Release v0.9.0

Release v0.9.0

.agent/workflows/git-workflow.md

@@ -0,0 +1,54 @@
+---
+description: Git workflow — NEVER commit directly to main. Always use feature branches.
+---
+
+# Git Workflow
+
+## ⚠️ CRITICAL RULE: NEVER commit directly to `main`
+
+## Steps
+
+1. **Before starting any work**, create a feature branch from `main`:
+
+   ```bash
+   git checkout main && git pull origin main
+   git checkout -b feature/<feature-name>
+   ```
+
+2. **During development**, commit to the feature branch:
+
+   ```bash
+   git add -A && git commit -m "<type>(<scope>): <description>"
+   ```
+
+3. **Before pushing**, verify the build passes:
+
+   ```bash
+   npm run build
+   ```
+
+4. **When the feature is complete and verified**, push the branch and STOP:
+
+   ```bash
+   git push origin feature/<feature-name>
+   ```
+
+5. **DO NOT** create a PR, merge, or push to `main`. Let the user handle that.
+
+## Branch naming convention
+
+- `feature/<name>` — new features
+- `fix/<name>` — bugfixes
+- `refactor/<name>` — refactoring
+- `docker/<name>` — Docker / infrastructure changes
+- `style/<name>` — UI / CSS changes
+
+## Commit types
+
+- `feat` — new feature
+- `fix` — bugfix
+- `refactor` — code refactoring
+- `style` — UI / CSS changes
+- `docker` — Docker / infrastructure
+- `docs` — documentation
+- `chore` — maintenance

.env.example

@@ -44,9 +44,6 @@ REQUIRE_API_KEY=false
 BASE_URL=http://localhost:20128
 CLOUD_URL=
 # Backward-compatible/public variables:
-# NEXT_PUBLIC_BASE_URL is also used as the OAuth redirect_uri origin when running behind a
-# reverse proxy (e.g., nginx). Set this to your public-facing URL so OAuth callbacks work.
-# Example: NEXT_PUBLIC_BASE_URL=https://omniroute.example.com
 NEXT_PUBLIC_BASE_URL=http://localhost:20128
 NEXT_PUBLIC_CLOUD_URL=
 
@@ -82,45 +79,17 @@ NEXT_PUBLIC_ENABLE_SOCKS5_PROXY=true
 # Provider OAuth Credentials (optional — override hardcoded defaults)
 # These can also be set via data/provider-credentials.json
 # CLAUDE_OAUTH_CLIENT_ID=
-
-# ─────────────────────────────────────────────────────────────────────────────
-# ⚠️  GOOGLE OAUTH (Antigravity, Gemini CLI) — IMPORTANT FOR REMOTE SERVERS
-# ─────────────────────────────────────────────────────────────────────────────
-# The built-in Google OAuth credentials ONLY work when OmniRoute runs on
-# localhost (127.0.0.1 / local network). They are registered with
-# redirect_uri = http://localhost:PORT/callback and Google will reject any
-# other redirect URI with: redirect_uri_mismatch.
-#
-# If you are hosting OmniRoute on a remote server (VPS, Docker, cloud), you
-# MUST register your own Google Cloud OAuth 2.0 credentials:
-#
-#   1. Go to https://console.cloud.google.com/apis/credentials
-#   2. Create an OAuth 2.0 Client ID (type: "Web application")
-#   3. Add your server URL as Authorized redirect URI:
-#        https://your-server.com/callback
-#   4. Copy the Client ID and Client Secret below.
-#
-# See the full tutorial in README.md → "OAuth em Servidor Remoto" section.
-#
-# Antigravity (Google Gemini Code Assist):
-# ANTIGRAVITY_OAUTH_CLIENT_ID=your-client-id.apps.googleusercontent.com
-# ANTIGRAVITY_OAUTH_CLIENT_SECRET=GOCSPX-your-secret
-ANTIGRAVITY_OAUTH_CLIENT_SECRET=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
-
-# Gemini CLI (Google AI):
-# GEMINI_OAUTH_CLIENT_ID=your-client-id.apps.googleusercontent.com
-# GEMINI_OAUTH_CLIENT_SECRET=GOCSPX-your-secret
+# GEMINI_OAUTH_CLIENT_ID=
+# GEMINI_OAUTH_CLIENT_SECRET=
 # GEMINI_CLI_OAUTH_CLIENT_ID=
-GEMINI_OAUTH_CLIENT_SECRET=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
-GEMINI_CLI_OAUTH_CLIENT_SECRET=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
-# ─────────────────────────────────────────────────────────────────────────────
-
-# CLAUDE_OAUTH_CLIENT_ID=
+# GEMINI_CLI_OAUTH_CLIENT_SECRET=
 # CODEX_OAUTH_CLIENT_ID=
 # CODEX_OAUTH_CLIENT_SECRET=
 # QWEN_OAUTH_CLIENT_ID=
 # IFLOW_OAUTH_CLIENT_ID=
-IFLOW_OAUTH_CLIENT_SECRET=4Z3YjXycVsQvyGF1etiNlIBB4RsqSDtW
+# IFLOW_OAUTH_CLIENT_SECRET=
+# ANTIGRAVITY_OAUTH_CLIENT_ID=
+# ANTIGRAVITY_OAUTH_CLIENT_SECRET=
 
