3`. Source code under `src/` is **TypeScript** (`.ts`/`.tsx`); the `open-sse/` workspace remains JavaScript (`.js`).
+8. Settings page is organized into 5 tabs: Security, Routing (6 global strategies: fill-first, round-robin, p2c, random, least-used, cost-optimized), Resilience (editable rate limits, circuit breaker, policies), AI (thinking budget, system prompt, prompt cache), Advanced (proxy).
 
 ## Operational Verification Checklist
 
-- Build from source: `cd /root/dev/omniroute && npm run build`
-- Build Docker image: `cd /root/dev/omniroute && docker build -t omniroute .`
+- Build from source: `npm run build`
+- Build Docker image: `docker build -t omniroute .`
 - Start service and verify:
 - `GET /api/settings`
 - `GET /api/v1/models`

docs/FEATURES.md

@@ -0,0 +1,75 @@
+# OmniRoute — Dashboard Features Gallery
+
+Visual guide to every section of the OmniRoute dashboard.
+
+---
+
+## 🔌 Providers
+
+Manage AI provider connections: OAuth providers (Claude Code, Codex, Gemini CLI), API key providers (Groq, DeepSeek, OpenRouter), and free providers (iFlow, Qwen, Kiro).
+
+![Providers Dashboard](screenshots/01-providers.png)
+
+---
+
+## 🎨 Combos
+
+Create model routing combos with 6 strategies: fill-first, round-robin, power-of-two-choices, random, least-used, and cost-optimized. Each combo chains multiple models with automatic fallback.
+
+![Combos Dashboard](screenshots/02-combos.png)
+
+---
+
+## 📊 Analytics
+
+Comprehensive usage analytics with token consumption, cost estimates, activity heatmaps, weekly distribution charts, and per-provider breakdowns.
+
+![Analytics Dashboard](screenshots/03-analytics.png)
+
+---
+
+## 🏥 System Health
+
+Real-time monitoring: uptime, memory, version, latency percentiles (p50/p95/p99), cache statistics, and provider circuit breaker states.
+
+![Health Dashboard](screenshots/04-health.png)
+
+---
+
+## 🔧 Translator Playground
+
+Four modes for debugging API translations: **Playground** (format converter), **Chat Tester** (live requests), **Test Bench** (batch tests), and **Live Monitor** (real-time stream).
+
+![Translator Playground](screenshots/05-translator.png)
+
+---
+
+## ⚙️ Settings
+
+General settings, system storage, backup management (export/import database), appearance (dark/light mode), security (includes API endpoint protection and custom provider blocking), routing, resilience, and advanced configuration.
+
+![Settings Dashboard](screenshots/06-settings.png)
+
+---
+
+## 🔧 CLI Tools
+
+One-click configuration for AI coding tools: Claude Code, Codex CLI, Gemini CLI, OpenClaw, Kilo Code, and Antigravity.
+
+![CLI Tools Dashboard](screenshots/07-cli-tools.png)
+
+---
+
+## 📝 Request Logs
+
+Real-time request logging with filtering by provider, model, account, and API key. Shows status codes, token usage, latency, and response details.
+
+![Usage Logs](screenshots/08-usage.png)
+
+---
+
+## 🌐 API Endpoint
+
+Your unified API endpoint with capability breakdown: Chat Completions, Embeddings, Image Generation, Reranking, Audio Transcription, and registered API keys.
+
+![Endpoint Dashboard](screenshots/09-endpoint.png)

docs/TASKS.md

@@ -8,24 +8,24 @@
 
 ### Backend Core
 
-- [ ] `constants.js` — Substituir `COOLDOWN_MS.transient` por `transientInitial` (5s) + `transientMax` (60s)
-- [ ] `constants.js` — Adicionar `PROVIDER_PROFILES` (oauth / apikey) com cooldowns diferenciados
-- [ ] `constants.js` — Adicionar `DEFAULT_API_LIMITS` (100 RPM, 200ms minTime)
-- [ ] `providerRegistry.js` — Criar helper `getProviderCategory(providerId)` → `"oauth"` | `"apikey"`
-- [ ] `accountFallback.js` — Aceitar `provider` como parâmetro em `checkFallbackError`
-- [ ] `accountFallback.js` — Implementar backoff exponencial para 502/503/504 transientes
-- [ ] `accountFallback.js` — Calcular cooldown baseado no perfil do provedor
-- [ ] `accountFallback.js` — Adicionar helper `getProviderProfile(provider)`
+- [x] `constants.ts` — Substituir `COOLDOWN_MS.transient` por `transientInitial` (5s) + `transientMax` (60s)
+- [x] `constants.ts` — Adicionar `PROVIDER_PROFILES` (oauth / apikey) com cooldowns diferenciados
+- [x] `constants.ts` — Adicionar `DEFAULT_API_LIMITS` (100 RPM, 200ms minTime)
+- [x] `providerRegistry.ts` — Criar helper `getProviderCategory(providerId)` → `"oauth"` | `"apikey"`
+- [x] `accountFallback.ts` — Aceitar `provider` como parâmetro em `checkFallbackError`
+- [x] `accountFallback.ts` — Implementar backoff exponencial para 502/503/504 transientes
+- [x] `accountFallback.ts` — Calcular cooldown baseado no perfil do provedor
+- [x] `accountFallback.ts` — Adicionar helper `getProviderProfile(provider)`
 
 ### Callers (propagar `provider`)
 
-- [ ] `auth.js` → `markAccountUnavailable` — Passar `provider` para `checkFallbackError`
-- [ ] `combo.js` → `handleComboChat` / `handleRoundRobinCombo` — Passar `provider` nos erros
+- [x] `auth.ts` → `markAccountUnavailable` — Passar `provider` para `checkFallbackError`
+- [x] `combo.ts` → `handleComboChat` / `handleRoundRobinCombo` — Passar `provider` nos erros
 
 ### Testes
 
-- [ ] Atualizar `rate-limit-enhanced.test.mjs` — Teste "transient errors don't increase backoff" → `newBackoffLevel = 1`
-- [ ] Criar `error-classification.test.mjs` — Cooldown exponencial 502, perfis OAuth/API, helper `getProviderCategory`
+- [x] Atualizar `rate-limit-enhanced.test.mjs` — Teste "transient errors don't increase backoff" → `newBackoffLevel = 1`
+- [x] Criar `error-classification.test.mjs` — Cooldown exponencial 502, perfis OAuth/API, helper `getProviderCategory`
 
 ---
 
@@ -33,15 +33,15 @@
 
 ### Backend
 
-- [ ] `combo.js` — Importar `getCircuitBreaker` e `CircuitBreakerOpenError`
-- [ ] `combo.js` — `handleComboChat` — Verificar `breaker.canExecute()` antes de cada modelo
-- [ ] `combo.js` — `handleRoundRobinCombo` — Integrar breaker per-model
-- [ ] `combo.js` — Marcar `semaphore.markRateLimited` para 502/503/504 (não só 429)
-- [ ] `combo.js` — Implementar early exit quando todos os modelos têm breaker OPEN
+- [x] `combo.ts` — Importar `getCircuitBreaker` e `CircuitBreakerOpenError`
+- [x] `combo.ts` — `handleComboChat` — Verificar `breaker.canExecute()` antes de cada modelo
+- [x] `combo.ts` — `handleRoundRobinCombo` — Integrar breaker per-model
+- [x] `combo.ts` — Marcar `semaphore.markRateLimited` para 502/503/504 (não só 429)
+- [x] `combo.ts` — Implementar early exit quando todos os modelos têm breaker OPEN
 
 ### Testes
 
-- [ ] Criar `combo-circuit-breaker.test.mjs` — Combo skip breaker OPEN, early exit, semáforo 502
+- [x] Criar `combo-circuit-breaker.test.mjs` — Combo skip breaker OPEN, early exit, semáforo 502
 
 ---
 
@@ -49,13 +49,13 @@
 
 ### Backend
 
-- [ ] `rateLimitManager.js` — Auto-enable para `apikey` providers com limites elevados
-- [ ] `rateLimitManager.js` — Criar limiter com defaults (100 RPM) quando não configurado
-- [ ] `auth.js` — Adicionar mutex na `markAccountUnavailable` para evitar marcação paralela
+- [x] `rateLimitManager.ts` — Auto-enable para `apikey` providers com limites elevados
+- [x] `rateLimitManager.ts` — Criar limiter com defaults (100 RPM) quando não configurado
+- [x] `auth.ts` — Adicionar mutex na `markAccountUnavailable` para evitar marcação paralela
 
 ### Testes
 
-- [ ] Criar `thundering-herd.test.mjs` — Mutex, auto-enable, limites não restritivos
+- [x] Criar `thundering-herd.test.mjs` — Mutex, auto-enable, limites não restritivos
 
 ---
 
@@ -63,30 +63,51 @@
 
 ### Settings Page
 
-- [ ] `settings/page.tsx` — Adicionar tab "Resilience" (icon: `health_and_safety`) entre Routing e Pricing
+- [x] `settings/page.tsx` — Adicionar tab "Resilience" (icon: `health_and_safety`) entre Routing e Pricing
 
 ### Novos Componentes
 
-- [ ] Criar `ResilienceTab.tsx` — Layout com 3 cards
-- [ ] Criar `ProviderProfilesCard.tsx` — Toggle OAuth/API Key, inputs para cooldowns
-- [ ] Criar `CircuitBreakerCard.tsx` — Status real-time per-provider, auto-refresh 5s, botão reset
-- [ ] Criar `RateLimitOverviewCard.tsx` — Tabela providers × accounts × cooldown
+- [x] Criar `ResilienceTab.tsx` — Layout com 4 cards (Provider Profiles → Rate Limiting → Circuit Breakers → Policies)
+- [x] Criar `ProviderProfilesCard.tsx` — Toggle OAuth/API Key, inputs para cooldowns
+- [x] Criar `CircuitBreakerCard.tsx` — Status real-time per-provider, auto-refresh 5s, botão reset
+- [x] Criar `RateLimitOverviewCard.tsx` — Tabela providers × accounts × cooldown — **agora editável com RPM, Min Gap, Max Concurrent**
 
 ### API Routes
 
-- [ ] Criar `api/resilience/route.ts` — GET (estado completo) + PATCH (salvar perfis)
-- [ ] Criar `api/resilience/reset/route.ts` — POST (resetar breakers + cooldowns)
+- [x] Criar `api/resilience/route.ts` — GET (estado completo + defaults mesclados) + PATCH (salvar perfis + defaults)
+- [x] Criar `api/resilience/reset/route.ts` — POST (resetar breakers + cooldowns)
 
 ### Migração
 
-- [ ] Avaliar se `PoliciesPanel.tsx` pode ser removido ou simplificado após nova aba
+- [x] `PoliciesPanel.tsx` movido de Security para Resilience tab
+
+---
+
+## Fase 5 — Settings Page Restructure (v0.9.0)
+
+### Tab Reorganization
+
+- [x] **Security** — Simplificado para Login/Password + IP Access Control
+- [x] **Routing** — Expandido para 6 estratégias globais com descrições
+- [x] **Resilience** — Reordenado: Provider Profiles → Rate Limiting (editável) → Circuit Breakers → Policies
+- [x] **AI** — Thinking Budget + System Prompt + Prompt Cache (movido do Advanced)
+- [x] **Advanced** — Simplificado para apenas Global Proxy
+
+### Backend Routing Strategies
+
+- [x] `auth.ts` — Implementar `random` (Fisher-Yates shuffle)
+- [x] `auth.ts` — Implementar `least-used` (sorted by lastUsedAt)
+- [x] `auth.ts` — Implementar `cost-optimized` (sorted by priority)
+- [x] `auth.ts` — Corrigir `p2c` (power-of-two-choices com health scoring)
+- [x] `settings.ts` — Expandir tipo `fallbackStrategy` para 6 valores
 
 ---
 
 ## Verificação Final
 
-- [ ] Rodar todos os testes unitários: `node --test tests/unit/*.test.mjs`
-- [ ] Build do Next.js: `npm run build`
-- [ ] Verificar aba Resilience no browser
-- [ ] Testar persistência dos perfis (salvar → reload)
-- [ ] Testar Reset All Breakers
+- [x] Rodar todos os testes unitários: `node --test tests/unit/*.test.mjs`
+- [x] Build do Next.js: `npm run build`
+- [x] Verificar aba Resilience no browser
+- [x] Testar persistência dos perfis (salvar → reload)
+- [x] Testar Reset All Breakers
+- [x] Verificar todas as 5 tabs reestruturadas

docs/TROUBLESHOOTING.md

@@ -177,6 +177,10 @@ Use **Dashboard → Translator** to debug format translation issues:
 - **Thinking tags not appearing** — Check if the target provider supports thinking and the thinking budget setting
 - **Tool calls dropping** — Some format translations may strip unsupported fields; verify in Playground mode
 - **System prompt missing** — Claude and Gemini handle system prompts differently; check translation output
+- **SDK returns raw string instead of object** — Fixed in v1.1.0: response sanitizer now strips non-standard fields (`x_groq`, `usage_breakdown`, etc.) that cause OpenAI SDK Pydantic validation failures
+- **GLM/ERNIE rejects `system` role** — Fixed in v1.1.0: role normalizer automatically merges system messages into user messages for incompatible models
+- **`developer` role not recognized** — Fixed in v1.1.0: automatically converted to `system` for non-OpenAI providers
+- **`json_schema` not working with Gemini** — Fixed in v1.1.0: `response_format` is now converted to Gemini's `responseMimeType` + `responseSchema`
 
 ---
 

docs/USER_GUIDE.md

@@ -513,6 +513,9 @@ Configure via **Dashboard → Settings → Routing**.
 | **Fill First**                 | Uses accounts in priority order — primary account handles all requests until unavailable         |
 | **Round Robin**                | Cycles through all accounts with a configurable sticky limit (default: 3 calls per account)      |
 | **P2C (Power of Two Choices)** | Picks 2 random accounts and routes to the healthier one — balances load with awareness of health |
+| **Random**                     | Randomly selects an account for each request using Fisher-Yates shuffle                          |
+| **Least Used**                 | Routes to the account with the oldest `lastUsedAt` timestamp, distributing traffic evenly        |
+| **Cost Optimized**             | Routes to the account with the lowest priority value, optimizing for lowest-cost providers       |
 
 #### Wildcard Model Aliases
 
@@ -542,25 +545,79 @@ Chain: production-fallback
 
 Configure via **Dashboard → Settings → Resilience**.
 
-OmniRoute implements provider-level resilience with three components:
+OmniRoute implements provider-level resilience with four components:
 
-1. **Circuit Breaker** — Tracks failures per provider and automatically opens the circuit when a threshold is reached:
-   - **CLOSED** (Healthy) — Requests flow normally
-   - **OPEN** — Provider is temporarily blocked after repeated failures
-   - **HALF_OPEN** — Testing if provider has recovered
-
-2. **Provider Profiles** — Per-provider configuration for:
+1. **Provider Profiles** — Per-provider configuration for:
    - Failure threshold (how many failures before opening)
    - Cooldown duration
    - Rate limit detection sensitivity
    - Exponential backoff parameters
 
-3. **Rate Limit Auto-Detection** — Monitors `429` and `Retry-After` headers to proactively avoid hitting provider rate limits.
+2. **Editable Rate Limits** — System-level defaults configurable in the dashboard:
+   - **Requests Per Minute (RPM)** — Maximum requests per minute per account
+   - **Min Time Between Requests** — Minimum gap in milliseconds between requests
+   - **Max Concurrent Requests** — Maximum simultaneous requests per account
+   - Click **Edit** to modify, then **Save** or **Cancel**. Values persist via the resilience API.
+
+3. **Circuit Breaker** — Tracks failures per provider and automatically opens the circuit when a threshold is reached:
+   - **CLOSED** (Healthy) — Requests flow normally
+   - **OPEN** — Provider is temporarily blocked after repeated failures
+   - **HALF_OPEN** — Testing if provider has recovered
+
+4. **Policies & Locked Identifiers** — Shows circuit breaker status and locked identifiers with force-unlock capability.
+
+5. **Rate Limit Auto-Detection** — Monitors `429` and `Retry-After` headers to proactively avoid hitting provider rate limits.
 
 **Pro Tip:** Use **Reset All** button to clear all circuit breakers and cooldowns when a provider recovers from an outage.
 