 # API Key Providers (Phase 1 + Phase 4)
 # Add via Dashboard → Providers → Add API Key, or set here
@@ -149,7 +118,3 @@ IFLOW_OAUTH_CLIENT_SECRET=4Z3YjXycVsQvyGF1etiNlIBB4RsqSDtW
 # Logging
 # LOG_LEVEL=info
 # LOG_FORMAT=text
-LOG_TO_FILE=true
-# LOG_FILE_PATH=logs/application/app.log
-# LOG_MAX_FILE_SIZE=50M
-# LOG_RETENTION_DAYS=7

.github/workflows/ci.yml

@@ -36,8 +36,7 @@ jobs:
       - name: Dependency audit
         run: npm audit --audit-level=high --omit=dev
       - name: Check for known vulnerabilities
-        run: npx is-my-node-vulnerable
-        continue-on-error: true
+        run: npx is-my-node-vulnerable || true
 
   build:
     name: Build
@@ -109,39 +108,3 @@ jobs:
       - run: npx playwright install --with-deps chromium
       - run: npm run build
       - run: npm run test:e2e
-
-  test-integration:
-    name: Integration Tests
-    runs-on: ubuntu-latest
-    needs: build
-    env:
-      JWT_SECRET: ci-test-secret-with-sufficient-length-for-validation
-      API_KEY_SECRET: ci-test-api-key-secret-long
-      INITIAL_PASSWORD: ci-test-password-for-integration
-      DATA_DIR: /tmp/omniroute-ci
-    steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v6
-        with:
-          node-version: 22
-          cache: npm
-      - run: npm ci
-      - run: npm run test:integration
-        continue-on-error: true
-
-  test-security:
-    name: Security Tests
-    runs-on: ubuntu-latest
-    needs: build
-    env:
-      JWT_SECRET: ci-test-secret-with-sufficient-length-for-validation
-      API_KEY_SECRET: ci-test-api-key-secret-long
-    steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v6
-        with:
-          node-version: 22
-          cache: npm
-      - run: npm ci
-      - run: npm run test:security
-        continue-on-error: true

.gitignore

@@ -71,9 +71,6 @@ docs/*
 !docs/planning/
 !docs/improvement-plans/
 !docs/api/
-!docs/VM_DEPLOYMENT_GUIDE.md
-!docs/FEATURES.md
-!docs/screenshots/
 
 # open-sse tests
 open-sse/test/*
@@ -91,7 +88,3 @@ omnirouteSite/
 
 # Security Analysis (standalone project with own git)
 security-analysis/
-
-# Deploy workflow (contains sensitive VPS credentials)
-.agent/workflows/deploy.md
-clipr/

CHANGELOG.md

@@ -7,428 +7,242 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ---
 
-## [1.0.10] — 2026-02-21
+## [0.9.0] — 2026-02-17
 
-> ### 🐛 Bugfix — Multi-Account Support for Qwen
->
-> Solves the issue where adding a second Qwen account would overwrite the first one.
+### Added
 