 ---
 
+### Database Export / Import
+
+Manage database backups in **Dashboard → Settings → System & Storage**.
+
+| Action                   | Description                                                                                                                    |
+| ------------------------ | ------------------------------------------------------------------------------------------------------------------------------ |
+| **Export Database**      | Downloads the current SQLite database as a `.sqlite` file                                                                      |
+| **Export All (.tar.gz)** | Downloads a full backup archive including: database, settings, combos, provider connections (no credentials), API key metadata |
+| **Import Database**      | Upload a `.sqlite` file to replace the current database. A pre-import backup is automatically created                          |
+
+```bash
+# API: Export database
+curl -o backup.sqlite http://localhost:20128/api/db-backups/export
+
+# API: Export all (full archive)
+curl -o backup.tar.gz http://localhost:20128/api/db-backups/exportAll
+
+# API: Import database
+curl -X POST http://localhost:20128/api/db-backups/import \
+  -F "file=@backup.sqlite"
+```
+
+**Import Validation:** The imported file is validated for integrity (SQLite pragma check), required tables (`provider_connections`, `provider_nodes`, `combos`, `api_keys`), and size (max 100MB).
+
+**Use Cases:**
+
+- Migrate OmniRoute between machines
+- Create external backups for disaster recovery
+- Share configurations between team members (export all → share archive)
+
+---
+
+### Settings Dashboard
+
+The settings page is organized into 5 tabs for easy navigation:
+
+| Tab            | Contents                                                                                       |
+| -------------- | ---------------------------------------------------------------------------------------------- |
+| **Security**   | Login/Password settings, IP Access Control, API auth for `/models`, and Provider Blocking      |
+| **Routing**    | Global routing strategy (6 options), wildcard model aliases, fallback chains, combo defaults   |
+| **Resilience** | Provider profiles, editable rate limits, circuit breaker status, policies & locked identifiers |
+| **AI**         | Thinking budget configuration, global system prompt injection, prompt cache stats              |
+| **Advanced**   | Global proxy configuration (HTTP/SOCKS5)                                                       |
+
+---
+
 ### Costs & Budget Management
 
 Access via **Dashboard → Costs**.

docs/VM_DEPLOYMENT_GUIDE.md

@@ -0,0 +1,399 @@
+# OmniRoute — Guia de Deploy em VM com Cloudflare
+
+Guia completo para instalar e configurar o OmniRoute em uma VM (VPS) com domínio gerenciado via Cloudflare.
+
+---
+
+## Pré-Requisitos
+
+| Item        | Mínimo                   | Recomendado      |
+| ----------- | ------------------------ | ---------------- |
+| **CPU**     | 1 vCPU                   | 2 vCPU           |
+| **RAM**     | 1 GB                     | 2 GB             |
+| **Disco**   | 10 GB SSD                | 25 GB SSD        |
+| **SO**      | Ubuntu 22.04 LTS         | Ubuntu 24.04 LTS |
+| **Domínio** | Registrado no Cloudflare | —                |
+| **Docker**  | Docker Engine 24+        | Docker 27+       |
+
+**Providers testados**: Akamai (Linode), DigitalOcean, Vultr, Hetzner, AWS Lightsail.
+
+---
+
+## 1. Configurar a VM
+
+### 1.1 Criar a instância
+
+No seu provider de VPS preferido:
+
+- Escolha Ubuntu 24.04 LTS
+- Selecione o plano mínimo (1 vCPU / 1 GB RAM)
+- Defina uma senha forte para root ou configure SSH key
+- Anote o **IP público** (ex: `203.0.113.10`)
+
+### 1.2 Conectar via SSH
+
+```bash
+ssh root@203.0.113.10
+```
+
+### 1.3 Atualizar o sistema
+
+```bash
+apt update && apt upgrade -y
+```
+
+### 1.4 Instalar Docker
+
+```bash
+# Instalar dependências
+apt install -y ca-certificates curl gnupg
+
+# Adicionar repositório oficial do Docker
+install -m 0755 -d /etc/apt/keyrings
+curl -fsSL https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
+chmod a+r /etc/apt/keyrings/docker.gpg
+echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null
+apt update
+apt install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
+```
+
+### 1.5 Instalar nginx
+
+```bash
+apt install -y nginx
+```
+
+### 1.6 Configurar Firewall (UFW)
+
+```bash
+ufw default deny incoming
+ufw default allow outgoing
+ufw allow 22/tcp    # SSH
+ufw allow 80/tcp    # HTTP (redirect)
+ufw allow 443/tcp   # HTTPS
+ufw enable
+```
+
+> **Dica**: Para segurança máxima, restrinja as portas 80 e 443 apenas para IPs da Cloudflare. Veja a seção [Segurança Avançada](#segurança-avançada).
+
+---
+
+## 2. Instalar o OmniRoute
+
+### 2.1 Criar diretório de configuração
+
+```bash
+mkdir -p /opt/omniroute
+```
+
+### 2.2 Criar arquivo de variáveis de ambiente
+
+```bash
+cat > /opt/omniroute/.env << 'EOF'
+# === Segurança ===
+JWT_SECRET=ALTERE-PARA-CHAVE-SECRETA-UNICA-64-CHARS
+INITIAL_PASSWORD=SuaSenhaSegura123!
+API_KEY_SECRET=ALTERE-PARA-OUTRA-CHAVE-SECRETA
+STORAGE_ENCRYPTION_KEY=ALTERE-PARA-TERCEIRA-CHAVE-SECRETA
+STORAGE_ENCRYPTION_KEY_VERSION=v1
+MACHINE_ID_SALT=ALTERE-PARA-SALT-UNICO
+
+# === App ===
+PORT=20128
+NODE_ENV=production
+HOSTNAME=0.0.0.0
+DATA_DIR=/app/data
+STORAGE_DRIVER=sqlite
+ENABLE_REQUEST_LOGS=true
+AUTH_COOKIE_SECURE=false
+REQUIRE_API_KEY=false
+
+# === Domain (altere para seu domínio) ===
+BASE_URL=https://llms.seudominio.com
+NEXT_PUBLIC_BASE_URL=https://llms.seudominio.com
+
+# === Cloud Sync (opcional) ===
+# CLOUD_URL=https://cloud.omniroute.online
+# NEXT_PUBLIC_CLOUD_URL=https://cloud.omniroute.online
+EOF
+```
+
+> ⚠️ **IMPORTANTE**: Gere chaves secretas únicas! Use `openssl rand -hex 32` para cada chave.
+
+### 2.3 Iniciar o container
+
+```bash
+docker pull diegosouzapw/omniroute:latest
+
+docker run -d \
+  --name omniroute \
+  --restart unless-stopped \
+  --env-file /opt/omniroute/.env \
+  -p 20128:20128 \
+  -v omniroute-data:/app/data \
+  diegosouzapw/omniroute:latest
+```
+
+### 2.4 Verificar se está rodando
+
+```bash
+docker ps | grep omniroute
+docker logs omniroute --tail 20
+```
+
+Deve exibir: `[DB] SQLite database ready` e `listening on port 20128`.
+
+---
+
+## 3. Configurar nginx (Reverse Proxy)
+
+### 3.1 Gerar certificado SSL (Cloudflare Origin)
+
+No painel da Cloudflare:
+
+1. Vá em **SSL/TLS → Origin Server**
+2. Clique **Create Certificate**
+3. Deixe os padrões (15 anos, \*.seudominio.com)
+4. Copie o **Origin Certificate** e a **Private Key**
+
+```bash
+mkdir -p /etc/nginx/ssl
+
+# Colar o certificado
+nano /etc/nginx/ssl/origin.crt
+
+# Colar a chave privada
+nano /etc/nginx/ssl/origin.key
+
+chmod 600 /etc/nginx/ssl/origin.key
+```
+
+### 3.2 Configuração do nginx
+
+```bash
+cat > /etc/nginx/sites-available/omniroute << 'NGINX'
+# Default server — bloqueia acesso direto por IP
+server {
+    listen 80 default_server;
+    listen [::]:80 default_server;
+    listen 443 ssl default_server;
+    listen [::]:443 ssl default_server;
+    ssl_certificate     /etc/nginx/ssl/origin.crt;
+    ssl_certificate_key /etc/nginx/ssl/origin.key;
+    server_name _;
+    return 444;
+}
+
+# OmniRoute — HTTPS
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name llms.seudominio.com;  # Altere para seu domínio
+
+    ssl_certificate     /etc/nginx/ssl/origin.crt;
+    ssl_certificate_key /etc/nginx/ssl/origin.key;
+    ssl_protocols TLSv1.2 TLSv1.3;
+
+    client_max_body_size 100M;
+
+    location / {
+        proxy_pass http://127.0.0.1:20128;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        # WebSocket support
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+
+        # SSE (Server-Sent Events) — streaming AI responses
+        proxy_buffering off;
+        proxy_cache off;
+        proxy_read_timeout 300s;
+        proxy_send_timeout 300s;
+    }
+}
+
+# HTTP → HTTPS redirect
+server {
+    listen 80;
+    listen [::]:80;
+    server_name llms.seudominio.com;
+    return 301 https://$server_name$request_uri;
+}
+NGINX
+```
+
+### 3.3 Ativar e testar
+
+```bash
+# Remover config padrão
+rm -f /etc/nginx/sites-enabled/default
+
+# Ativar OmniRoute
+ln -sf /etc/nginx/sites-available/omniroute /etc/nginx/sites-enabled/omniroute
+
+# Testar e recarregar
+nginx -t && systemctl reload nginx
+```
+
+---
+
+## 4. Configurar Cloudflare DNS
+
+### 4.1 Adicionar registro DNS
+
+No painel da Cloudflare → DNS:
+
+| Type | Name   | Content                   | Proxy      |
+| ---- | ------ | ------------------------- | ---------- |
+| A    | `llms` | `203.0.113.10` (IP da VM) | ✅ Proxied |
+
+### 4.2 Configurar SSL
+
+Em **SSL/TLS → Overview**:
+
+- Modo: **Full (Strict)**
+
+Em **SSL/TLS → Edge Certificates**:
+
+- Always Use HTTPS: ✅ On
+- Minimum TLS Version: TLS 1.2
+- Automatic HTTPS Rewrites: ✅ On
+
+### 4.3 Testar
+
+```bash
+curl -sI https://llms.seudominio.com/health
+# Deve retornar HTTP/2 200
+```
+
+---
+
+## 5. Operações e Manutenção
+
+### Atualizar para nova versão
+
+```bash
+docker pull diegosouzapw/omniroute:latest
+docker stop omniroute && docker rm omniroute
+docker run -d --name omniroute --restart unless-stopped \
+  --env-file /opt/omniroute/.env \
+  -p 20128:20128 \
+  -v omniroute-data:/app/data \
+  diegosouzapw/omniroute:latest
+```
+
+### Ver logs
+
+```bash
+docker logs -f omniroute          # Stream em tempo real
+docker logs omniroute --tail 50   # Últimas 50 linhas
+```
+
+### Backup manual do banco
+
+```bash
+# Copiar dados do volume para o host
+docker cp omniroute:/app/data ./backup-$(date +%F)
+
+# Ou comprimir todo o volume
+docker run --rm -v omniroute-data:/data -v $(pwd):/backup \
+  alpine tar czf /backup/omniroute-data-$(date +%F).tar.gz /data
+```
+
+### Restaurar de backup
+
+```bash
+docker stop omniroute
+docker run --rm -v omniroute-data:/data -v $(pwd):/backup \
+  alpine sh -c "rm -rf /data/* && tar xzf /backup/omniroute-data-YYYY-MM-DD.tar.gz -C /"
+docker start omniroute
+```
+
+---
+
+## 6. Segurança Avançada
+
+### Restringir nginx para Cloudflare IPs
+
+```bash
+cat > /etc/nginx/cloudflare-ips.conf << 'CF'
+# Cloudflare IPv4 ranges — atualizar periodicamente
+# https://www.cloudflare.com/ips-v4/
+set_real_ip_from 173.245.48.0/20;
+set_real_ip_from 103.21.244.0/22;
+set_real_ip_from 103.22.200.0/22;
+set_real_ip_from 103.31.4.0/22;
+set_real_ip_from 141.101.64.0/18;
+set_real_ip_from 108.162.192.0/18;
+set_real_ip_from 190.93.240.0/20;
+set_real_ip_from 188.114.96.0/20;
+set_real_ip_from 197.234.240.0/22;
+set_real_ip_from 198.41.128.0/17;
+set_real_ip_from 162.158.0.0/15;
+set_real_ip_from 104.16.0.0/13;
+set_real_ip_from 104.24.0.0/14;
+set_real_ip_from 172.64.0.0/13;
+set_real_ip_from 131.0.72.0/22;
+real_ip_header CF-Connecting-IP;
+CF
+```
+
+Adicionar no `nginx.conf` dentro do bloco `http {}`:
+
+```nginx
+include /etc/nginx/cloudflare-ips.conf;
+```
+
+### Install fail2ban
+
+```bash
+apt install -y fail2ban
+systemctl enable fail2ban
+systemctl start fail2ban
+
+# Verificar status
+fail2ban-client status sshd
+```
+
+### Bloquear acesso direto na porta do Docker
+
+```bash
+# Impedir acesso externo direto à porta 20128
+iptables -I DOCKER-USER -p tcp --dport 20128 -j DROP
+iptables -I DOCKER-USER -i lo -p tcp --dport 20128 -j ACCEPT
+
+# Persistir as regras
+apt install -y iptables-persistent
+netfilter-persistent save
+```
+
+---
+
+## 7. Deploy do Cloud Worker (Opcional)
+
+Para acesso remoto via Cloudflare Workers (sem expor a VM diretamente):
+
+```bash
+# No repositório local
+cd omnirouteCloud
+npm install
+npx wrangler login
+npx wrangler deploy
+```
+
+Ver documentação completa em [omnirouteCloud/README.md](../omnirouteCloud/README.md).
+
+---
+
+## Resumo de Portas
+
+| Porta | Serviço     | Acesso                        |
+| ----- | ----------- | ----------------------------- |
+| 22    | SSH         | Público (com fail2ban)        |
+| 80    | nginx HTTP  | Redirect → HTTPS              |
+| 443   | nginx HTTPS | Via Cloudflare Proxy          |
+| 20128 | OmniRoute   | Somente localhost (via nginx) |

docs/adr/ADR-001-nextjs-foundation.md

@@ -0,0 +1,37 @@
+# ADR-001: Next.js as the Foundation for an AI Gateway
+
+## Status: Accepted
+
+## Context
+
+OmniRoute is an AI routing gateway that translates, forwards, and manages requests across 20+ LLM providers. We needed a framework that could serve both the API proxy layer and a management dashboard from a single codebase.
+
+**Alternatives considered:**
+
+- **Express.js only** — Simpler proxy, but requires separate frontend tooling
+- **Fastify** — Fast, but no built-in SSR/dashboard support
+- **Next.js** — Unified full-stack framework with API routes, SSR, and static pages
+
+## Decision
+
+We chose Next.js because:
+
+1. **Single deployment** — API routes (`/api/*`) and dashboard UI in one process
+2. **Middleware layer** — Native request interception for auth guards and request tracing
+3. **File-based routing** — Easy to map provider endpoints to handlers
+4. **Built-in TypeScript** — Type safety across the entire codebase
+
+## Consequences
+
+**Positive:**
+
+- One `npm run build` produces both API and UI
+- Middleware provides centralized auth and request tracing
+- Dashboard gets automatic code splitting and optimization
+
+**Negative:**
+
+- Next.js middleware has limitations (no heavy imports, edge runtime constraints)
+- Serverless deployment model doesn't align with persistent WebSocket/SSE connections
+- Build times are longer than Express-only setups
+- The SSE proxy layer (`open-sse/`) operates outside Next.js conventions

docs/adr/ADR-002-hub-spoke-translation.md

@@ -0,0 +1,37 @@
+# ADR-002: Hub-and-Spoke Translation with OpenAI as Intermediate Format
+
+## Status: Accepted
+
+## Context
+
+OmniRoute routes requests across 20+ providers, each with its own API format (OpenAI, Anthropic Messages, Google Gemini, AWS Bedrock, etc.). Direct provider-to-provider translation would require O(n²) translators.
+
+**Alternatives considered:**
+
+- **Direct translation** — Each pair needs a dedicated translator (n² complexity)
+- **Common intermediate format** — Translate to/from a canonical format (2n complexity)
+- **Protocol buffers** — Strong typing but heavy overhead for a proxy
+
+## Decision
+
+We use the **OpenAI Chat Completions format** as the canonical intermediate representation. All incoming requests are normalized to OpenAI format, processed, then translated to the target provider's format.
+
+```
+Client → [any format] → OpenAI canonical → [target format] → Provider
+Provider → [response] → OpenAI canonical → [original format] → Client
+```
+
+## Consequences
+
+**Positive:**
+
+- Only 2 translators per provider (inbound + outbound) instead of n² pairs
+- OpenAI format is the de facto standard — most clients already use it
+- Adding a new provider requires only implementing one translator pair
+- Streaming (SSE) works consistently through the canonical format
+
+**Negative:**
+
+- Some provider-specific features may be lost in translation
+- The double translation adds latency (typically < 5ms)
+- OpenAI format changes require updating the canonical representation

docs/adr/ADR-003-dual-storage-sqlite.md

@@ -0,0 +1,39 @@
+# ADR-003: Dual Storage — SQLite Primary with JSON Migration Path
+
+## Status: Accepted
+
+## Context
+
+OmniRoute originally used LowDB (JSON file) for all persistence. As the project grew, JSON-based storage became a bottleneck for concurrent access, querying, and data integrity.
+
+**Alternatives considered:**
+
+- **LowDB only** — Simple but no concurrent access, no ACID, no querying
+- **SQLite only** — Fast, ACID-compliant, but breaks existing deployments
+- **PostgreSQL** — Production-grade but requires external dependency
+- **Dual storage with migration** — SQLite primary + automatic JSON migration
+
+## Decision
+
+We migrated to **SQLite as the primary store** with an automatic one-time migration from `db.json`:
+
+1. On startup, if `db.json` exists and SQLite is empty, auto-migrate all data
+2. All new reads/writes go through SQLite
+3. The `db.json` file is preserved but no longer written to
+
+Settings remain in a hybrid model where LowDB handles simple key-value configuration for backward compatibility.
+
+## Consequences
+
+**Positive:**
+
+- ACID transactions for provider connections, API keys, and usage data
+- Proper SQL queries for analytics and log filtering
+- Concurrent read/write safety via WAL mode
+- Zero-downtime migration from JSON — users upgrade transparently
+
+**Negative:**
+
+- Two storage engines to maintain (SQLite + LowDB for settings)
+- Migration code must handle edge cases and partial data
+- SQLite binary dependency needed in deployment environments

docs/i18n-tasks/01-home.md

@@ -0,0 +1,36 @@
+# Task 01 — Home Page (Dashboard)
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `home`
+
+## Arquivos
+| Arquivo | Linhas | Strings |
+|---------|--------|---------|
+| `src/app/(dashboard)/dashboard/page.tsx` | 17 | 0 (wrapper) |
+| `src/app/(dashboard)/dashboard/HomePageClient.tsx` | 500 | ~25 |
+
+## Strings a Traduzir
+
+### HomePageClient.tsx
+| Linha | String EN | Chave i18n | String PT-BR |
+|-------|-----------|------------|--------------|
+| 138 | "Quick Start" | `home.quickStart` | "Início Rápido" |
+| 242 | "Providers Overview" | `home.providersOverview` | "Visão Geral dos Provedores" |
+| 436 | "No models available for this provider." | `home.noModelsAvailable` | "Nenhum modelo disponível para este provedor." |
+| — | "Total Requests" | `home.totalRequests` | "Total de Requisições" |
+| — | "Active Providers" | `home.activeProviders` | "Provedores Ativos" |
+| — | "Success Rate" | `home.successRate` | "Taxa de Sucesso" |
+| — | "Avg Latency" | `home.avgLatency` | "Latência Média" |
+| — | "Configure Endpoint" | `home.configureEndpoint` | "Configurar Endpoint" |
+| — | "Add Provider" | `home.addProvider` | "Adicionar Provedor" |
+| — | "View Docs" | `home.viewDocs` | "Ver Documentação" |
+| — | "Copied!" | `common.copied` | ✅ já existe |
+| — | "requests" | `home.requests` | "requisições" |
+| — | "models" | `home.models` | "modelos" |
+| — | "accounts" | `home.accounts` | "contas" |
+
+## Checklist
+- [ ] Adicionar chaves no `en.json` (namespace `home`)
+- [ ] Adicionar traduções no `pt-BR.json`
+- [ ] Substituir strings por `t()` no `HomePageClient.tsx`
+- [ ] Testar em EN e PT-BR

docs/i18n-tasks/02-analytics.md

@@ -0,0 +1,25 @@
+# Task 02 — Analytics Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `analytics`
+
+## Arquivos
+| Arquivo | Linhas | Strings |
+|---------|--------|---------|
+| `src/app/(dashboard)/dashboard/analytics/page.tsx` | 46 | ~8 |
+
+## Strings a Traduzir
+
+| Linha | String EN | Chave i18n | String PT-BR |
+|-------|-----------|------------|--------------|
+| 11 | "Monitor your API usage patterns..." | `analytics.overviewDescription` | "Monitore padrões de uso da API..." |
+| 13 | "Run evaluation suites to test..." | `analytics.evalsDescription` | "Execute suítes de avaliação..." |
+| 24 | "Analytics" | `analytics.title` | "Análises" |
+| 32 | "Overview" | `analytics.overview` | "Visão Geral" |
+| 33 | "Evals" | `analytics.evals` | "Avaliações" |
+
+## Checklist
+- [ ] Adicionar chaves no `en.json`
+- [ ] Adicionar traduções no `pt-BR.json`
+- [ ] Substituir strings por `t()` em `page.tsx`
+- [ ] Testar em EN e PT-BR

docs/i18n-tasks/03-api-manager.md

@@ -0,0 +1,31 @@
+# Task 03 — API Manager Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `apiManager`
+
+## Arquivos
+| Arquivo | Linhas | Strings |
+|---------|--------|---------|
+| `src/app/(dashboard)/dashboard/api-manager/ApiManagerPageClient.tsx` | ~400 | ~20 |
+
+## Strings a Traduzir (levantamento parcial — abrir código para completar)
+
+| String EN | Chave i18n | String PT-BR |
+|-----------|------------|--------------|
+| "API Keys" | `apiManager.title` | "Chaves de API" |
+| "Create API Key" | `apiManager.createKey` | "Criar Chave de API" |
+| "Name" | `apiManager.name` | "Nome" |
+| "Key" | `apiManager.key` | "Chave" |
+| "Created" | `apiManager.created` | "Criado em" |
+| "Last Used" | `apiManager.lastUsed` | "Último Uso" |
+| "Actions" | `apiManager.actions` | "Ações" |
+| "Delete" | `common.delete` | ✅ já existe |
+| "No API keys found" | `apiManager.noKeys` | "Nenhuma chave de API encontrada" |
+| ~11 strings adicionais | — | Levantar no código |
+
+## Checklist
+- [ ] Levantar todas as strings do `ApiManagerPageClient.tsx`
+- [ ] Adicionar chaves no `en.json`
+- [ ] Adicionar traduções no `pt-BR.json`
+- [ ] Substituir strings por `t()`
+- [ ] Testar em EN e PT-BR

docs/i18n-tasks/04-audit-log.md

@@ -0,0 +1,31 @@
+# Task 04 — Audit Log Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `auditLog`
+
+## Arquivos
+| Arquivo | Linhas | Strings |
+|---------|--------|---------|
+| `src/app/(dashboard)/dashboard/audit-log/page.tsx` | 241 | ~12 |
+| `src/app/(dashboard)/dashboard/logs/AuditLogTab.tsx` | ~100 | ~3 |
+
+## Strings a Traduzir
+
+| String EN | Chave i18n | String PT-BR |
+|-----------|------------|--------------|
+| "Audit Log" | `auditLog.title` | "Log de Auditoria" |
+| "Search actions..." | `auditLog.searchPlaceholder` | "Buscar ações..." |
+| "Action" | `auditLog.action` | "Ação" |
+| "Actor" | `auditLog.actor` | "Autor" |
+| "Target" | `auditLog.target` | "Alvo" |
+| "Details" | `auditLog.details` | "Detalhes" |
+| "IP Address" | `auditLog.ipAddress` | "Endereço IP" |
+| "Timestamp" | `auditLog.timestamp` | "Data/Hora" |
+| "No audit entries found" | `auditLog.noEntries` | "Nenhum registro de auditoria" |
+| "Load More" | `auditLog.loadMore` | "Carregar Mais" |
+
+## Checklist
+- [ ] Adicionar chaves no `en.json`
+- [ ] Adicionar traduções no `pt-BR.json`
+- [ ] Substituir strings em `audit-log/page.tsx` e `AuditLogTab.tsx`
+- [ ] Testar em EN e PT-BR

docs/i18n-tasks/05-cli-tools.md

@@ -0,0 +1,37 @@
+# Task 05 — CLI Tools Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `cliTools`
+
+## Arquivos
+| Arquivo | Strings |
+|---------|---------|
+| `cli-tools/components/AntigravityToolCard.tsx` | ~3 |
+| `cli-tools/components/ClaudeToolCard.tsx` | ~3 |
+| `cli-tools/components/ClineToolCard.tsx` | ~4 |
+| `cli-tools/components/CodexToolCard.tsx` | ~3 |
+| `cli-tools/components/DefaultToolCard.tsx` | ~3 |
+| `cli-tools/components/DroidToolCard.tsx` | ~2 |
+| `cli-tools/components/KiloToolCard.tsx` | ~4 |
+| `cli-tools/components/OpenClawToolCard.tsx` | ~2 |
+
+## Strings comuns entre Tool Cards
+
+| String EN | Chave i18n | String PT-BR |
+|-----------|------------|--------------|
+| "Status" | `cliTools.status` | "Status" |
+| "Connected" | `cliTools.connected` | "Conectado" |
+| "Not Connected" | `cliTools.notConnected` | "Não Conectado" |
+| "Configure" | `cliTools.configure` | "Configurar" |
+| "Test Connection" | `cliTools.testConnection` | "Testar Conexão" |
+| "Models" | `cliTools.models` | "Modelos" |
+| "Map Models" | `cliTools.mapModels` | "Mapear Modelos" |
+| "Save" | `common.save` | ✅ já existe |
+| "Cancel" | `common.cancel` | ✅ já existe |
+
+## Checklist
+- [ ] Levantar strings de cada ToolCard
+- [ ] Adicionar chaves no `en.json`
+- [ ] Adicionar traduções no `pt-BR.json`
+- [ ] Substituir por `t()` em cada componente
+- [ ] Testar em EN e PT-BR

docs/i18n-tasks/06-combos.md

@@ -0,0 +1,34 @@
+# Task 06 — Combos Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `combos`
+
+## Arquivos
+| Arquivo | Linhas | Strings |
+|---------|--------|---------|
+| `src/app/(dashboard)/dashboard/combos/page.tsx` | ~1000 | ~20 |
+
+## Strings a Traduzir
+
+| Linha | String EN | Chave i18n | String PT-BR |
+|-------|-----------|------------|--------------|
+| 207 | "Combos" | `combos.title` | "Combos" |
+| 372 | "No models" | `combos.noModels` | "Sem modelos" |
+| 747 | "Routing Strategy" | `combos.routingStrategy` | "Estratégia de Roteamento" |
+| 791 | "Models" | `combos.models` | "Modelos" |
+| 807 | "No models added yet" | `combos.noModelsYet` | "Nenhum modelo adicionado" |
+| 922 | "Max Retries" | `combos.maxRetries` | "Máximo de Tentativas" |
+| 959 | "Timeout (ms)" | `combos.timeout` | "Timeout (ms)" |
+| 977 | "Healthcheck" | `combos.healthcheck` | "Verificação de Saúde" |
+| — | "Create Combo" | `combos.create` | "Criar Combo" |
+| — | "Edit Combo" | `combos.edit` | "Editar Combo" |
+| — | "Delete Combo" | `combos.deleteCombo` | "Excluir Combo" |
+| — | "Add Model" | `combos.addModel` | "Adicionar Modelo" |
+| — | "Priority" | `combos.priority` | "Prioridade" |
+| — | "Fallback" | `combos.fallback` | "Fallback" |
+
+## Checklist
+- [ ] Adicionar chaves no `en.json`
+- [ ] Adicionar traduções no `pt-BR.json`
+- [ ] Substituir strings por `t()` em `combos/page.tsx`
+- [ ] Testar em EN e PT-BR

docs/i18n-tasks/07-costs.md

@@ -0,0 +1,23 @@
+# Task 07 — Costs Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `costs`
+
+## Arquivos
+| Arquivo | Linhas | Strings |
+|---------|--------|---------|
+| `src/app/(dashboard)/dashboard/costs/page.tsx` | ~200 | ~5 |
+
+## Strings a Traduzir
+
+| String EN | Chave i18n | String PT-BR |
+|-----------|------------|--------------|
+| "Costs" | `costs.title` | "Custos" |
+| "Total Cost" | `costs.totalCost` | "Custo Total" |
+| "Cost Breakdown" | `costs.breakdown` | "Detalhamento de Custos" |
+| "No cost data" | `costs.noData` | "Sem dados de custo" |
+
+## Checklist
+- [ ] Levantar strings completas do código
+- [ ] Adicionar chaves no `en.json` / `pt-BR.json`
+- [ ] Substituir por `t()` e testar

docs/i18n-tasks/08-endpoint.md

@@ -0,0 +1,30 @@
+# Task 08 — Endpoint Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `endpoint`
+
+## Arquivos
+| Arquivo | Linhas | Strings |
+|---------|--------|---------|
+| `src/app/(dashboard)/dashboard/endpoint/EndpointPageClient.tsx` | ~750 | ~20 |
+
+## Strings a Traduzir
+
+| Linha | String EN | Chave i18n | String PT-BR |
+|-------|-----------|------------|--------------|
+| 320 | "API Endpoint" | `endpoint.title` | "Endpoint da API" |
+| 403 | "Available Endpoints" | `endpoint.available` | "Endpoints Disponíveis" |
+| 561 | "Cloud Proxy" | `endpoint.cloudProxy` | "Proxy na Nuvem" |
+| 632 | "Note" | `endpoint.note` | "Nota" |
+| 717 | "Warning" | `endpoint.warning` | "Aviso" |
+| 740 | "Are you sure you want to disable cloud proxy?" | `endpoint.disableConfirm` | "Tem certeza que deseja desativar o proxy na nuvem?" |
+| — | "Copy" | `common.copy` | ✅ já existe |
+| — | "Base URL" | `endpoint.baseUrl` | "URL Base" |
+| — | "Connected" | `endpoint.connected` | "Conectado" |
+| — | "Enable" | `endpoint.enable` | "Ativar" |
+| — | "Disable" | `endpoint.disable` | "Desativar" |
+
+## Checklist
+- [ ] Levantar strings restantes
+- [ ] Adicionar chaves no `en.json` / `pt-BR.json`
+- [ ] Substituir por `t()` e testar

docs/i18n-tasks/09-health.md

@@ -0,0 +1,30 @@
+# Task 09 — Health Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `health`
+
+## Arquivos
+| Arquivo | Linhas | Strings |
+|---------|--------|---------|
+| `src/app/(dashboard)/dashboard/health/page.tsx` | ~350 | ~15 |
+
+## Strings a Traduzir
+
+| String EN | Chave i18n | String PT-BR |
+|-----------|------------|--------------|
+| "System Health" | `health.title` | "Saúde do Sistema" |
+| "Healthy" | `health.healthy` | "Saudável" |
+| "Degraded" | `health.degraded` | "Degradado" |
+| "Down" | `health.down` | "Offline" |
+| "Uptime" | `health.uptime` | "Tempo Ativo" |
+| "Memory" | `health.memory` | "Memória" |
+| "CPU" | `health.cpu` | "CPU" |
+| "Database" | `health.database` | "Banco de Dados" |
+| "Last Check" | `health.lastCheck` | "Última Verificação" |
+| "Refresh" | `common.refresh` | ✅ já existe |
+| ~5 strings adicionais | — | Levantar |
+
+## Checklist
+- [ ] Levantar strings restantes
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` e testar

docs/i18n-tasks/10-limits.md

@@ -0,0 +1,24 @@
+# Task 10 — Limits Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `limits`
+
+## Arquivos
+| Arquivo | Linhas | Strings |
+|---------|--------|---------|
+| `src/app/(dashboard)/dashboard/limits/page.tsx` | ~150 | ~5 |
+
+## Strings a Traduzir
+
+| String EN | Chave i18n | String PT-BR |
+|-----------|------------|--------------|
+| "Limits & Quotas" | `limits.title` | "Limites e Cotas" |
+| "Rate Limit" | `limits.rateLimit` | "Limite de Taxa" |
+| "Provider" | `limits.provider` | "Provedor" |
+| "Remaining" | `limits.remaining` | "Restante" |
+| "Reset" | `limits.reset` | "Reiniciar" |
+
+## Checklist
+- [ ] Levantar strings completas
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` e testar

docs/i18n-tasks/11-logs.md

@@ -0,0 +1,24 @@
+# Task 11 — Logs Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `logs`
+
+## Arquivos
+| Arquivo | Linhas | Strings |
+|---------|--------|---------|
+| `src/app/(dashboard)/dashboard/logs/` | ~200 | ~5 |
+
+## Strings a Traduzir
+
+| String EN | Chave i18n | String PT-BR |
+|-----------|------------|--------------|
+| "Logs" | `logs.title` | "Logs" |
+| "Request Logs" | `logs.requestLogs` | "Logs de Requisições" |
+| "Proxy Logs" | `logs.proxyLogs` | "Logs do Proxy" |
+| "Audit Log" | `logs.auditLog` | "Log de Auditoria" |
+| "Console" | `logs.console` | "Console" |
+
+## Checklist
+- [ ] Levantar strings completas
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` e testar

docs/i18n-tasks/12-onboarding.md

@@ -0,0 +1,26 @@
+# Task 12 — Onboarding Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `onboarding`
+
+## Arquivos
+| Arquivo | Linhas | Strings |
+|---------|--------|---------|
+| `src/app/(dashboard)/dashboard/onboarding/page.tsx` | ~300 | ~10 |
+
+## Strings a Traduzir
+
+| String EN | Chave i18n | String PT-BR |
+|-----------|------------|--------------|
+| "Welcome to OmniRoute" | `onboarding.welcome` | "Bem-vindo ao OmniRoute" |
+| "Set Password" | `onboarding.setPassword` | "Definir Senha" |
+| "Add Provider" | `onboarding.addProvider` | "Adicionar Provedor" |
+| "Get Started" | `onboarding.getStarted` | "Começar" |
+| "Skip" | `onboarding.skip` | "Pular" |
+| "Next" | `common.next` | ✅ já existe |
+| ~4 strings adicionais | — | Levantar |
+
+## Checklist
+- [ ] Levantar strings completas
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` e testar

docs/i18n-tasks/13-providers.md

@@ -0,0 +1,35 @@
+# Task 13 — Providers Pages
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `providers`
+
+## Arquivos
+| Arquivo | Strings |
+|---------|---------|
+| `providers/page.tsx` | ~5 |
+| `providers/[id]/page.tsx` | ~12 |
+| `providers/new/page.tsx` | ~3 |
+| `providers/components/ModelAvailabilityPanel.tsx` | ~3 |
+| `providers/components/ModelAvailabilityBadge.tsx` | ~1 |
+
+## Strings a Traduzir
+
+| String EN | Chave i18n | String PT-BR |
+|-----------|------------|--------------|
+| "Providers" | `providers.title` | "Provedores" |
+| "Add Provider" | `providers.add` | "Adicionar Provedor" |
+| "Edit Provider" | `providers.edit` | "Editar Provedor" |
+| "Test Connection" | `providers.testConnection` | "Testar Conexão" |
+| "Connected" | `providers.connected` | "Conectado" |
+| "Disconnected" | `providers.disconnected` | "Desconectado" |
+| "Models" | `providers.models` | "Modelos" |
+| "Accounts" | `providers.accounts` | "Contas" |
+| "Delete Provider" | `providers.deleteProvider` | "Excluir Provedor" |
+| "No providers configured" | `providers.noProviders` | "Nenhum provedor configurado" |
+| "Model Availability" | `providers.modelAvailability` | "Disponibilidade de Modelos" |
+| ~9 strings adicionais | — | Levantar |
+
+## Checklist
+- [ ] Levantar strings completas de todos os arquivos
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` e testar

docs/i18n-tasks/14-settings.md

@@ -0,0 +1,51 @@
+# Task 14 — Settings Page (MAIOR TAREFA)
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `settings`
+
+## Arquivos (20 componentes!)
+| Arquivo | Strings |
+|---------|---------|
+| `settings/components/AppearanceTab.tsx` | ~4 |
+| `settings/components/CacheStatsCard.tsx` | ~4 |
+| `settings/components/ComboDefaultsTab.tsx` | ~8 |
+| `settings/components/FallbackChainsEditor.tsx` | ~2 |
+| `settings/components/IPFilterSection.tsx` | ~2 |
+| `settings/components/PoliciesPanel.tsx` | ~5 |
+| `settings/components/PricingTab.tsx` | ~8 |
+| `settings/components/ProxyTab.tsx` | ~2 |
+| `settings/components/ResilienceTab.tsx` | ~7 |
+| `settings/components/RoutingTab.tsx` | ~4 |
+| `settings/components/SecurityTab.tsx` | ~5 |
+| `settings/components/SessionInfoCard.tsx` | ~5 |
+| `settings/components/SystemPromptTab.tsx` | ~2 |
+| `settings/components/SystemStorageTab.tsx` | ~8 |
+| `settings/components/ThinkingBudgetTab.tsx` | ~5 |
+| `settings/pricing/page.tsx` | ~17 |
+
+## Strings a Traduzir (amostra)
+
+| String EN | Chave i18n | String PT-BR |
+|-----------|------------|--------------|
+| "General" | `settings.general` | "Geral" |
+| "Security" | `settings.security` | "Segurança" |
+| "Appearance" | `settings.appearance` | "Aparência" |
+| "Routing" | `settings.routing` | "Roteamento" |
+| "Cache" | `settings.cache` | "Cache" |
+| "Resilience" | `settings.resilience` | "Resiliência" |
+| "System Prompt" | `settings.systemPrompt` | "Prompt do Sistema" |
+| "Thinking Budget" | `settings.thinkingBudget` | "Orçamento de Raciocínio" |
+| "Proxy" | `settings.proxy` | "Proxy" |
+| "Pricing" | `settings.pricing` | "Preços" |
+| "Storage" | `settings.storage` | "Armazenamento" |
+| "Policies" | `settings.policies` | "Políticas" |
+| "IP Filter" | `settings.ipFilter` | "Filtro de IP" |
+| "Combo Defaults" | `settings.comboDefaults` | "Padrões de Combo" |
+| "Fallback Chains" | `settings.fallbackChains` | "Cadeias de Fallback" |
+| ~40 strings adicionais | — | Levantar em cada tab |
+
+## Checklist
+- [ ] Levantar strings de CADA componente (16 arquivos)
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` em todos os 16 arquivos
+- [ ] Testar cada aba em EN e PT-BR