-### 🐛 Bug Fixes
-
-- **OAuth Accounts** — Extracted user email from the `id_token` using JWT decoding for Qwen and similar providers, allowing multiple accounts of the same provider to be authenticated simultaneously instead of triggering the fallback overwrite logic ([#99](https://github.com/diegosouzapw/OmniRoute/issues/99))
+- 🌐 **Full multilingual README support** — Complete translations of README.md into 7 languages: Portuguese (pt-BR), Spanish (es), Russian (ru), Chinese Simplified (zh-CN), German (de), French (fr), Italian (it)
+- 🤖 **Agent showcase grid** — Modernized header with visual grid showcasing 10 AI coding agents (OpenClaw, NanoBot, PicoClaw, ZeroClaw, IronClaw, OpenCode, Codex CLI, Claude Code, Gemini CLI, Kilo Code)
+- 🖼️ **Provider logos** — Added logo assets for OpenClaw, NanoBot, PicoClaw, ZeroClaw, IronClaw, OpenCode
+- 🔌 **OpenAI-compatible provider validation fix** — Fallback validation via chat completions for providers that don't expose `/models` endpoint
+- 🛡️ **Red shield badges** — Replaced plain ❌ emoji with styled badge icons across all README files
 
 ---
 
-## [1.0.9] — 2026-02-21
+## [0.8.8] — 2026-02-17
 
-> ### 🐛 Hotfix — Settings Persistence
->
-> Fixes blocked providers and API auth toggle not being saved after page reload.
+### Added
 
-### 🐛 Bug Fixes
+- 📊 **Analytics page redesign** — Rebuilt analytics dashboard with Recharts (SVG-based) charts replacing the previous implementation. New layout: stat cards → model usage bar chart → provider breakdown table with success rates and avg latency
+- 🎯 **6 global routing strategies** — Expanded from 3 (Fill-First, Round-Robin, P2C) to 6, adding Random, Least-Used, and Cost-Optimized. All strategies now have descriptions and icons in the Settings → Routing tab
+- 🔧 **Editable rate limits** — Rate limit defaults (RPM, Min Gap, Max Concurrent) are now editable in Settings → Resilience with save/cancel functionality. Values persist via the resilience API
+- 📋 **Policies in Resilience tab** — Moved PoliciesPanel (circuit breaker status + locked identifiers) from Security to Resilience tab for better logical grouping
+- 🧠 **Prompt Cache in AI tab** — Relocated CacheStatsCard from Advanced to AI tab alongside Thinking Budget and System Prompt
 
-- **Settings Persistence** — Added `requireAuthForModels` (boolean) and `blockedProviders` (string array) to the Zod validation schema, which was silently stripping these fields during PATCH requests, preventing them from being saved to the database
+### Changed
+
+- ♻️ **Settings page restructure** — Reorganized all settings tabs for better UX:
+  - **Security**: Simplified to Login/Password and IP Access Control only
+  - **Routing**: Expanded strategy grid with all 6 routing strategies
+  - **Resilience**: Reordered cards (Provider Profiles → Rate Limiting → Circuit Breakers → Policies & Locked Identifiers)
+  - **AI**: Now includes Thinking Budget, System Prompt, and Prompt Cache
+  - **Advanced**: Simplified to only Global Proxy configuration
+- 🔄 **Backend routing strategies** — Implemented `random` (Fisher-Yates shuffle), `least-used` (sorted by `lastUsedAt`), `cost-optimized` (sorted by priority ascending), and fixed `p2c` (power-of-two-choices with health scoring) in `auth.ts`
+- 🔌 **Resilience API updates** — GET endpoint now merges saved rate limit defaults with constants; PATCH endpoint accepts both `profiles` and `defaults`
+- 📊 **Usage page split** — Refactored Usage page into "Request Logs" (with updated icon) and a new dedicated "Limits & Quotas" page
+
+### Fixed
+
+- 🐛 **Provider add error** — Improved error handling for API responses when adding new provider connections, with clear validation feedback
 
 ---
 
-## [1.0.8] — 2026-02-21
+## [0.8.5] — 2026-02-17
 
-> ### 🔒 API Security & Windows Support
+> ### 🔷 MILESTONE: 100% TypeScript Migration
 >
-> Adds API Endpoint Protection for `/models`, Windows server startup fixes, and UI improvements.
+> **OmniRoute is now fully TypeScript.** The entire `src/` directory (API routes, components, services, lib, domain layer) and all 94 files in `open-sse/` have been migrated from JavaScript/JSX to TypeScript/TSX — with zero `@ts-ignore` annotations and zero TypeScript errors. This is a complete rewrite of the type layer across 200+ files.
 
-### ✨ New Features
+### Added
 
-- **API Endpoint Protection (`/models`)** — New Security Tab settings to optionally require an API key for the `/v1/models` endpoint (returns 404 when unauthorized) and to selectively block specific providers from appearing in the models list ([#100](https://github.com/diegosouzapw/OmniRoute/issues/100), [#96](https://github.com/diegosouzapw/OmniRoute/issues/96))
-- **Interactive Provider UI** — Blocked Providers setting features an interactive chip selector with visual badges for all available AI providers
+- 🔒 **TLS fingerprint spoofing** — Implement browser-like TLS fingerprinting via `wreq-js` to bypass bot detection on providers that enforce TLS client fingerprint checks (`3dd0cc1`, PR #52)
+- 💾 **SQLite proxy log persistence** — Proxy request/response logs now persist to SQLite database, surviving server restarts. Previously, logs were lost on restart (`f1664fe`, PR #53)
+- 📋 **Unified test logging** — Shared `Logger` + Proxy logging infrastructure for all provider connection test flows. Consistent log formatting across batch and individual tests (`bce302e`, PR #55)
 
-### 🐛 Bug Fixes
+### Refactored
 
-- **Windows Server Startup** — Fixed `ERR_INVALID_FILE_URL_PATH` crash on Windows by safely wrapping `import.meta.url` resolution with a fallback to `process.cwd()` for globally installed npm packages ([#98](https://github.com/diegosouzapw/OmniRoute/issues/98))
-- **Combo buttons visibility** — Fixed layout overlap and tight spacing for the Quick Action buttons (Clone / Delete / Test) on the Combos page on narrower screens ([#95](https://github.com/diegosouzapw/OmniRoute/issues/95))
+- 🔷 **Full TypeScript migration — `src/`** — Migrated the entire `src/` directory from JavaScript to TypeScript. All `.js`/`.jsx` files converted to `.ts`/`.tsx` with proper type annotations across API routes, lib modules, components, services, stores, domain layer, and shared utilities (`d0ca595`)
+  - **Wave 1**: Shared component interfaces + EventTarget fixes (`dfdd2a2`)
+  - **Wave 2**: Utils & services typed fields, Zustand stores, logger, sync scheduler (`89dd107`, `b2907cd`)
+  - **Wave 3a**: Lib layer, DB, compliance, domain layer typed (`9e13fe2`)
+  - **Wave 3b**: Usage, CLI runtime, SSE auth/logger typed (`a291abd`)
+  - **Wave 3c**: OAuth services + server utils typed (`d62cf8d`)
+  - **Wave 4a**: 7 API routes — providers, cli-tools, oauth (`7cdb923`)
+  - **Wave 4b**: 7 more API routes — providers, test, usage, nodes (`5592c2e`)
+  - **Wave 4c**: 8 files — components, SSE handlers, services (`d8ce9dc`)
+  - **Dashboard hardening**: Resolve all TypeScript errors across dashboard pages (`7a463a3`, PR #61)
+- 🔷 **Full TypeScript migration — `open-sse/`** — Migrated all 94 `.js` files in the SSE routing engine to TypeScript (PR #62)
+  - **Phase 1**: Rename all 94 `.js` → `.ts` files (`256e443`)
+  - **Phase 6**: Reduce `@ts-ignore` from 231 → 186 with targeted fixes (`6a54b84`)
+  - **Phase 7**: Eliminate ALL `@ts-ignore` annotations (186 → 0) and ALL TypeScript errors (237 → 0) — zero `@ts-ignore`, zero errors (`7b37a3c`)
+  - Typing strategies: `Record<string, any>` for dynamic objects, optional function params, `as any` casts for custom Error/Array properties, `declare var EdgeRuntime` for edge compatibility, proper `fs`/`path` imports
+
+### Fixed
+
+- 🐛 **Qwen token refresh** — Detect `invalid_request` as unrecoverable error and switch broken test endpoints to `checkExpiry` method instead of failing silently (`1e0ffbc`, PR #60)
+- 🐛 **VPS batch test compatibility** — Eliminate HTTP self-calls in batch provider connection tests for VPS environments where localhost is unreachable (`a3bbbb5`, PR #54)
+- 🐛 **E2E test assertions** — Correct API endpoints and response format assertions in end-to-end tests (`92b5e66`)
+- 🐛 **CI coverage thresholds** — Lower coverage thresholds, use production server for E2E, block ESLint major upgrades from breaking CI (`3ca4b6b`, PR #51)
+
+### Changed
+
+- 📖 **Documentation update** — Updated all documentation to reflect JS → TS migration, corrected file extensions and import paths (`7ff8aa2`)
+- ⬆️ **CI/CD** — Bump `actions/checkout` v4 → v6, `actions/setup-node` v4 → v6, `peter-evans/dockerhub-description` v4 → v5
+
+### Dependencies
+
+- ⬆️ `undici` 7.21.0 → 7.22.0 (production)
+- ⬆️ `actions/checkout` 4 → 6
+- ⬆️ `actions/setup-node` 4 → 6
+- ⬆️ `peter-evans/dockerhub-description` 4 → 5
+- 🚫 `eslint` 10.0.0 blocked — major version incompatible with `eslint-config-next`
 