docs/i18n-tasks/15-translator.md

@@ -0,0 +1,41 @@
+# Task 15 — Translator Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `translator`
+
+## Arquivos
+| Arquivo | Strings |
+|---------|---------|
+| `translator/components/LiveMonitorMode.tsx` | ~11 |
+| `translator/components/PlaygroundMode.tsx` | ~5 |
+| `translator/components/TestBenchMode.tsx` | ~3 |
+| `translator/components/ChatTesterMode.tsx` | ~4 |
+
+## Strings a Traduzir
+
+| String EN | Chave i18n | String PT-BR |
+|-----------|------------|--------------|
+| "Real-Time Translation Activity" | `translator.realtime` | "Atividade de Tradução em Tempo Real" |
+| "Chat Tester" | `translator.chatTester` | "Testador de Chat" |
+| "Test Bench" | `translator.testBench` | "Bancada de Testes" |
+| "Recent Translations" | `translator.recentTranslations` | "Traduções Recentes" |
+| "No translations yet" | `translator.noTranslations` | "Nenhuma tradução ainda" |
+| "Time" | `translator.time` | "Tempo" |
+| "Source" | `translator.source` | "Origem" |
+| "Target" | `translator.target` | "Destino" |
+| "Model" | `translator.model` | "Modelo" |
+| "Status" | `translator.status` | "Status" |
+| "Latency" | `translator.latency` | "Latência" |
+| "Format Converter" | `translator.formatConverter` | "Conversor de Formato" |
+| "Input" | `translator.input` | "Entrada" |
+| "Output" | `translator.output` | "Saída" |
+| "Example Templates" | `translator.exampleTemplates` | "Modelos de Exemplo" |
+| "Compatibility Tester" | `translator.compatibilityTester` | "Testador de Compatibilidade" |
+| "Compatibility Report" | `translator.compatibilityReport` | "Relatório de Compatibilidade" |
+| "Pipeline Debugger" | `translator.pipelineDebugger` | "Depurador de Pipeline" |
+| "Translation Pipeline" | `translator.translationPipeline` | "Pipeline de Tradução" |
+
+## Checklist
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` em cada componente
+- [ ] Testar em EN e PT-BR

docs/i18n-tasks/16-usage.md

@@ -0,0 +1,57 @@
+# Task 16 — Usage Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `usage`
+
+## Arquivos
+| Arquivo | Strings |
+|---------|---------|
+| `usage/components/BudgetTab.tsx` | ~4 |
+| `usage/components/BudgetTelemetryCards.tsx` | ~9 |
+| `usage/components/EvalsTab.tsx` | ~6 |
+| `usage/components/RateLimitStatus.tsx` | ~2 |
+| `usage/components/SessionsTab.tsx` | ~7 |
+| `usage/components/ProviderLimits/index.tsx` | ~7 |
+| `usage/components/ProviderLimits/ProviderLimitCard.tsx` | ~1 |
+| `usage/components/ProviderLimits/QuotaTable.tsx` | ~1 |
+
+## Strings a Traduzir
+
+| String EN | Chave i18n | String PT-BR |
+|-----------|------------|--------------|
+| "Budget Management" | `usage.budgetManagement` | "Gerenciamento de Orçamento" |
+| "API Key" | `usage.apiKey` | "Chave de API" |
+| "This Month" | `usage.thisMonth` | "Este Mês" |
+| "Set Limits" | `usage.setLimits` | "Definir Limites" |
+| "Total requests" | `usage.totalRequests` | "Total de requisições" |
+| "No data yet" | `usage.noData` | "Sem dados ainda" |
+| "Entries" | `usage.entries` | "Entradas" |
+| "Hit Rate" | `usage.hitRate` | "Taxa de Acerto" |
+| "Circuit Breakers" | `usage.circuitBreakers` | "Disjuntores" |
+| "Locked IPs" | `usage.lockedIPs` | "IPs Bloqueados" |
+| "How It Works" | `usage.howItWorks` | "Como Funciona" |
+| "Define" | `usage.define` | "Definir" |
+| "Run" | `usage.run` | "Executar" |
+| "Evaluate" | `usage.evaluate` | "Avaliar" |
+| "Evaluation Suites" | `usage.evalSuites` | "Suítes de Avaliação" |
+| "Model Evaluations" | `usage.modelEvals` | "Avaliações de Modelos" |
+| "Model Lockouts" | `usage.modelLockouts` | "Bloqueios de Modelo" |
+| "No models currently locked" | `usage.noLockouts` | "Nenhum modelo bloqueado" |
+| "Active Sessions" | `usage.activeSessions` | "Sessões Ativas" |
+| "No active sessions" | `usage.noSessions` | "Sem sessões ativas" |
+| "Session" | `usage.session` | "Sessão" |
+| "Age" | `usage.age` | "Idade" |
+| "Requests" | `usage.requests` | "Requisições" |
+| "Connection" | `usage.connection` | "Conexão" |
+| "Provider Limits" | `usage.providerLimits` | "Limites do Provedor" |
+| "No Providers Connected" | `usage.noProviders` | "Nenhum Provedor Conectado" |
+| "Account" | `usage.account` | "Conta" |
+| "Model Quotas" | `usage.modelQuotas` | "Cotas de Modelo" |
+| "Last Used" | `usage.lastUsed` | "Último Uso" |
+| "Actions" | `usage.actions` | "Ações" |
+| "No quota data" | `usage.noQuota` | "Sem dados de cota" |
+
+## Checklist
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` em cada componente
+- [ ] Testar em EN e PT-BR

docs/i18n-tasks/17-shared-modals.md

@@ -0,0 +1,44 @@
+# Task 17 — Shared Modals
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `modals`
+
+## Arquivos
+| Arquivo | Strings |
+|---------|---------|
+| `shared/components/OAuthModal.tsx` | ~6 |
+| `shared/components/KiroAuthModal.tsx` | ~10 |
+| `shared/components/KiroSocialOAuthModal.tsx` | ~3 |
+| `shared/components/CursorAuthModal.tsx` | ~2 |
+| `shared/components/PricingModal.tsx` | ~10 |
+| `shared/components/ModelSelectModal.tsx` | ~2 |
+| `shared/components/ProxyConfigModal.tsx` | ~1 |
+
+## Strings a Traduzir
+
+| String EN | String PT-BR |
+|-----------|--------------|
+| "Waiting for Authorization" | "Aguardando Autorização" |
+| "Verification URL" | "URL de Verificação" |
+| "Your Code" | "Seu Código" |
+| "Remote access:" | "Acesso remoto:" |
+| "Connected Successfully!" | "Conectado com Sucesso!" |
+| "Connection Failed" | "Falha na Conexão" |
+| "Choose your authentication method:" | "Escolha seu método de autenticação:" |
+| "AWS Builder ID" | "AWS Builder ID" |
+| "AWS IAM Identity Center" | "AWS IAM Identity Center" |
+| "Google Account" | "Conta Google" |
+| "GitHub Account" | "Conta GitHub" |
+| "Import Token" | "Importar Token" |
+| "Auto-detecting tokens..." | "Detectando tokens automaticamente..." |
+| "Pricing Configuration" | "Configuração de Preços" |
+| "Loading pricing data..." | "Carregando dados de preços..." |
+| "Model" / "Input" / "Output" / "Cached" | "Modelo" / "Entrada" / "Saída" / "Em Cache" |
+| "Combos" | "Combos" |
+| "No models found" | "Nenhum modelo encontrado" |
+| "Connected" | "Conectado" |
+
+## Checklist
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` em cada modal
+- [ ] Testar cada modal em EN e PT-BR

docs/i18n-tasks/18-shared-loggers.md

@@ -0,0 +1,37 @@
+# Task 18 — Shared Loggers
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `loggers`
+
+## Arquivos
+| Arquivo | Strings |
+|---------|---------|
+| `shared/components/RequestLoggerV2.tsx` | ~12 |
+| `shared/components/RequestLoggerDetail.tsx` | ~4 |
+| `shared/components/ProxyLogger.tsx` | ~7 |
+| `shared/components/ProxyLogDetail.tsx` | ~6 |
+| `shared/components/ConsoleLogViewer.tsx` | ~2 |
+
+## Strings a Traduzir
+
+| String EN | String PT-BR |
+|-----------|--------------|
+| "All Providers" | "Todos os Provedores" |
+| "All Models" | "Todos os Modelos" |
+| "All Accounts" | "Todas as Contas" |
+| "All API Keys" | "Todas as Chaves de API" |
+| "Newest" / "Oldest" | "Mais Recente" / "Mais Antigo" |
+| "Model A-Z" / "Model Z-A" | "Modelo A-Z" / "Modelo Z-A" |
+| "Columns" | "Colunas" |
+| "Loading logs..." | "Carregando logs..." |
+| "All Types" | "Todos os Tipos" |
+| "All Levels" | "Todos os Níveis" |
+| "Proxy Event" | "Evento do Proxy" |
+| "Time" / "Model" / "Combo" | "Tempo" / "Modelo" / "Combo" |
+| "No log entries found" | "Nenhuma entrada de log encontrada" |
+| "No payload data available" | "Nenhum dado de payload disponível" |
+
+## Checklist
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` em cada logger
+- [ ] Testar em EN e PT-BR

docs/i18n-tasks/19-shared-charts.md

@@ -0,0 +1,36 @@
+# Task 19 — Shared Charts & Stats
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `stats`
+
+## Arquivos
+| Arquivo | Strings |
+|---------|---------|
+| `shared/components/UsageStats.tsx` | ~6 |
+| `shared/components/analytics/charts.tsx` | ~15 |
+| `shared/components/TokenHealthBadge.tsx` | ~6 |
+| `shared/components/SystemMonitor.tsx` | ~1 |
+| `shared/components/Footer.tsx` | ~3 |
+
+## Strings a Traduzir
+
+| String EN | String PT-BR |
+|-----------|--------------|
+| "Usage Overview" | "Visão Geral de Uso" |
+| "Output Tokens" | "Tokens de Saída" |
+| "Total Cost" | "Custo Total" |
+| "Usage by Model" | "Uso por Modelo" |
+| "Usage by Account" | "Uso por Conta" |
+| "Failed to load usage statistics." | "Falha ao carregar estatísticas." |
+| "Token Health" | "Saúde dos Tokens" |
+| "Total OAuth" | "Total OAuth" |
+| "Healthy" / "Errored" / "Warning" | "Saudável" / "Com Erro" / "Aviso" |
+| "Last check" | "Última verificação" |
+| "No data" / "Share" | "Sem dados" / "Compartilhar" |
+| "Unable to load system metrics" | "Não foi possível carregar métricas" |
+| "Product" / "Resources" / "Company" (Footer) | "Produto" / "Recursos" / "Empresa" |
+
+## Checklist
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` em cada componente
+- [ ] Testar em EN e PT-BR

docs/i18n-tasks/20-login-auth.md

@@ -0,0 +1,36 @@
+# Task 20 — Login & Auth Pages
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `auth`
+
+## Arquivos
+| Arquivo | Strings |
+|---------|---------|
+| `src/app/login/page.tsx` | ~8 |
+| `src/app/forgot-password/page.tsx` | ~3 |
+| `src/app/callback/page.tsx` | ~5 |
+| `src/app/forbidden/page.tsx` | ~1 |
+
+## Strings a Traduzir
+
+| String EN | String PT-BR |
+|-----------|--------------|
+| "Welcome" | "Bem-vindo" |
+| "OmniRoute" | "OmniRoute" (não traduzir) |
+| "Sign in" | "Entrar" |
+| "Enter your password to continue" | "Digite sua senha para continuar" |
+| "Password" | "Senha" |
+| "Unified AI API Proxy" | "Proxy Unificado de API de IA" |
+| "Loading..." | "Carregando..." |
+| "Password protection is not enabled" | "Proteção por senha não está ativada" |
+| "Reset Password" | "Redefinir Senha" |
+| "Choose a method to recover access" | "Escolha um método para recuperar acesso" |
+| "Processing..." | "Processando..." |
+| "Authorization Successful!" | "Autorização bem-sucedida!" |
+| "Copy This URL" | "Copiar esta URL" |
+| "Access Denied" | "Acesso Negado" |
+
+## Checklist
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` em cada página
+- [ ] Testar em EN e PT-BR

docs/i18n-tasks/21-landing.md

@@ -0,0 +1,34 @@
+# Task 21 — Landing Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `landing`
+
+## Arquivos
+| Arquivo | Strings |
+|---------|---------|
+| `landing/components/HeroSection.tsx` | ~3 |
+| `landing/components/Features.tsx` | ~10 |
+| `landing/components/HowItWorks.tsx` | ~5 |
+| `landing/components/GetStarted.tsx` | ~5 |
+| `landing/components/Navigation.tsx` | ~2 |
+| `landing/components/FlowAnimation.tsx` | ~2 |
+| `landing/components/Footer.tsx` | ~5 |
+
+## Strings a Traduzir (amostra)
+
+| String EN | String PT-BR |
+|-----------|--------------|
+| "All AI Providers" | "Todos os Provedores de IA" |
+| "One Endpoint" | "Um Endpoint" |
+| "Powerful Features" | "Recursos Poderosos" |
+| "How OmniRoute Works" | "Como o OmniRoute Funciona" |
+| "Install OmniRoute" | "Instalar o OmniRoute" |
+| "Open Dashboard" | "Abrir Painel" |
+| "Route Requests" | "Rotear Requisições" |
+| "Data Location:" | "Local dos Dados:" |
+| "Product" / "Resources" / "Legal" | "Produto" / "Recursos" / "Legal" |
+
+## Checklist
+- [ ] Levantar strings completas de cada componente
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` e testar

docs/i18n-tasks/22-docs.md

@@ -0,0 +1,32 @@
+# Task 22 — Docs Page
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `docs`
+
+## Arquivos
+| Arquivo | Strings |
+|---------|---------|
+| `src/app/docs/page.tsx` | ~25 |
+
+## Strings a Traduzir
+
+| String EN | String PT-BR |
+|-----------|--------------|
+| "Quick Start" | "Início Rápido" |
+| "Features" | "Recursos" |
+| "Supported Providers" | "Provedores Suportados" |
+| "Common Use Cases" | "Casos de Uso Comuns" |
+| "Client Compatibility" | "Compatibilidade de Clientes" |
+| "Cherry Studio" | "Cherry Studio" (não traduzir) |
+| "Codex / GitHub Copilot Models" | "Modelos Codex / GitHub Copilot" |
+| "Cursor IDE" | "Cursor IDE" (não traduzir) |
+| "Claude Code / Antigravity" | "Claude Code / Antigravity" |
+| "API Reference" | "Referência da API" |
+| "Method" / "Path" / "Notes" | "Método" / "Caminho" / "Notas" |
+| "Model Prefixes" | "Prefixos de Modelo" |
+| "Prefix" / "Provider" / "Type" | "Prefixo" / "Provedor" / "Tipo" |
+| "Troubleshooting" | "Solução de Problemas" |
+
+## Checklist
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` e testar

docs/i18n-tasks/23-legal.md

@@ -0,0 +1,31 @@
+# Task 23 — Legal Pages (Privacy & Terms)
+
+**Status:** `[ ]` Não iniciado  
+**Namespace JSON:** `legal`
+
+## Arquivos
+| Arquivo | Strings |
+|---------|---------|
+| `src/app/privacy/page.tsx` | ~10 |
+| `src/app/terms/page.tsx` | ~5 |
+
+## Strings a Traduzir
+
+| String EN | String PT-BR |
+|-----------|--------------|
+| "Privacy Policy" | "Política de Privacidade" |
+| "Terms of Service" | "Termos de Serviço" |
+| "Provider configurations" | "Configurações de provedores" |
+| "API keys" | "Chaves de API" |
+| "Usage logs" | "Logs de uso" |
+| "Application settings" | "Configurações do aplicativo" |
+| "View and export usage analytics" | "Visualizar e exportar análises de uso" |
+| "Clear usage history at any time" | "Limpar histórico de uso a qualquer momento" |
+| "Configure log retention policies" | "Configurar políticas de retenção de logs" |
+| "Back up and restore your database" | "Fazer backup e restaurar seu banco de dados" |
+
+## Checklist
+- [ ] Adicionar chaves / traduções
+- [ ] Substituir por `t()` e testar
+
+> **Nota:** Textos legais podem requerer revisão jurídica para tradução formal.

docs/i18n-tasks/README.md

@@ -0,0 +1,51 @@
+# i18n Translation Tasks
+
+Cada arquivo `.md` nesta pasta representa **uma tarefa de tradução** para uma página ou componente do OmniRoute.
+
+## Status Legend
+
+- `[ ]` — Não iniciado
+- `[/]` — Em progresso
+- `[x]` — Concluído
+
+## Dashboard Pages (~260 strings)
+
+| #   | Tarefa                             | Arquivo                                               | Strings | Status |
+| --- | ---------------------------------- | ----------------------------------------------------- | ------- | ------ |
+| 01  | [Home](./01-home.md)               | `HomePageClient.tsx`                                  | ~25     | `[ ]`  |
+| 02  | [Analytics](./02-analytics.md)     | `analytics/page.tsx`                                  | ~8      | `[ ]`  |
+| 03  | [API Manager](./03-api-manager.md) | `api-manager/`                                        | ~20     | `[ ]`  |
+| 04  | [Audit Log](./04-audit-log.md)     | `audit-log/page.tsx`, `logs/AuditLogTab.tsx`          | ~15     | `[ ]`  |
+| 05  | [CLI Tools](./05-cli-tools.md)     | `cli-tools/components/*.tsx`                          | ~20     | `[ ]`  |
+| 06  | [Combos](./06-combos.md)           | `combos/page.tsx`                                     | ~20     | `[ ]`  |
+| 07  | [Costs](./07-costs.md)             | `costs/page.tsx`                                      | ~5      | `[ ]`  |
+| 08  | [Endpoint](./08-endpoint.md)       | `endpoint/EndpointPageClient.tsx`                     | ~20     | `[ ]`  |
+| 09  | [Health](./09-health.md)           | `health/page.tsx`                                     | ~15     | `[ ]`  |
+| 10  | [Limits](./10-limits.md)           | `limits/page.tsx`                                     | ~5      | `[ ]`  |
+| 11  | [Logs](./11-logs.md)               | `logs/`                                               | ~5      | `[ ]`  |
+| 12  | [Onboarding](./12-onboarding.md)   | `onboarding/page.tsx`                                 | ~10     | `[ ]`  |
+| 13  | [Providers](./13-providers.md)     | `providers/page.tsx`, `[id]/page.tsx`, `new/page.tsx` | ~20     | `[ ]`  |
+| 14  | [Settings](./14-settings.md)       | `settings/components/*.tsx`                           | ~55     | `[ ]`  |
+| 15  | [Translator](./15-translator.md)   | `translator/components/*.tsx`                         | ~25     | `[ ]`  |
+| 16  | [Usage](./16-usage.md)             | `usage/components/*.tsx`                              | ~35     | `[ ]`  |
+
+## Shared Components (~95 strings)
+
+| #   | Tarefa                                         | Arquivo(s)                                           | Strings | Status |
+| --- | ---------------------------------------------- | ---------------------------------------------------- | ------- | ------ |
+| 17  | [Shared Modals](./17-shared-modals.md)         | `OAuthModal`, `KiroAuthModal`, `PricingModal`, etc.  | ~40     | `[ ]`  |
+| 18  | [Shared Loggers](./18-shared-loggers.md)       | `RequestLoggerV2`, `ProxyLogger`, `ProxyLogDetail`   | ~30     | `[ ]`  |
+| 19  | [Shared Charts & Stats](./19-shared-charts.md) | `UsageStats`, `analytics/charts`, `TokenHealthBadge` | ~25     | `[ ]`  |
+
+## Non-Dashboard Pages (~75 strings)
+
+| #   | Tarefa                             | Arquivo(s)                                              | Strings | Status |
+| --- | ---------------------------------- | ------------------------------------------------------- | ------- | ------ |
+| 20  | [Login & Auth](./20-login-auth.md) | `login/`, `forgot-password/`, `callback/`, `forbidden/` | ~20     | `[ ]`  |
+| 21  | [Landing Page](./21-landing.md)    | `landing/components/*.tsx`                              | ~25     | `[ ]`  |
+| 22  | [Docs Page](./22-docs.md)          | `docs/page.tsx`                                         | ~25     | `[ ]`  |
+| 23  | [Legal Pages](./23-legal.md)       | `privacy/`, `terms/`                                    | ~15     | `[ ]`  |
+
+---
+
+**Total estimado: ~460 strings em 23 tarefas**

eslint.config.mjs

@@ -1,9 +1,10 @@
 import nextVitals from "eslint-config-next/core-web-vitals";
+import tseslint from "typescript-eslint";
 
 /** @type {import("eslint").Linter.Config[]} */
 const eslintConfig = [
   ...nextVitals,
-  // FASE-02: Security rules
+  // FASE-02: Security rules (strict everywhere)
   {
     rules: {
       "no-eval": "error",
@@ -11,18 +12,28 @@ const eslintConfig = [
       "no-new-func": "error",
     },
   },
-  // Global ignores
+  // Relaxed rules for open-sse and tests (incremental adoption)
+  {
+    files: ["open-sse/**/*.ts", "tests/**/*.mjs", "tests/**/*.ts"],
+    plugins: {
+      "@typescript-eslint": tseslint.plugin,
+    },
+    rules: {
+      "@typescript-eslint/no-explicit-any": "warn",
+      "@next/next/no-assign-module-variable": "off",
+      "react-hooks/rules-of-hooks": "off",
+    },
+  },
+  // Global ignores (open-sse and tests REMOVED — now linted)
   {
     ignores: [
       ".next/**",
       "out/**",
       "build/**",
       "next-env.d.ts",
-      "tests/**",
       "scripts/**",
       "bin/**",
       "node_modules/**",
-      "open-sse/**",
     ],
   },
 ];

llm.txt

@@ -0,0 +1,134 @@
+# OmniRoute
+
+> OmniRoute is a free, open-source AI Gateway that acts as a universal API proxy for multi-provider LLMs. It provides smart routing, automatic fallback, load balancing, and format translation across 36+ AI providers — all through a single OpenAI-compatible endpoint.
+
+## Overview
+
+OmniRoute solves the problem of managing multiple AI provider subscriptions, quotas, and rate limits. It sits between your AI-powered tools (IDE agents, CLI tools) and AI providers, routing requests intelligently through a 4-tier fallback system: Subscription → API Key → Cheap → Free.
+
+**Key value:** One endpoint (`http://localhost:20128/v1`), unlimited models, zero downtime, minimal cost.
+
+## Tech Stack
+
+- **Runtime:** Node.js >= 18
+- **Framework:** Next.js 16 (App Router) with TypeScript
+- **Database:** SQLite via better-sqlite3 (local, zero-config)
+- **State management:** Zustand (client), lowdb (server JSON persistence)
+- **UI:** React 19, Tailwind CSS 4, Recharts for analytics
+- **Auth:** OAuth 2.0 (PKCE) for providers, bcrypt for local user auth
+- **Background jobs:** Custom token health check scheduler
+- **Streaming:** Server-Sent Events (SSE) for real-time proxy responses
+- **Proxy engine:** Custom pipeline with format translation, circuit breaker, rate limiting
+- **Package:** Published on npm (`omniroute`) and Docker Hub (`diegosouzapw/omniroute`)
+
+## Project Structure
+
+```
+/
+├── src/                          # Main application source
+│   ├── app/                      # Next.js App Router pages and API routes
+│   │   ├── (dashboard)/          # Dashboard UI pages (providers, combos, analytics, logs, etc.)
+│   │   ├── api/                  # REST API endpoints
+│   │   │   ├── v1/               # OpenAI-compatible API (chat, models, embeddings, images, audio)
+│   │   │   ├── oauth/            # OAuth flows per provider (authorize, exchange, callback)
+│   │   │   ├── providers/        # Provider CRUD and batch testing
+│   │   │   ├── models/           # Dashboard model listing and aliases
+│   │   │   ├── combos/           # Combo CRUD (multi-model fallback chains)
+│   │   │   └── ...               # Other endpoints (usage, logs, health, settings, etc.)
+│   │   └── login/                # Login page
+│   ├── domain/                   # Domain types and business logic interfaces
+│   ├── lib/                      # Core libraries
+│   │   ├── db/                   # SQLite database layer (providers, combos, prompts, logs)
+│   │   ├── oauth/                # OAuth providers, services, and utilities
+│   │   │   ├── providers/        # Provider-specific OAuth configs (GitHub, Google, Claude, etc.)
+│   │   │   ├── services/         # Provider-specific token exchange logic
+│   │   │   └── utils/            # PKCE, callback server, token helpers
+│   │   ├── cloudSync.ts          # Cloud sync via Cloudflare Workers
+│   │   ├── tokenHealthCheck.ts   # Background OAuth token refresh scheduler
+│   │   └── localDb.ts            # Unified database access layer
+│   ├── shared/                   # Shared utilities, components, and constants
+│   │   ├── components/           # Reusable UI components (Card, Badge, Button, Modal, etc.)
+│   │   ├── constants/            # Provider definitions, model lists, pricing
+│   │   └── utils/                # Helpers (auth, CORS, error codes, machine ID)
+│   ├── sse/                      # SSE proxy pipeline
+│   │   ├── services/             # Auth resolution, format translation, response handling
+│   │   └── middleware/           # Rate limiting, circuit breaker, caching, idempotency
+│   ├── store/                    # Zustand client-side stores
+│   ├── types/                    # TypeScript type definitions
+│   ├── proxy.ts                  # Main proxy request handler
+│   └── server-init.ts            # Server initialization (DB, health checks)
+├── open-sse/                     # Standalone SSE server (npm workspace)
+│   ├── config/                   # Model registries (embedding, image, audio, rerank, moderation)
+│   ├── handlers/                 # Request handlers per API type
+│   └── translators/              # Format translators (OpenAI ↔ Claude ↔ Gemini ↔ Responses)
+├── tests/                        # Test suites
+│   ├── unit/                     # Unit tests (32+ test files)
+│   └── integration/              # Integration tests
+├── docs/                         # Documentation and screenshots
+├── bin/                          # CLI entry points (omniroute, reset-password)
+└── .env.example                  # Environment variable template
+```
+
+## Key Architectural Decisions
+
+1. **OpenAI-compatible API surface:** All incoming requests follow the OpenAI API format (`/v1/chat/completions`, `/v1/models`, etc.). This makes OmniRoute a drop-in replacement for any tool that supports custom OpenAI endpoints.
+
+2. **Provider abstraction via format translators:** Each AI provider (Claude, Gemini, etc.) has a translator in `open-sse/translators/` that converts between the OpenAI format and the provider's native format. This happens transparently.
+
+3. **Connection-based provider model:** Providers are stored as "connections" in SQLite. Each connection has an `id`, `provider`, `authType` (oauth/apikey/free), `isActive` flag, and credentials. Multiple connections per provider are supported for multi-account rotation.
+
+4. **Combo system for fallback:** Users create "combos" — ordered lists of `provider/model` pairs. The proxy tries each in order until one succeeds. Supports 6 strategies: fill-first, round-robin, power-of-two-choices, random, least-used, cost-optimized.
+
+5. **SSE proxy pipeline (`src/sse/`):** The proxy pipeline is middleware-based: request → auth resolution → rate limiting → circuit breaker → format translation → upstream call → response translation → SSE streaming back to client.
+
+6. **SQLite for persistence:** All state (providers, combos, logs, settings) is stored in a single SQLite database file at `data/omniroute.db`. This keeps the app self-contained and zero-config.
+
+7. **OAuth with PKCE:** OAuth flows use PKCE for security. A local callback server (`src/lib/oauth/utils/server.ts`) handles the redirect. Token refresh is handled by a background job (`tokenHealthCheck.ts`).
+
+## Main Flows
+
+### Proxy Request Flow
+1. Client sends OpenAI-format request to `/v1/chat/completions`
+2. API key validation (`src/shared/utils/apiAuth.ts`)
+3. Model resolution: direct model or combo lookup
+4. For combos: iterate through models in fallback order
+5. Auth resolution: get credentials for the target provider
+6. Format translation: OpenAI → provider native format
+7. Upstream request with circuit breaker and rate limiting
+8. Response translation: provider → OpenAI format
+9. SSE streaming back to client
+
+### OAuth Flow
+1. Dashboard initiates `/api/oauth/[provider]/authorize`
+2. User completes OAuth login in browser
+3. Callback hits `/api/oauth/[provider]/exchange`
+4. Tokens stored as a provider connection in SQLite
+5. Background job refreshes tokens before expiry
+
+### Model Listing
+- `/api/models` — Dashboard endpoint, lists all defined models with aliases
+- `/v1/models` — OpenAI-compatible endpoint, lists only models from active providers
+
+## Important Notes for LLMs
+
+1. **Two model endpoints exist:** `/api/models` (dashboard, all models) and `/v1/models` (OpenAI-compatible, active only). Don't confuse them.
+
+2. **Provider IDs vs aliases:** Providers have both an ID (`claude`, `github`) and a short alias (`cc`, `gh`). Models are referenced as `alias/model-name` (e.g., `cc/claude-opus-4-6`).
+
+3. **The `open-sse/` directory is a separate npm workspace** with its own config, handlers, and translators. It handles the actual SSE streaming and format translation.
+
+4. **Environment variables:** All configuration is in `.env` (from `.env.example`). Key vars: `PORT`, `NEXT_PUBLIC_BASE_URL`, `API_KEY`, `ADMIN_PASSWORD`.
+
+5. **Database migrations:** SQLite schema is managed inline in `src/lib/db/core.ts` and `src/lib/db/providers.ts`. No migration framework — schema changes are applied on startup.
+
+6. **Tests use Node.js built-in test runner:** Run `npm test` or `node --test tests/unit/*.test.mjs`. Playwright is used for E2E tests.
+
+7. **The proxy pipeline is in `src/sse/`**, not in `src/app/api/v1/`. The API routes in `src/app/api/v1/` delegate to the SSE server running on a separate Express instance.
+
+## Links
+
+- Repository: https://github.com/diegosouzapw/OmniRoute
+- Website: https://omniroute.online
+- npm: https://www.npmjs.com/package/omniroute
+- Docker Hub: https://hub.docker.com/r/diegosouzapw/omniroute
+- Documentation: See `/docs/` directory

next.config.mjs

@@ -1,12 +1,16 @@
+import createNextIntlPlugin from "next-intl/plugin";
+
+const withNextIntl = createNextIntlPlugin("./src/i18n/request.ts");
+
 /** @type {import('next').NextConfig} */
 const nextConfig = {
   turbopack: {},
   output: "standalone",
+  serverExternalPackages: ["better-sqlite3"],
   transpilePackages: ["@omniroute/open-sse"],
   allowedDevOrigins: ["192.168.*"],
   typescript: {
-    // Migration Phase: ignore TS errors during build.
-    // Remove after all 984 type errors are resolved.
+    // TODO: Re-enable after fixing all sub-component useTranslations scope issues
     ignoreBuildErrors: true,
   },
   images: {
@@ -63,4 +67,4 @@ const nextConfig = {
   },
 };
 
-export default nextConfig;
+export default withNextIntl(nextConfig);

open-sse/config/providerRegistry.ts

@@ -43,6 +43,7 @@ export interface RegistryEntry {
   extraHeaders?: Record<string, string>;
   oauth?: RegistryOAuth;
   models: RegistryModel[];
+  modelsUrl?: string;
   chatPath?: string;
   clientVersion?: string;
   passthroughModels?: boolean;
@@ -107,7 +108,7 @@ export const REGISTRY: Record<string, RegistryEntry> = {
       clientIdEnv: "GEMINI_OAUTH_CLIENT_ID",
       clientIdDefault: "681255809395-oo8ft2oprdrnp9e3aqf6av3hmdib135j.apps.googleusercontent.com",
       clientSecretEnv: "GEMINI_OAUTH_CLIENT_SECRET",
-      clientSecretDefault: "",
+      clientSecretDefault: "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",
     },
     models: [
       { id: "gemini-3-pro-preview", name: "Gemini 3 Pro Preview" },
@@ -133,7 +134,7 @@ export const REGISTRY: Record<string, RegistryEntry> = {
       clientIdEnv: "GEMINI_CLI_OAUTH_CLIENT_ID",
       clientIdDefault: "681255809395-oo8ft2oprdrnp9e3aqf6av3hmdib135j.apps.googleusercontent.com",
       clientSecretEnv: "GEMINI_CLI_OAUTH_CLIENT_SECRET",
-      clientSecretDefault: "",
+      clientSecretDefault: "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",
     },
     models: [
       { id: "gemini-3-flash-preview", name: "Gemini 3 Flash Preview" },
@@ -211,7 +212,7 @@ export const REGISTRY: Record<string, RegistryEntry> = {
     id: "iflow",
     alias: "if",
     format: "openai",
-    executor: "default",
+    executor: "iflow",
     baseUrl: "https://apis.iflow.cn/v1/chat/completions",
     authType: "oauth",
     authHeader: "bearer",
@@ -222,7 +223,7 @@ export const REGISTRY: Record<string, RegistryEntry> = {
       clientIdEnv: "IFLOW_OAUTH_CLIENT_ID",
       clientIdDefault: "10009311001",
       clientSecretEnv: "IFLOW_OAUTH_CLIENT_SECRET",
-      clientSecretDefault: "",
+      clientSecretDefault: "4Z3YjXycVsQvyGF1etiNlIBB4RsqSDtW",
       tokenUrl: "https://iflow.cn/oauth/token",
       authUrl: "https://iflow.cn/oauth",
     },
@@ -260,18 +261,15 @@ export const REGISTRY: Record<string, RegistryEntry> = {
       clientIdEnv: "ANTIGRAVITY_OAUTH_CLIENT_ID",
       clientIdDefault: "1071006060591-tmhssin2h21lcre235vtolojh4g403ep.apps.googleusercontent.com",
       clientSecretEnv: "ANTIGRAVITY_OAUTH_CLIENT_SECRET",
-      clientSecretDefault: "",
+      clientSecretDefault: "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",
     },
     models: [
       { id: "claude-opus-4-6-thinking", name: "Claude Opus 4.6 Thinking" },
-      { id: "claude-opus-4-5-thinking", name: "Claude Opus 4.5 Thinking" },
-      { id: "claude-sonnet-4-5-thinking", name: "Claude Sonnet 4.5 Thinking" },
-      { id: "claude-sonnet-4-5", name: "Claude Sonnet 4.5" },
-      { id: "gemini-3-pro-high", name: "Gemini 3 Pro High" },
-      { id: "gemini-3-pro-low", name: "Gemini 3 Pro Low" },
-      { id: "gemini-3-flash-preview", name: "Gemini 3 Flash Preview" },
+      { id: "claude-sonnet-4-6", name: "Claude Sonnet 4.6" },
+      { id: "gemini-3.1-pro-high", name: "Gemini 3.1 Pro High" },
+      { id: "gemini-3.1-pro-low", name: "Gemini 3.1 Pro Low" },
       { id: "gemini-3-flash", name: "Gemini 3 Flash" },
-      { id: "gemini-2.5-flash", name: "Gemini 2.5 Flash" },
+      { id: "gpt-oss-120b-medium", name: "GPT OSS 120B Medium" },
     ],
   },
 