 ---
 
-## [1.0.7] — 2026-02-20
+## [0.8.0] — 2026-02-16
 
-> ### 🐛 Bugfix Release — OpenAI Compatibility, Custom Models & OAuth UX
->
-> Fixes three community-reported issues: stream default now follows OpenAI spec, custom OpenAI-compatible providers appear in `/v1/models`, and Google OAuth shows a clear error + tutorial for remote deployments.
+### Added
 
-### 🐛 Bug Fixes
+- 🌐 **Official website** — [omniroute.online](https://omniroute.online) live with static site on Akamai VM + Cloudflare proxy
+- 🛡️ **Comprehensive SECURITY.md** — Full codebase audit documenting 10+ security features (AES-256-GCM, prompt injection guard, PII redaction, circuit breaker, etc.)
+- 📖 **Documentation tracking** — `USER_GUIDE.md`, `API_REFERENCE.md`, `TROUBLESHOOTING.md` now tracked in git
+- 🏷️ **Website badge** — Official website badge and links in README, npm, and Docker Hub
+- 🔗 **36+ providers** — Updated provider count across documentation
 
-- **`stream` defaults to `false`** — Aligns with the OpenAI specification which explicitly states `stream` defaults to `false`. Previously OmniRoute defaulted to `true`, causing SSE data to be returned instead of a JSON object, breaking clients like Spacebot, OpenCode, and standard Python/Rust/Go OpenAI SDKs that don't explicitly set `stream: true` ([#89](https://github.com/diegosouzapw/OmniRoute/issues/89))
-- **Custom AI providers now appear in `/v1/models`** — OpenAI-compatible custom providers (e.g. FriendLI) whose provider ID wasn't in the built-in alias map were silently excluded from the models list even when active. Fixed by also checking the raw provider ID from the database against active connections ([#90](https://github.com/diegosouzapw/OmniRoute/issues/90))
-- **OAuth `redirect_uri_mismatch` — improved UX for remote deployments** — Google OAuth providers (Antigravity, Gemini CLI) now always use `localhost` as redirect URI matching the registered credentials. Remote-access users see a targeted amber warning with a link to the new setup guide. The token exchange error message explains the root cause and guides users to configure their own credentials ([#91](https://github.com/diegosouzapw/OmniRoute/issues/91))
+### Changed
 