@@ -503,6 +501,7 @@ export const REGISTRY: Record<string, RegistryEntry> = {
     format: "openrouter",
     executor: "openrouter",
     baseUrl: "https://api.kilo.ai/api/openrouter/chat/completions",
+    modelsUrl: "https://api.kilo.ai/api/openrouter/models",
     authType: "oauth",
     authHeader: "Authorization",
     authPrefix: "Bearer ",
@@ -511,14 +510,32 @@ export const REGISTRY: Record<string, RegistryEntry> = {
       pollUrlBase: "https://api.kilo.ai/api/device-auth/codes",
     },
     models: [
-      { id: "anthropic/claude-sonnet-4-20250514", name: "Claude Sonnet 4" },
-      { id: "anthropic/claude-opus-4-20250514", name: "Claude Opus 4" },
-      { id: "google/gemini-2.5-pro", name: "Gemini 2.5 Pro" },
-      { id: "google/gemini-2.5-flash", name: "Gemini 2.5 Flash" },
-      { id: "openai/gpt-4.1", name: "GPT-4.1" },
-      { id: "openai/o3", name: "o3" },
-      { id: "deepseek/deepseek-chat", name: "DeepSeek Chat" },
-      { id: "deepseek/deepseek-reasoner", name: "DeepSeek Reasoner" },
+      { id: "openrouter/free", name: "Free Models Router" },
+      { id: "qwen/qwen3-vl-235b-a22b-thinking", name: "Qwen3 VL 235B A22B Thinking" },
+      { id: "qwen/qwen3-235b-a22b-thinking-2507", name: "Qwen3 235B A22B Thinking 2507" },
+      { id: "qwen/qwen3-vl-30b-a3b-thinking", name: "Qwen3 VL 30B A3B Thinking" },
+      { id: "stepfun/step-3.5-flash:free", name: "StepFun Step 3.5 Flash" },
+      { id: "arcee-ai/trinity-large-preview:free", name: "Arcee AI Trinity Large Preview" },
+      { id: "openai/gpt-4o-mini", name: "GPT-4o Mini" },
+      { id: "openai/gpt-4.1-nano", name: "GPT-4.1 Nano" },
+      { id: "openai/gpt-5-nano", name: "GPT-5 Nano" },
+      { id: "openai/gpt-5-mini", name: "GPT-5 Mini" },
+      { id: "anthropic/claude-3-haiku", name: "Claude 3 Haiku" },
+      { id: "google/gemini-2.0-flash", name: "Gemini 2.0 Flash" },
+      { id: "google/gemini-2.5-flash-lite", name: "Gemini 2.5 Flash Lite" },
+      { id: "deepseek/deepseek-chat-v3.1", name: "DeepSeek V3.1" },
+      { id: "deepseek/deepseek-v3.2", name: "DeepSeek V3.2" },
+      { id: "meta-llama/llama-3.3-70b-instruct", name: "Llama 3.3 70B" },
+      { id: "meta-llama/llama-4-scout", name: "Llama 4 Scout" },
+      { id: "meta-llama/llama-4-maverick", name: "Llama 4 Maverick" },
+      { id: "qwen/qwen3-8b", name: "Qwen3 8B" },
+      { id: "qwen/qwen3-32b", name: "Qwen3 32B" },
+      { id: "qwen/qwen3-coder", name: "Qwen3 Coder 480B" },
+      { id: "qwen/qwq-32b", name: "QwQ 32B" },
+      { id: "mistralai/mistral-small-24b-instruct-2501", name: "Mistral Small 3" },
+      { id: "mistralai/mistral-7b-instruct", name: "Mistral 7B" },
+      { id: "x-ai/grok-code-fast-1", name: "Grok Code Fast 1" },
+      { id: "moonshotai/kimi-k2.5", name: "Kimi K2.5" },
     ],
     passthroughModels: true,
   },

open-sse/executors/antigravity.ts

@@ -4,6 +4,15 @@ import { PROVIDERS, OAUTH_ENDPOINTS, HTTP_STATUS } from "../config/constants.ts"
 
 const MAX_RETRY_AFTER_MS = 10000;
 
+/**
+ * Strip any provider prefix (e.g. "antigravity/model" → "model").
+ * Ensures the model name sent to the upstream API never contains a routing prefix.
+ */
+function cleanModelName(model: string): string {
+  if (!model) return model;
+  return model.includes("/") ? model.split("/").pop()! : model;
+}
+
 export class AntigravityExecutor extends BaseExecutor {
   constructor() {
     super("antigravity", PROVIDERS.antigravity);
@@ -60,10 +69,12 @@ export class AntigravityExecutor extends BaseExecutor {
           : body.request?.toolConfig,
     };
 
+    const upstreamModel = cleanModelName(model);
+
     return {
       ...body,
       project: projectId,
-      model: model,
+      model: upstreamModel,
       userAgent: "antigravity",
       requestType: "agent",
       requestId: `agent-${crypto.randomUUID()}`,

open-sse/executors/codex.ts

@@ -4,7 +4,8 @@ import { PROVIDERS } from "../config/constants.ts";
 
 /**
  * Codex Executor - handles OpenAI Codex API (Responses API format)
- * Automatically injects default instructions if missing
+ * Automatically injects default instructions if missing.
+ * IMPORTANT: Includes chatgpt-account-id header for workspace binding.
  */
 export class CodexExecutor extends BaseExecutor {
   constructor() {
@@ -14,9 +15,18 @@ export class CodexExecutor extends BaseExecutor {
   /**
    * Codex Responses endpoint is SSE-first.
    * Always request event-stream from upstream, even when client requested stream=false.
+   * Includes chatgpt-account-id header for strict workspace binding.
    */
   buildHeaders(credentials, stream = true) {
-    return super.buildHeaders(credentials, true);
+    const headers = super.buildHeaders(credentials, true);
+
+    // Add workspace binding header if workspaceId is persisted
+    const workspaceId = credentials?.providerSpecificData?.workspaceId;
+    if (workspaceId) {
+      headers["chatgpt-account-id"] = workspaceId;
+    }
+
+    return headers;
   }
 
   /**

open-sse/executors/iflow.ts

@@ -0,0 +1,97 @@
+import crypto from "crypto";
+import { BaseExecutor } from "./base.ts";
+import { PROVIDERS } from "../config/constants.ts";
+
+/**
+ * IFlowExecutor - Executor for iFlow API with HMAC-SHA256 signature.
+ *
+ * iFlow requires custom headers including a session ID, timestamp,
+ * and an HMAC-SHA256 signature for request authentication.
+ * Without these headers, the API returns a 406 error.
+ *
+ * Fixes: https://github.com/diegosouzapw/OmniRoute/issues/114
+ */
+export class IFlowExecutor extends BaseExecutor {
+  constructor() {
+    super("iflow", PROVIDERS.iflow);
+  }
+
+  /**
+   * Create iFlow signature using HMAC-SHA256
+   * @param userAgent - User agent string
+   * @param sessionID - Session ID
+   * @param timestamp - Unix timestamp in milliseconds
+   * @param apiKey - API key for signing
+   * @returns Hex-encoded signature
+   */
+  createIFlowSignature(
+    userAgent: string,
+    sessionID: string,
+    timestamp: number,
+    apiKey: string
+  ): string {
+    if (!apiKey) return "";
+    const payload = `${userAgent}:${sessionID}:${timestamp}`;
+    const hmac = crypto.createHmac("sha256", apiKey);
+    hmac.update(payload);
+    return hmac.digest("hex");
+  }
+
+  /**
+   * Build headers with iFlow-specific HMAC-SHA256 signature.
+   * Includes session-id, x-iflow-timestamp, and x-iflow-signature.
+   */
+  buildHeaders(credentials: any, stream = true) {
+    // Generate session ID and timestamp
+    const sessionID = `session-${crypto.randomUUID()}`;
+    const timestamp = Date.now();
+
+    // Get user agent from config
+    const userAgent = this.config.headers?.["User-Agent"] || "iFlow-Cli";
+
+    // Get API key (prefer apiKey, fallback to accessToken)
+    const apiKey = credentials.apiKey || credentials.accessToken || "";
+
+    // Create HMAC-SHA256 signature
+    const signature = this.createIFlowSignature(userAgent, sessionID, timestamp, apiKey);
+
+    // Build headers
+    const headers: Record<string, string> = {
+      "Content-Type": "application/json",
+      ...this.config.headers,
+      "session-id": sessionID,
+      "x-iflow-timestamp": timestamp.toString(),
+      "x-iflow-signature": signature,
+    };
+
+    // Add authorization
+    if (credentials.apiKey) {
+      headers["Authorization"] = `Bearer ${credentials.apiKey}`;
+    } else if (credentials.accessToken) {
+      headers["Authorization"] = `Bearer ${credentials.accessToken}`;
+    }
+
+    // Add streaming header
+    if (stream) {
+      headers["Accept"] = "text/event-stream";
+    }
+
+    return headers;
+  }
+
+  /**
+   * Build URL for iFlow API — uses baseUrl directly.
+   */
+  buildUrl(model: string, stream: boolean, urlIndex = 0, credentials: any = null) {
+    return this.config.baseUrl;
+  }
+
+  /**
+   * Transform request body (passthrough for iFlow).
+   */
+  transformRequest(model: string, body: any, stream: boolean, credentials: any) {
+    return body;
+  }
+}
+
+export default IFlowExecutor;

open-sse/executors/index.ts

@@ -1,6 +1,7 @@
 import { AntigravityExecutor } from "./antigravity.ts";
 import { GeminiCLIExecutor } from "./gemini-cli.ts";
 import { GithubExecutor } from "./github.ts";
+import { IFlowExecutor } from "./iflow.ts";
 import { KiroExecutor } from "./kiro.ts";
 import { CodexExecutor } from "./codex.ts";
 import { CursorExecutor } from "./cursor.ts";
@@ -10,6 +11,7 @@ const executors = {
   antigravity: new AntigravityExecutor(),
   "gemini-cli": new GeminiCLIExecutor(),
   github: new GithubExecutor(),
+  iflow: new IFlowExecutor(),
   kiro: new KiroExecutor(),
   codex: new CodexExecutor(),
   cursor: new CursorExecutor(),
@@ -32,6 +34,7 @@ export { BaseExecutor } from "./base.ts";
 export { AntigravityExecutor } from "./antigravity.ts";
 export { GeminiCLIExecutor } from "./gemini-cli.ts";
 export { GithubExecutor } from "./github.ts";
+export { IFlowExecutor } from "./iflow.ts";
 export { KiroExecutor } from "./kiro.ts";
 export { CodexExecutor } from "./codex.ts";
 export { CursorExecutor } from "./cursor.ts";

open-sse/handlers/audioSpeech.ts

@@ -1,3 +1,4 @@
+import { getCorsOrigin } from "../utils/cors.ts";
 /**
  * Audio Speech Handler (TTS)
  *
@@ -40,7 +41,10 @@ async function handleHyperbolicSpeech(providerConfig, body, token) {
     const errText = await res.text();
     return new Response(errText, {
       status: res.status,
-      headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
+      headers: {
+        "Content-Type": "application/json",
+        "Access-Control-Allow-Origin": getCorsOrigin(),
+      },
     });
   }
 
@@ -52,7 +56,7 @@ async function handleHyperbolicSpeech(providerConfig, body, token) {
     status: 200,
     headers: {
       "Content-Type": "audio/mpeg",
-      "Access-Control-Allow-Origin": "*",
+      "Access-Control-Allow-Origin": getCorsOrigin(),
     },
   });
 }
@@ -77,7 +81,10 @@ async function handleDeepgramSpeech(providerConfig, body, modelId, token) {
     const errText = await res.text();
     return new Response(errText, {
       status: res.status,
-      headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
+      headers: {
+        "Content-Type": "application/json",
+        "Access-Control-Allow-Origin": getCorsOrigin(),
+      },
     });
   }
 
@@ -86,7 +93,7 @@ async function handleDeepgramSpeech(providerConfig, body, modelId, token) {
     status: 200,
     headers: {
       "Content-Type": contentType,
-      "Access-Control-Allow-Origin": "*",
+      "Access-Control-Allow-Origin": getCorsOrigin(),
       "Transfer-Encoding": "chunked",
     },
   });
@@ -154,7 +161,10 @@ export async function handleAudioSpeech({ body, credentials }) {
       const errText = await res.text();
       return new Response(errText, {
         status: res.status,
-        headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
+        headers: {
+          "Content-Type": "application/json",
+          "Access-Control-Allow-Origin": getCorsOrigin(),
+        },
       });
     }
 
@@ -164,7 +174,7 @@ export async function handleAudioSpeech({ body, credentials }) {
       status: 200,
       headers: {
         "Content-Type": contentType,
-        "Access-Control-Allow-Origin": "*",
+        "Access-Control-Allow-Origin": getCorsOrigin(),
         "Transfer-Encoding": "chunked",
       },
     });

open-sse/handlers/audioTranscription.ts

@@ -1,3 +1,4 @@
+import { getCorsOrigin } from "../utils/cors.ts";
 /**
  * Audio Transcription Handler
  *
@@ -46,7 +47,10 @@ async function handleDeepgramTranscription(providerConfig, file, modelId, token)
     const errText = await res.text();
     return new Response(errText, {
       status: res.status,
-      headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
+      headers: {
+        "Content-Type": "application/json",
+        "Access-Control-Allow-Origin": getCorsOrigin(),
+      },
     });
   }
 
@@ -54,7 +58,7 @@ async function handleDeepgramTranscription(providerConfig, file, modelId, token)
   // Transform Deepgram response to OpenAI Whisper format
   const text = data.results?.channels?.[0]?.alternatives?.[0]?.transcript || "";
 
-  return Response.json({ text }, { headers: { "Access-Control-Allow-Origin": "*" } });
+  return Response.json({ text }, { headers: { "Access-Control-Allow-Origin": getCorsOrigin() } });
 }
 
 /**
@@ -78,7 +82,10 @@ async function handleAssemblyAITranscription(providerConfig, file, modelId, toke
     const errText = await uploadRes.text();
     return new Response(errText, {
       status: uploadRes.status,
-      headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
+      headers: {
+        "Content-Type": "application/json",
+        "Access-Control-Allow-Origin": getCorsOrigin(),
+      },
     });
   }
 
@@ -102,7 +109,10 @@ async function handleAssemblyAITranscription(providerConfig, file, modelId, toke
     const errText = await submitRes.text();
     return new Response(errText, {
       status: submitRes.status,
-      headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
+      headers: {
+        "Content-Type": "application/json",
+        "Access-Control-Allow-Origin": getCorsOrigin(),
+      },
     });
   }
 
@@ -124,7 +134,7 @@ async function handleAssemblyAITranscription(providerConfig, file, modelId, toke
     if (result.status === "completed") {
       return Response.json(
         { text: result.text || "" },
-        { headers: { "Access-Control-Allow-Origin": "*" } }
+        { headers: { "Access-Control-Allow-Origin": getCorsOrigin() } }
       );
     }
 
@@ -182,7 +192,11 @@ export async function handleAudioTranscription({ formData, credentials }) {
 
   // Default: OpenAI/Groq-compatible multipart proxy
   const upstreamForm = new FormData();
-  upstreamForm.append("file", /** @type {Blob} */ (file), /** @type {any} */ (file).name || "audio.wav");
+  upstreamForm.append(
+    "file",
+    /** @type {Blob} */ file,
+    /** @type {any} */ file.name || "audio.wav"
+  );
   upstreamForm.append("model", modelId);
 
   // Forward optional parameters
@@ -195,7 +209,7 @@ export async function handleAudioTranscription({ formData, credentials }) {
   ]) {
     const val = formData.get(key);
     if (val !== null && val !== undefined) {
-      upstreamForm.append(key, /** @type {string} */ (val));
+      upstreamForm.append(key, /** @type {string} */ val);
     }
   }
 
@@ -210,7 +224,10 @@ export async function handleAudioTranscription({ formData, credentials }) {
       const errText = await res.text();
       return new Response(errText, {
         status: res.status,
-        headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
+        headers: {
+          "Content-Type": "application/json",
+          "Access-Control-Allow-Origin": getCorsOrigin(),
+        },
       });
     }
 
@@ -219,7 +236,7 @@ export async function handleAudioTranscription({ formData, credentials }) {
 
     return new Response(data, {
       status: 200,
-      headers: { "Content-Type": contentType, "Access-Control-Allow-Origin": "*" },
+      headers: { "Content-Type": contentType, "Access-Control-Allow-Origin": getCorsOrigin() },
     });
   } catch (err) {
     return errorResponse(500, `Transcription request failed: ${err.message}`);

open-sse/handlers/chatCore.ts

@@ -1,3 +1,4 @@
+import { getCorsOrigin } from "../utils/cors.ts";
 import { detectFormat, getTargetFormat } from "../services/provider.ts";
 import { translateRequest, needsTranslation } from "../translator/index.ts";
 import { FORMATS } from "../translator/formats.ts";
@@ -24,6 +25,7 @@ import { getExecutor } from "../executors/index.ts";
 import { translateNonStreamingResponse } from "./responseTranslator.ts";
 import { extractUsageFromResponse } from "./usageExtractor.ts";
 import { parseSSEToOpenAIResponse, parseSSEToResponsesOutput } from "./sseParser.ts";
+import { sanitizeOpenAIResponse } from "./responseSanitizer.ts";
 import {
   withRateLimit,
   updateFromHeaders,
@@ -81,7 +83,7 @@ export async function handleChatCore({
         status: cachedIdemp.status,
         headers: {
           "Content-Type": "application/json",
-          "Access-Control-Allow-Origin": "*",
+          "Access-Control-Allow-Origin": getCorsOrigin(),
           "X-OmniRoute-Idempotent": "true",
         },
       }),
@@ -108,8 +110,8 @@ export async function handleChatCore({
   const modelTargetFormat = getModelTargetFormat(alias, model);
   const targetFormat = modelTargetFormat || getTargetFormat(provider);
 
-  // Default to streaming unless client explicitly sets stream: false
-  const stream = body.stream !== false;
+  // Default to false unless client explicitly sets stream: true (OpenAI spec compliant)
+  const stream = body.stream === true;
 
   // ── Phase 9.1: Semantic cache check (non-streaming, temp=0 only) ──
   if (isCacheable(body, clientRawRequest?.headers)) {
@@ -122,7 +124,7 @@ export async function handleChatCore({
         response: new Response(JSON.stringify(cached), {
           headers: {
             "Content-Type": "application/json",
-            "Access-Control-Allow-Origin": "*",
+            "Access-Control-Allow-Origin": getCorsOrigin(),
             "X-OmniRoute-Cache": "HIT",
           },
         }),
@@ -188,7 +190,7 @@ export async function handleChatCore({
             status: statusCode,
             headers: {
               "Content-Type": "application/json",
-              "Access-Control-Allow-Origin": "*",
+              "Access-Control-Allow-Origin": getCorsOrigin(),
             },
           }
         ),
@@ -471,10 +473,17 @@ export async function handleChatCore({
     }
 
     // Translate response to client's expected format (usually OpenAI)
-    const translatedResponse = needsTranslation(targetFormat, sourceFormat)
+    let translatedResponse = needsTranslation(targetFormat, sourceFormat)
       ? translateNonStreamingResponse(responseBody, targetFormat, sourceFormat)
       : responseBody;
 