-### 📖 Documentation
-
-- **OAuth em Servidor Remoto tutorial** — New README section with step-by-step guide to configure custom Google Cloud OAuth 2.0 credentials for remote/VPS/Docker deployments
-- **`.env.example` Google OAuth block** — Added prominent warning block explaining remote credential requirements with direct links to Google Cloud Console
-
-### 📁 Files Modified
-
-| File                                   | Change                                                                                      |
-| -------------------------------------- | ------------------------------------------------------------------------------------------- |
-| `open-sse/handlers/chatCore.ts`        | `stream` defaults to `false` (was `true`) per OpenAI spec                                   |
-| `src/app/api/v1/models/route.ts`       | Added raw `providerId` check for custom models active-provider filter                       |
-| `src/shared/components/OAuthModal.tsx` | Force `localhost` redirect for Google OAuth; improved `redirect_uri_mismatch` error message |
-| `.env.example`                         | Added ⚠️ Google OAuth remote credentials block with step-by-step instructions               |
-| `README.md`                            | New "🔐 OAuth em Servidor Remoto" tutorial section                                          |
+- 📦 **npm homepage** — Points to `omniroute.online` instead of GitHub
+- 🐳 **Docker OCI labels** — Added `org.opencontainers.image.url` for Docker Hub
+- 🔒 **Security policy** — Updated supported versions, replaced email with GitHub Security Advisories
 
 ---
 
-## [1.0.6] — 2026-02-20
+## [0.7.0] — 2026-02-16
 
-> ### ✨ Provider & Combo Toggles — Strict Model Filtering
->
-> `/v1/models` now shows only models from providers with active connections. Combos and providers can be toggled on/off directly from the dashboard.
+### Added
 
-### ✨ New Features
-
-- **Provider toggle on Providers page** — Enable/disable all connections for a provider directly from the main Providers list. Toggle is always visible, no hover needed
-- **Combo enable/disable toggle** — Each combo on the Combos page now has a toggle. Disabled combos are excluded from `/v1/models`
-- **OAuth private IP support** — Expanded localhost detection to include private/LAN IPs (`192.168.x.x`, `10.x.x.x`, `172.16-31.x.x`) for correct OAuth redirect URIs
-
-### 🐛 Bug Fixes
-
-- **`/v1/models` strict filtering** — Models are now shown only from providers with active, enabled connections. Previously, if no connections existed or all were disabled, all 378+ models were shown as a fallback
-- **Disabled provider models hidden** — Toggling off a provider immediately removes its models from `/v1/models`
+- 🐳 **Docker Hub public image** — `diegosouzapw/omniroute` available on [Docker Hub](https://hub.docker.com/r/diegosouzapw/omniroute) with `latest` and versioned tags
+- 🔄 **Docker CI/CD** — GitHub Actions workflow (`docker-publish.yml`) auto-builds and pushes Docker image on every release
+- ☁️ **Akamai VM deployment** — Nanode 1GB instance created for remote hosting
+- 🎯 **Provider model filtering** — Filter model suggestions by selected provider in Translator and Chat Tester
+- 🔌 **CLI status badges** — Extract `CliStatusBadge` component; status visible on collapsed tool cards
+- ☁️ **Cloud connection UX** — GET status endpoint, toast feedback, and sidebar indicator for cloud sync
+- 🔐 **OAuth provider secrets** — Default cloud URL and OAuth provider secrets set via environment variables
+- ⚡ **Edge compatibility** — Replace `uuid` package with native `crypto.randomUUID()` for Cloudflare Workers compatibility
 
 ---
 
-## [1.0.5] — 2026-02-20
+## [0.6.0] — 2026-02-16
 
-> ### 🐛 Hotfix — Model Filtering & Docker DATA_DIR
->
-> Filters all model types in `/v1/models` by active providers and fixes Docker data directory mismatch.
+### Added
 
-### 🐛 Bug Fixes
-
-- **`/v1/models` full filtering** — Embedding, image, rerank, audio, and moderation models are now filtered by active provider connections, matching chat model behavior. Providers like Together AI no longer appear without a configured API key (#88)
-- **Docker `DATA_DIR`** — Added `ENV DATA_DIR=/app/data` to Dockerfile and `docker-compose.yml` ensuring the volume mount always matches the app data directory — prevents empty database on container recreation
+- 💰 **Costs & Budget page** — Dedicated dashboard page for cost tracking and budget management
+- 📊 **Provider metrics display** — Show per-provider usage metrics and statistics
+- 📥 **Model import for passthrough providers** — Import models from API-compatible providers (Deepgram, AssemblyAI, NanoBanana)
+- 🎨 **App icon redesign** — New network node graph icon with updated color scheme
 