+    // Sanitize response for OpenAI SDK compatibility
+    // Strips non-standard fields (x_groq, usage_breakdown, service_tier, etc.)
+    // Extracts <think> tags into reasoning_content
+    if (sourceFormat === FORMATS.OPENAI) {
+      translatedResponse = sanitizeOpenAIResponse(translatedResponse);
+    }
+
     // Add buffer and filter usage for client (to prevent CLI context errors)
     if (translatedResponse?.usage) {
       const buffered = addBufferToUsage(translatedResponse.usage);
@@ -506,7 +515,7 @@ export async function handleChatCore({
       response: new Response(JSON.stringify(translatedResponse), {
         headers: {
           "Content-Type": "application/json",
-          "Access-Control-Allow-Origin": "*",
+          "Access-Control-Allow-Origin": getCorsOrigin(),
           "X-OmniRoute-Cache": "MISS",
         },
       }),
@@ -524,7 +533,7 @@ export async function handleChatCore({
     "Content-Type": "text/event-stream",
     "Cache-Control": "no-cache",
     Connection: "keep-alive",
-    "Access-Control-Allow-Origin": "*",
+    "Access-Control-Allow-Origin": getCorsOrigin(),
   };
 
   // Create transform stream with logger for streaming response

open-sse/handlers/moderations.ts

@@ -1,3 +1,4 @@
+import { getCorsOrigin } from "../utils/cors.ts";
 /**
  * Moderation Handler
  *
@@ -55,13 +56,16 @@ export async function handleModeration({ body, credentials }) {
       const errText = await res.text();
       return new Response(errText, {
         status: res.status,
-        headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
+        headers: {
+          "Content-Type": "application/json",
+          "Access-Control-Allow-Origin": getCorsOrigin(),
+        },
       });
     }
 
     const data = await res.json();
     return Response.json(data, {
-      headers: { "Access-Control-Allow-Origin": "*" },
+      headers: { "Access-Control-Allow-Origin": getCorsOrigin() },
     });
   } catch (err) {
     return errorResponse(500, `Moderation request failed: ${err.message}`);

open-sse/handlers/rerank.ts

@@ -1,3 +1,4 @@
+import { getCorsOrigin } from "../utils/cors.ts";
 /**
  * Rerank Handler
  *
@@ -129,7 +130,7 @@ export async function handleRerank({
     const result = transformResponseFromProvider(providerConfig, data);
 
     return Response.json(result, {
-      headers: { "Access-Control-Allow-Origin": "*" },
+      headers: { "Access-Control-Allow-Origin": getCorsOrigin() },
     });
   } catch (err) {
     return errorResponse(500, `Rerank request failed: ${err.message}`);

open-sse/handlers/responseSanitizer.ts

@@ -0,0 +1,269 @@
+/**
+ * Response Sanitizer — Normalizes LLM responses to strict OpenAI SDK format.
+ *
+ * Fixes Issues:
+ * 1. Strips non-standard fields (x_groq, usage_breakdown, service_tier) that
+ *    break OpenAI Python SDK v1.83+ Pydantic validation (returns str instead of object)
+ * 2. Extracts <think> tags from thinking models into reasoning_content
+ * 3. Normalizes response id, object, and usage fields
+ * 4. Converts developer role → system for non-OpenAI providers
+ */
+
+// ── Standard OpenAI ChatCompletion fields ──────────────────────────────────
+const ALLOWED_TOP_LEVEL_FIELDS = new Set([
+  "id",
+  "object",
+  "created",
+  "model",
+  "choices",
+  "usage",
+  "system_fingerprint",
+]);
+
+const ALLOWED_USAGE_FIELDS = new Set([
+  "prompt_tokens",
+  "completion_tokens",
+  "total_tokens",
+  "prompt_tokens_details",
+  "completion_tokens_details",
+]);
+
+const ALLOWED_MESSAGE_FIELDS = new Set([
+  "role",
+  "content",
+  "tool_calls",
+  "function_call",
+  "refusal",
+  "reasoning_content",
+]);
+
+const ALLOWED_CHOICE_FIELDS = new Set(["index", "message", "delta", "finish_reason", "logprobs"]);
+
+// ── Think tag regex ────────────────────────────────────────────────────────
+// Matches <think>...</think> blocks (greedy, dotAll)
+const THINK_TAG_REGEX = /<think>([\s\S]*?)<\/think>/gi;
+
+/**
+ * Extract <think> blocks from text content and return separated parts.
+ * @returns {{ content: string, thinking: string | null }}
+ */
+export function extractThinkingFromContent(text: string): {
+  content: string;
+  thinking: string | null;
+} {
+  if (!text || typeof text !== "string") {
+    return { content: text || "", thinking: null };
+  }
+
+  const thinkingParts: string[] = [];
+  let hasThinkTags = false;
+
+  const cleaned = text.replace(THINK_TAG_REGEX, (_, thinkContent) => {
+    hasThinkTags = true;
+    const trimmed = thinkContent.trim();
+    if (trimmed) {
+      thinkingParts.push(trimmed);
+    }
+    return "";
+  });
+
+  if (!hasThinkTags) {
+    return { content: text, thinking: null };
+  }
+
+  return {
+    content: cleaned.trim(),
+    thinking: thinkingParts.length > 0 ? thinkingParts.join("\n\n") : null,
+  };
+}
+
+/**
+ * Sanitize a non-streaming OpenAI ChatCompletion response.
+ * Strips non-standard fields and normalizes required fields.
+ */
+export function sanitizeOpenAIResponse(body: any): any {
+  if (!body || typeof body !== "object") return body;
+
+  // Build sanitized response with only allowed top-level fields
+  const sanitized: Record<string, any> = {};
+
+  // Ensure required fields exist
+  sanitized.id = normalizeResponseId(body.id);
+  sanitized.object = body.object || "chat.completion";
+  sanitized.created = body.created || Math.floor(Date.now() / 1000);
+  sanitized.model = body.model || "unknown";
+
+  // Sanitize choices
+  if (Array.isArray(body.choices)) {
+    sanitized.choices = body.choices.map((choice: any, idx: number) => sanitizeChoice(choice, idx));
+  } else {
+    sanitized.choices = [];
+  }
+
+  // Sanitize usage
+  if (body.usage && typeof body.usage === "object") {
+    sanitized.usage = sanitizeUsage(body.usage);
+  }
+
+  // Keep system_fingerprint if present (it's a valid OpenAI field)
+  if (body.system_fingerprint) {
+    sanitized.system_fingerprint = body.system_fingerprint;
+  }
+
+  return sanitized;
+}
+
+/**
+ * Sanitize a single choice object.
+ */
+function sanitizeChoice(choice: any, defaultIndex: number): any {
+  const sanitized: Record<string, any> = {
+    index: choice.index ?? defaultIndex,
+    finish_reason: choice.finish_reason || null,
+  };
+
+  // Sanitize message (non-streaming) or delta (streaming)
+  if (choice.message) {
+    sanitized.message = sanitizeMessage(choice.message);
+  }
+  if (choice.delta) {
+    sanitized.delta = sanitizeMessage(choice.delta);
+  }
+
+  // Keep logprobs if present
+  if (choice.logprobs !== undefined) {
+    sanitized.logprobs = choice.logprobs;
+  }
+
+  return sanitized;
+}
+
+/**
+ * Sanitize a message object, extracting <think> tags if present.
+ */
+function sanitizeMessage(msg: any): any {
+  if (!msg || typeof msg !== "object") return msg;
+
+  const sanitized: Record<string, any> = {};
+
+  // Copy only allowed fields
+  if (msg.role) sanitized.role = msg.role;
+  if (msg.refusal !== undefined) sanitized.refusal = msg.refusal;
+
+  // Handle content — extract <think> tags
+  if (typeof msg.content === "string") {
+    const { content, thinking } = extractThinkingFromContent(msg.content);
+    sanitized.content = content;
+
+    // Set reasoning_content from <think> tags (if not already set)
+    if (thinking && !msg.reasoning_content) {
+      sanitized.reasoning_content = thinking;
+    }
+  } else if (msg.content !== undefined) {
+    sanitized.content = msg.content;
+  }
+
+  // Preserve existing reasoning_content (from providers that natively support it)
+  if (msg.reasoning_content && !sanitized.reasoning_content) {
+    sanitized.reasoning_content = msg.reasoning_content;
+  }
+
+  // Preserve tool_calls
+  if (msg.tool_calls) {
+    sanitized.tool_calls = msg.tool_calls;
+  }
+
+  // Preserve function_call (legacy)
+  if (msg.function_call) {
+    sanitized.function_call = msg.function_call;
+  }
+
+  return sanitized;
+}
+
+/**
+ * Sanitize usage object — keep only standard fields.
+ */
+function sanitizeUsage(usage: any): any {
+  if (!usage || typeof usage !== "object") return usage;
+
+  const sanitized: Record<string, any> = {};
+  for (const key of ALLOWED_USAGE_FIELDS) {
+    if (usage[key] !== undefined) {
+      sanitized[key] = usage[key];
+    }
+  }
+
+  // Ensure required fields
+  if (sanitized.prompt_tokens === undefined) sanitized.prompt_tokens = 0;
+  if (sanitized.completion_tokens === undefined) sanitized.completion_tokens = 0;
+  if (sanitized.total_tokens === undefined) {
+    sanitized.total_tokens = sanitized.prompt_tokens + sanitized.completion_tokens;
+  }
+
+  return sanitized;
+}
+
+/**
+ * Normalize response ID to use chatcmpl- prefix.
+ */
+function normalizeResponseId(id: any): string {
+  if (!id || typeof id !== "string") {
+    return `chatcmpl-${crypto.randomUUID().replace(/-/g, "").slice(0, 29)}`;
+  }
+  // Already correct format
+  if (id.startsWith("chatcmpl-")) return id;
+  // Keep custom IDs but don't break them
+  return id;
+}
+
+/**
+ * Sanitize a streaming SSE chunk for passthrough mode.
+ * Lighter than full sanitization — only strips problematic extra fields.
+ */
+export function sanitizeStreamingChunk(parsed: any): any {
+  if (!parsed || typeof parsed !== "object") return parsed;
+
+  // Build sanitized chunk
+  const sanitized: Record<string, any> = {};
+
+  // Keep only standard fields
+  if (parsed.id !== undefined) sanitized.id = parsed.id;
+  sanitized.object = parsed.object || "chat.completion.chunk";
+  if (parsed.created !== undefined) sanitized.created = parsed.created;
+  if (parsed.model !== undefined) sanitized.model = parsed.model;
+
+  // Sanitize choices with delta
+  if (Array.isArray(parsed.choices)) {
+    sanitized.choices = parsed.choices.map((choice: any) => {
+      const c: Record<string, any> = {
+        index: choice.index ?? 0,
+      };
+      if (choice.delta !== undefined) {
+        c.delta = {};
+        const delta = choice.delta;
+        if (delta.role !== undefined) c.delta.role = delta.role;
+        if (delta.content !== undefined) c.delta.content = delta.content;
+        if (delta.reasoning_content !== undefined)
+          c.delta.reasoning_content = delta.reasoning_content;
+        if (delta.tool_calls !== undefined) c.delta.tool_calls = delta.tool_calls;
+        if (delta.function_call !== undefined) c.delta.function_call = delta.function_call;
+      }
+      if (choice.finish_reason !== undefined) c.finish_reason = choice.finish_reason;
+      if (choice.logprobs !== undefined) c.logprobs = choice.logprobs;
+      return c;
+    });
+  }
+
+  // Sanitize usage if present
+  if (parsed.usage && typeof parsed.usage === "object") {
+    sanitized.usage = sanitizeUsage(parsed.usage);
+  }
+
+  // Keep system_fingerprint if present
+  if (parsed.system_fingerprint) {
+    sanitized.system_fingerprint = parsed.system_fingerprint;
+  }
+
+  return sanitized;
+}

open-sse/handlers/responsesHandler.ts

@@ -1,3 +1,4 @@
+import { getCorsOrigin } from "../utils/cors.ts";
 /**
  * Responses API Handler for Workers
  * Converts Chat Completions to Codex Responses API format
@@ -75,7 +76,7 @@ export async function handleResponsesCore({
         "Content-Type": "text/event-stream",
         "Cache-Control": "no-cache",
         Connection: "keep-alive",
-        "Access-Control-Allow-Origin": "*",
+        "Access-Control-Allow-Origin": getCorsOrigin(),
       },
     }),
   };

open-sse/services/model.ts

@@ -22,9 +22,7 @@ const PROVIDER_MODEL_ALIASES = {
     "gemini-3-flash": "gemini-3-flash-preview",
     "raptor-mini": "oswe-vscode-prime",
   },
-  antigravity: {
-    "gemini-3-flash": "gemini-3-flash-preview",
-  },
+  antigravity: {},
 };
 
 // Reverse index: modelId -> providerIds that expose this model

open-sse/services/roleNormalizer.ts

@@ -0,0 +1,169 @@
+/**
+ * Role Normalizer — Converts message roles for provider compatibility.
+ *
+ * Fixes Issues:
+ * 1. GLM/ZhipuAI rejects `system` role → merged into first `user` message
+ * 2. OpenAI `developer` role not understood by non-OpenAI providers → normalized to `system`
+ * 3. Some providers don't support `system` role at all → prepended to user message
+ *
+ * Provider capability matrix is defined here rather than in the registry to
+ * avoid breaking changes to the existing RegistryEntry interface.
+ */
+
+// ── Provider capabilities ──────────────────────────────────────────────────
+
+/**
+ * Providers that do NOT support the `system` role in messages.
+ * For these, system messages are merged into the first user message.
+ *
+ * Note: This applies only to OpenAI-format passthrough providers.
+ * Claude and Gemini have their own system message handling in dedicated translators.
+ */
+const PROVIDERS_WITHOUT_SYSTEM_ROLE = new Set([
+  // Known to reject system role (from troubleshooting report)
+  // GLM uses Claude format, so this is handled through claude translator
+  // But if accessed through OpenAI-format providers like nvidia, it needs this:
+]);
+
+/**
+ * Models that are known to reject the `system` role regardless of provider.
+ * Uses prefix matching (e.g., "glm-" matches "glm-4.7", "glm-4.5", etc.)
+ */
+const MODELS_WITHOUT_SYSTEM_ROLE = [
+  "glm-", // ZhipuAI GLM models
+  "ernie-", // Baidu ERNIE models
+];
+
+/**
+ * Check if a provider+model combo supports the system role.
+ */
+function supportsSystemRole(provider: string, model: string): boolean {
+  if (PROVIDERS_WITHOUT_SYSTEM_ROLE.has(provider)) return false;
+
+  const modelLower = (model || "").toLowerCase();
+  for (const prefix of MODELS_WITHOUT_SYSTEM_ROLE) {
+    if (modelLower.startsWith(prefix)) return false;
+  }
+
+  return true;
+}
+
+/**
+ * Normalize the `developer` role to `system` for non-OpenAI providers.
+ * OpenAI introduced `developer` as a replacement for `system` in newer models,
+ * but most other providers still expect `system`.
+ *
+ * @param messages - Array of messages
+ * @param targetFormat - The target format (e.g., "openai", "claude", "gemini")
+ * @returns Modified messages array
+ */
+export function normalizeDeveloperRole(messages: any[], targetFormat: string): any[] {
+  if (!Array.isArray(messages)) return messages;
+
+  // For OpenAI format, keep developer role as-is (it's valid)
+  // For all other formats, convert developer → system
+  if (targetFormat === "openai") return messages;
+
+  return messages.map((msg) => {
+    if (msg.role === "developer") {
+      return { ...msg, role: "system" };
+    }
+    return msg;
+  });
+}
+
+/**
+ * Convert `system` messages to user messages for providers that don't support
+ * the system role. The system content is prepended to the first user message
+ * with a clear delimiter.
+ *
+ * @param messages - Array of messages
+ * @param provider - Provider name
+ * @param model - Model name
+ * @returns Modified messages array
+ */
+export function normalizeSystemRole(messages: any[], provider: string, model: string): any[] {
+  if (!Array.isArray(messages) || messages.length === 0) return messages;
+  if (supportsSystemRole(provider, model)) return messages;
+
+  // Extract system messages
+  const systemMessages = messages.filter((m) => m.role === "system" || m.role === "developer");
+  if (systemMessages.length === 0) return messages;
+
+  // Build system content string
+  const systemContent = systemMessages
+    .map((m) => {
+      if (typeof m.content === "string") return m.content;
+      if (Array.isArray(m.content)) {
+        return m.content
+          .filter((c: any) => c.type === "text")
+          .map((c: any) => c.text)
+          .join("\n");
+      }
+      return "";
+    })
+    .filter(Boolean)
+    .join("\n\n");
+
+  if (!systemContent) {
+    return messages.filter((m) => m.role !== "system" && m.role !== "developer");
+  }
+
+  // Remove system messages and merge into first user message
+  const nonSystemMessages = messages.filter((m) => m.role !== "system" && m.role !== "developer");
+
+  // Find first user message and prepend system content
+  const firstUserIdx = nonSystemMessages.findIndex((m) => m.role === "user");
+  if (firstUserIdx >= 0) {
+    const userMsg = nonSystemMessages[firstUserIdx];
+    const userContent =
+      typeof userMsg.content === "string"
+        ? userMsg.content
+        : Array.isArray(userMsg.content)
+          ? userMsg.content
+              .filter((c: any) => c.type === "text")
+              .map((c: any) => c.text)
+              .join("\n")
+          : "";
+
+    nonSystemMessages[firstUserIdx] = {
+      ...userMsg,
+      content: `[System Instructions]\n${systemContent}\n\n[User Message]\n${userContent}`,
+    };
+  } else {
+    // No user message found — insert as a user message at the beginning
+    nonSystemMessages.unshift({
+      role: "user",
+      content: `[System Instructions]\n${systemContent}`,
+    });
+  }
+
+  return nonSystemMessages;
+}
+
+/**
+ * Full role normalization pipeline.
+ * Call this before sending the request to the provider.
+ *
+ * @param messages - Array of messages
+ * @param provider - Provider name/id
+ * @param model - Model name
+ * @param targetFormat - Target API format
+ * @returns Normalized messages array
+ */
+export function normalizeRoles(
+  messages: any[],
+  provider: string,
+  model: string,
+  targetFormat: string
+): any[] {
+  if (!Array.isArray(messages)) return messages;
+
+  // Step 1: Normalize developer → system (for non-OpenAI formats)
+  let result = normalizeDeveloperRole(messages, targetFormat);
+
+  // Step 2: Normalize system → user (for providers that don't support system role)
+  result = normalizeSystemRole(result, provider, model);
+
+  return result;
+}

open-sse/services/usage.ts

@@ -53,7 +53,7 @@ export async function getUsageForProvider(connection) {
     case "claude":
       return await getClaudeUsage(accessToken);
     case "codex":
-      return await getCodexUsage(accessToken);
+      return await getCodexUsage(accessToken, providerSpecificData);
     case "kiro":
       return await getKiroUsage(accessToken, providerSpecificData);
     case "qwen":
@@ -318,14 +318,11 @@ async function getAntigravityUsage(accessToken, providerSpecificData) {
       // Filter only recommended/important models (must match PROVIDER_MODELS ag ids)
       const importantModels = [
         "claude-opus-4-6-thinking",
-        "claude-opus-4-5-thinking",
-        "claude-opus-4-5",
-        "claude-sonnet-4-5-thinking",
-        "claude-sonnet-4-5",
-        "gemini-3-pro-high",
-        "gemini-3-pro-low",
+        "claude-sonnet-4-6",
+        "gemini-3.1-pro-high",
+        "gemini-3.1-pro-low",
         "gemini-3-flash",
-        "gemini-2.5-flash",
+        "gpt-oss-120b-medium",
       ];
 
       for (const [modelKey, info] of Object.entries(data.models) as [string, any][]) {
@@ -483,15 +480,26 @@ async function getClaudeUsage(accessToken) {
 
 /**
  * Codex (OpenAI) Usage - Fetch from ChatGPT backend API
+ * IMPORTANT: Uses persisted workspaceId from OAuth to ensure correct workspace binding.
+ * No fallback to other workspaces - strict binding to user's selected workspace.
  */
-async function getCodexUsage(accessToken) {
+async function getCodexUsage(accessToken, providerSpecificData: Record<string, any> = {}) {
   try {
+    // Use persisted workspace ID from OAuth - NO FALLBACK
+    const accountId = providerSpecificData?.workspaceId || null;
+
+    const headers: Record<string, string> = {
+      Authorization: `Bearer ${accessToken}`,
+      "Content-Type": "application/json",
+      Accept: "application/json",
+    };
+    if (accountId) {
+      headers["chatgpt-account-id"] = accountId;
+    }
+
     const response = await fetch(CODEX_CONFIG.usageUrl, {
       method: "GET",
-      headers: {
-        Authorization: `Bearer ${accessToken}`,
-        Accept: "application/json",
-      },
+      headers,
     });
 
     if (!response.ok) {
@@ -500,38 +508,75 @@ async function getCodexUsage(accessToken) {
 
     const data = await response.json();
 
-    // Parse rate limit info
-    const rateLimit = data.rate_limit || {};
-    const primaryWindow = rateLimit.primary_window || {};
-    const secondaryWindow = rateLimit.secondary_window || {};
+    // Helper to get field with snake_case/camelCase fallback
+    const getField = (obj: any, snakeKey: string, camelKey: string) =>
+      obj?.[snakeKey] ?? obj?.[camelKey] ?? null;
 
-    // Parse reset dates (reset_at is Unix timestamp in seconds, multiply by 1000 for ms)
-    const sessionResetAt = parseResetTime(
-      primaryWindow.reset_at ? primaryWindow.reset_at * 1000 : null
-    );
-    const weeklyResetAt = parseResetTime(
-      secondaryWindow.reset_at ? secondaryWindow.reset_at * 1000 : null
+    // Parse rate limit info (supports both snake_case and camelCase)
+    const rateLimit = getField(data, "rate_limit", "rateLimit") || {};
+    const primaryWindow = getField(rateLimit, "primary_window", "primaryWindow") || {};
+    const secondaryWindow = getField(rateLimit, "secondary_window", "secondaryWindow") || {};
+
+    // Parse reset times (reset_at is Unix timestamp in seconds)
+    const parseWindowReset = (window: any) => {
+      const resetAt = getField(window, "reset_at", "resetAt");
+      const resetAfterSeconds = getField(window, "reset_after_seconds", "resetAfterSeconds");
+      if (resetAt) return parseResetTime(resetAt * 1000);
+      if (resetAfterSeconds) return parseResetTime(Date.now() + resetAfterSeconds * 1000);
+      return null;
+    };
+
+    // Build quota windows
+    const quotas: Record<string, any> = {};
+
+    // Primary window (5-hour)
+    if (Object.keys(primaryWindow).length > 0) {
+      quotas.session = {
+        used: getField(primaryWindow, "used_percent", "usedPercent") || 0,
+        total: 100,
+        remaining: 100 - (getField(primaryWindow, "used_percent", "usedPercent") || 0),
+        resetAt: parseWindowReset(primaryWindow),
+        unlimited: false,
+      };
+    }
+
+    // Secondary window (weekly)
+    if (Object.keys(secondaryWindow).length > 0) {
+      quotas.weekly = {
+        used: getField(secondaryWindow, "used_percent", "usedPercent") || 0,
+        total: 100,
+        remaining: 100 - (getField(secondaryWindow, "used_percent", "usedPercent") || 0),
+        resetAt: parseWindowReset(secondaryWindow),
+        unlimited: false,
+      };
+    }
+
+    // Code review rate limit (3rd window — differs per plan: Plus/Pro/Team)
+    const codeReviewRateLimit =
+      getField(data, "code_review_rate_limit", "codeReviewRateLimit") || {};
+    const codeReviewWindow = getField(codeReviewRateLimit, "primary_window", "primaryWindow") || {};
+
+    // Only include code review quota if the API returned data for it
+    const codeReviewUsedPercent = getField(codeReviewWindow, "used_percent", "usedPercent");
+    const codeReviewRemainingCount = getField(
+      codeReviewWindow,
+      "remaining_count",
+      "remainingCount"
     );
+    if (codeReviewUsedPercent !== null || codeReviewRemainingCount !== null) {
+      quotas.code_review = {
+        used: codeReviewUsedPercent || 0,
+        total: 100,
+        remaining: 100 - (codeReviewUsedPercent || 0),
+        resetAt: parseWindowReset(codeReviewWindow),
+        unlimited: false,
+      };
+    }
 
     return {
-      plan: data.plan_type || "unknown",
-      limitReached: rateLimit.limit_reached || false,
-      quotas: {
-        session: {
-          used: primaryWindow.used_percent || 0,
-          total: 100,
-          remaining: 100 - (primaryWindow.used_percent || 0),
-          resetAt: sessionResetAt,
-          unlimited: false,
-        },
-        weekly: {
-          used: secondaryWindow.used_percent || 0,
-          total: 100,
-          remaining: 100 - (secondaryWindow.used_percent || 0),
-          resetAt: weeklyResetAt,
-          unlimited: false,
-        },
-      },
+      plan: getField(data, "plan_type", "planType") || "unknown",
+      limitReached: getField(rateLimit, "limit_reached", "limitReached") || false,
+      quotas,
     };
   } catch (error) {
     throw new Error(`Failed to fetch Codex usage: ${error.message}`);

open-sse/translator/index.ts

@@ -4,6 +4,7 @@ import { prepareClaudeRequest } from "./helpers/claudeHelper.ts";
 import { filterToOpenAIFormat } from "./helpers/openaiHelper.ts";
 import { normalizeThinkingConfig } from "../services/provider.ts";
 import { applyThinkingBudget } from "../services/thinkingBudget.ts";
+import { normalizeRoles } from "../services/roleNormalizer.ts";
 
 // Registry for translators.
 // NOTE: translator modules import this file and call register() at module-load time.
@@ -132,6 +133,11 @@ export function translateRequest(
   // Fix missing tool responses (insert empty tool_result if needed)
   fixMissingToolResponses(result);
 
+  // Normalize roles: developer→system for non-OpenAI, system→user for incompatible models
+  if (result.messages && Array.isArray(result.messages)) {
+    result.messages = normalizeRoles(result.messages, provider || "", model || "", targetFormat);
+  }
+
   // If same format, skip translation steps
   if (sourceFormat !== targetFormat) {
     // Check for direct translation path first (e.g., Claude → Gemini)

open-sse/translator/request/openai-to-gemini.ts

@@ -199,6 +199,24 @@ function openaiToGeminiBase(model, body, stream) {
     }
   }
 
+  // Convert response_format to Gemini's responseMimeType/responseSchema
+  if (body.response_format) {
+    if (body.response_format.type === "json_schema" && body.response_format.json_schema) {
+      result.generationConfig.responseMimeType = "application/json";
+      // Extract the schema (may be nested under .schema key)
+      const schema = body.response_format.json_schema.schema || body.response_format.json_schema;
+      if (schema && typeof schema === "object") {
+        // Remove unsupported keywords for Gemini (it uses a subset of JSON Schema)
+        const { $schema, additionalProperties, ...cleanSchema } = schema;
+        result.generationConfig.responseSchema = cleanSchema;
+      }
+    } else if (body.response_format.type === "json_object") {
+      result.generationConfig.responseMimeType = "application/json";
+    } else if (body.response_format.type === "text") {
+      result.generationConfig.responseMimeType = "text/plain";
+    }
+  }
+
   return result;
 }
 
@@ -253,9 +271,11 @@ export function openaiToGeminiCLIRequest(model, body, stream) {
 function wrapInCloudCodeEnvelope(model, geminiCLI, credentials = null, isAntigravity = false) {
   const projectId = credentials?.projectId || generateProjectId();
 
+  const cleanModel = model.includes("/") ? model.split("/").pop()! : model;
+
   const envelope: Record<string, any> = {
     project: projectId,
-    model: model,
+    model: cleanModel,
     userAgent: isAntigravity ? "antigravity" : "gemini-cli",
     requestId: isAntigravity ? `agent-${generateUUID()}` : generateRequestId(),
     request: {
@@ -297,9 +317,11 @@ function wrapInCloudCodeEnvelope(model, geminiCLI, credentials = null, isAntigra
 function wrapInCloudCodeEnvelopeForClaude(model, claudeRequest, credentials = null) {
   const projectId = credentials?.projectId || generateProjectId();
 
+  const cleanModel = model.includes("/") ? model.split("/").pop()! : model;
+
   const envelope: Record<string, any> = {
     project: projectId,
-    model: model,
+    model: cleanModel,
     userAgent: "antigravity",
     requestId: `agent-${generateUUID()}`,
     requestType: "agent",

open-sse/tsconfig.json

@@ -6,6 +6,7 @@
     "allowJs": true,
     "checkJs": true,
     "noEmit": true,
+    "allowImportingTsExtensions": true,
     "skipLibCheck": true,
     "esModuleInterop": true,
     "strict": false,
@@ -18,8 +19,5 @@
       "@omniroute/open-sse/*": ["./open-sse/*"]
     }
   },
-  "include": [
-    "**/*.ts",
-    "**/*.js"
-  ]
+  "include": ["**/*.ts", "**/*.js"]
 }

open-sse/utils/bypassHandler.ts

@@ -1,3 +1,4 @@
+import { getCorsOrigin } from "./cors.ts";
 import { detectFormat } from "../services/provider.ts";
 import { translateResponse, initState } from "../translator/index.ts";
 import { FORMATS } from "../translator/formats.ts";
@@ -122,7 +123,7 @@ function createNonStreamingResponse(sourceFormat, model) {
       response: new Response(JSON.stringify(openaiResponse), {
         headers: {
           "Content-Type": "application/json",
-          "Access-Control-Allow-Origin": "*",
+          "Access-Control-Allow-Origin": getCorsOrigin(),
         },
       }),
     };
@@ -156,7 +157,7 @@ function createNonStreamingResponse(sourceFormat, model) {
     response: new Response(JSON.stringify(finalResponse), {
       headers: {
         "Content-Type": "application/json",
-        "Access-Control-Allow-Origin": "*",
+        "Access-Control-Allow-Origin": getCorsOrigin(),
       },
     }),
   };
@@ -204,7 +205,7 @@ function createStreamingResponse(sourceFormat, model) {
         "Content-Type": "text/event-stream",
         "Cache-Control": "no-cache",
         Connection: "keep-alive",
-        "Access-Control-Allow-Origin": "*",
+        "Access-Control-Allow-Origin": getCorsOrigin(),
       },
     }),
   };

open-sse/utils/cors.ts

@@ -0,0 +1,22 @@
+/**
+ * CORS configuration for open-sse handlers.
+ *
+ * Reads `CORS_ORIGIN` env var (default: "*") so that all handlers
+ * use the same configurable origin. Equivalent to src/shared/utils/cors.ts
+ * for the open-sse package boundary.
+ */
+
+const CORS_ORIGIN = process.env.CORS_ORIGIN || "*";
+
+export const CORS_HEADERS: Record<string, string> = {
+  "Access-Control-Allow-Origin": CORS_ORIGIN,
+  "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
+  "Access-Control-Allow-Headers": "Content-Type, Authorization, x-api-key, anthropic-version",
+};
+
+/**
+ * Returns just the origin header for merging into existing header objects.
+ */
+export function getCorsOrigin(): string {
+  return CORS_ORIGIN;
+}

open-sse/utils/error.ts

@@ -1,3 +1,4 @@
+import { getCorsOrigin } from "./cors.ts";
 import { ERROR_TYPES, DEFAULT_ERROR_MESSAGES } from "../config/constants.ts";
 
 /**
@@ -33,7 +34,7 @@ export function errorResponse(statusCode, message) {
     status: statusCode,
     headers: {
       "Content-Type": "application/json",
-      "Access-Control-Allow-Origin": "*",
+      "Access-Control-Allow-Origin": getCorsOrigin(),
     },
   });
 }
@@ -131,7 +132,11 @@ export async function parseUpstreamError(response, provider = null) {
  * @param {number|null} retryAfterMs - Optional retry-after time in milliseconds
  * @returns {{ success: false, status: number, error: string, response: Response, retryAfterMs?: number }}
  */
-export function createErrorResult(statusCode: number, message: string, retryAfterMs: number | null = null) {
+export function createErrorResult(
+  statusCode: number,
+  message: string,
+  retryAfterMs: number | null = null
+) {
   const result: Record<string, any> = {
     success: false,
     status: statusCode,

open-sse/utils/ollamaTransform.ts

@@ -1,3 +1,4 @@
+import { getCorsOrigin } from "./cors.ts";
 // Transform OpenAI SSE stream to Ollama JSON lines format
 export function transformToOllama(response, model) {
   let buffer = "";
@@ -85,6 +86,9 @@ export function transformToOllama(response, model) {
   });
 
   return new Response(response.body.pipeThrough(transform), {
-    headers: { "Content-Type": "application/x-ndjson", "Access-Control-Allow-Origin": "*" },
+    headers: {
+      "Content-Type": "application/x-ndjson",
+      "Access-Control-Allow-Origin": getCorsOrigin(),
+    },
   });
 }

open-sse/utils/stream.ts

@@ -12,6 +12,10 @@ import {
 } from "./usageTracking.ts";
 import { parseSSELine, hasValuableContent, fixInvalidId, formatSSE } from "./streamHelpers.ts";
 import { STREAM_IDLE_TIMEOUT_MS, HTTP_STATUS } from "../config/constants.ts";
+import {
+  sanitizeStreamingChunk,
+  extractThinkingFromContent,
+} from "../handlers/responseSanitizer.ts";
 
 export { COLORS, formatSSE };
 
@@ -130,7 +134,10 @@ export function createSSEStream(options: any = {}) {
 
             if (trimmed.startsWith("data:") && trimmed.slice(5).trim() !== "[DONE]") {
               try {
-                const parsed = JSON.parse(trimmed.slice(5).trim());
+                let parsed = JSON.parse(trimmed.slice(5).trim());
+
+                // Sanitize: strip non-standard fields for OpenAI SDK compatibility
+                parsed = sanitizeStreamingChunk(parsed);
 
                 const idFixed = fixInvalidId(parsed);
 
@@ -139,6 +146,16 @@ export function createSSEStream(options: any = {}) {
                 }
 
                 const delta = parsed.choices?.[0]?.delta;
+
+                // Extract <think> tags from streaming content
+                if (delta?.content && typeof delta.content === "string") {
+                  const { content, thinking } = extractThinkingFromContent(delta.content);
+                  delta.content = content;
+                  if (thinking && !delta.reasoning_content) {
+                    delta.reasoning_content = thinking;
+                  }
+                }
+
                 const content = delta?.content || delta?.reasoning_content;
                 if (content && typeof content === "string") {
                   totalContentLength += content.length;

package.json

@@ -1,6 +1,6 @@
 {
   "name": "omniroute",
-  "version": "0.8.5",
+  "version": "1.4.10",
   "description": "Smart AI Router with auto fallback — route to FREE & cheap models, zero downtime. Works with Cursor, Cline, Claude Desktop, Codex, and any OpenAI-compatible tool.",
   "type": "module",
   "bin": {
@@ -17,7 +17,7 @@
     "open-sse"
   ],
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=18.0.0 <24.0.0"
   },
   "keywords": [
     "ai",
@@ -47,13 +47,13 @@
     "build:cli": "node scripts/prepublish.mjs",
     "start": "next start --port 20128",
     "lint": "eslint .",
-    "test": "node --test tests/unit/*.test.mjs",
+    "test": "node --import tsx/esm --test tests/unit/*.test.mjs",
     "test:unit": "node --import tsx/esm --test tests/unit/*.test.mjs",
     "test:plan3": "node --test tests/unit/plan3-p0.test.mjs",
     "test:fixes": "node --test tests/unit/fixes-p1.test.mjs",
     "test:security": "node --test tests/unit/security-fase01.test.mjs",
     "test:e2e": "npx playwright test",
-    "test:coverage": "npx c8 --check-coverage --lines 50 --functions 40 --branches 40 node --test tests/unit/*.test.mjs",
+    "test:coverage": "npx c8 --exclude=open-sse --check-coverage --lines 50 --functions 50 --branches 50 node --import tsx/esm --test tests/unit/*.test.mjs",
     "test:all": "npm run test:unit && npm run test:e2e",
     "check": "npm run lint && npm run test",
     "prepublishOnly": "npm run build:cli",
@@ -72,6 +72,7 @@
     "lowdb": "^7.0.1",
     "monaco-editor": "^0.55.1",
     "next": "^16.1.6",
+    "next-intl": "^4.8.3",
     "node-machine-id": "^1.1.12",
     "open": "^11.0.0",
     "ora": "^9.1.0",
@@ -90,7 +91,7 @@
   "devDependencies": {
     "@playwright/test": "^1.58.2",
     "@tailwindcss/postcss": "^4.1.18",
-    "@types/bcryptjs": "^2.4.6",
+    "@types/bcryptjs": "^3.0.0",
     "@types/better-sqlite3": "^7.6.13",
     "@types/node": "^25.2.3",
     "@types/react": "^19.2.14",
@@ -102,7 +103,8 @@
     "prettier": "^3.8.1",
     "tailwindcss": "^4",
     "tsx": "^4.21.0",
-    "typescript": "^5.9.3"
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.56.0"
   },
   "lint-staged": {
     "*.{js,jsx,ts,tsx,mjs}": [