 ---
 
-## [1.0.4] — 2026-02-19
+## [0.5.0] — 2026-02-15
 
-> ### 🔧 Provider Filtering, OAuth Proxy Fix & Documentation
->
-> Dashboard model filtering by active providers, provider enable/disable visual indicators, OAuth login fix for nginx reverse proxy, and LLM onboarding documentation.
+### Added
 
-### ✨ Features
+- 🧪 **LLM Evaluations (Evals)** — Golden set testing framework with 4 match strategies (`exact`, `contains`, `regex`, `custom`)
+- 🎲 **Advanced combo strategies** — `random`, `least-used`, and `cost-optimized` balancing strategies for combos
+- 📊 **API key usage in Evals** — Evals tab uses API key auth for real LLM calls through the proxy
+- 🏷️ **Model availability badge** — Visual indicator for model availability per provider
+- 🎨 **Landing page retheme** — Updated landing page design with new aesthetic
+- 🧩 **Shared UI component library** — Refactored dashboard with reusable component library
 
-- **API Models filtering** — `GET /api/models` now returns only models from active providers; use `?all=true` for all models (#85)
-- **Provider disabled indicator** — Provider cards show ⏸ "Disabled" badge with reduced opacity when all connections are inactive (#85)
-- **`llm.txt`** — Comprehensive LLM onboarding file with project overview, architecture, flows, and conventions (#84)
-- **WhatsApp Community** — Added WhatsApp group link to README badges and Support section
+### Fixed
 
-### 🐛 Bug Fixes
-
-- **OAuth behind nginx** — Fixed OAuth login failing when behind a reverse proxy by using `window.location.origin` for redirect URI instead of hardcoded `localhost` (#86)
-- **`NEXT_PUBLIC_BASE_URL` for OAuth** — Documented env var usage as redirect URI override for proxy deployments (#86)
-
-### 📁 Files Added
-
-| File      | Purpose                                            |
-| --------- | -------------------------------------------------- |
-| `llm.txt` | LLM and contributor onboarding (llms.txt standard) |
-
-### 📁 Files Modified
-
-| File                                               | Change                                                           |
-| -------------------------------------------------- | ---------------------------------------------------------------- |
-| `src/app/api/models/route.ts`                      | Filter by active providers, `?all=true` param, `available` field |
-| `src/app/(dashboard)/dashboard/providers/page.tsx` | `allDisabled` detection + ⏸ badge + opacity-50 on provider cards |
-| `src/shared/components/OAuthModal.tsx`             | Proxy-aware redirect URI using `window.location.origin`          |
-| `.env.example`                                     | Documented `NEXT_PUBLIC_BASE_URL` for OAuth behind proxy         |
+- 🐛 Fix `TypeError` in `chat/completions` `ensureInitialized` call
 
 ---
 
-## [1.0.3] — 2026-02-19
+## [0.4.0] — 2026-02-15
 
-> ### 📊 Logs Dashboard & Real-Time Console Viewer
->
-> Unified logs interface with real-time console log viewer, file-based logging via console interception, and server initialization improvements.
+### Added
 
-### ✨ Features
+- 🧠 **LLM Gateway Intelligence** (Phase 9) — Smart routing, semantic caching, request idempotency, progress tracking
+- 📄 **Missing flows & pages** (Phase 8) — Error pages, UX components, telemetry dashboards
+- 🔧 **API & code quality** (Phase 7) — API restructuring, JSDoc documentation, code quality improvements
+- 📚 **Documentation restructuring** (Phase 10) — Component decomposition, docs cleanup
+- ✅ **26 action items** from critical analysis resolved
 
-- **Logs Dashboard** — Consolidated 4-tab page at `/dashboard/logs` with Request Logs, Proxy Logs, Audit Logs, and Console tabs
-- **Console Log Viewer** — Terminal-style real-time log viewer with color-coded log levels, auto-scroll, search/filtering, level filter, and 5-second polling
-- **Console Interceptor** — Monkey-patches `console.log/info/warn/error/debug` at server start to capture all application output as JSON lines to `logs/application/app.log`
-- **Log Rotation** — Size-based rotation and retention-based cleanup for log files
+### Changed
 
-### 🔧 Improvements
+- ♻️ **Architecture refactor** (Phase 5-6) — Domain persistence, policy engine, OAuth extraction, proxy decoupling
 
-- **Instrumentation consolidation** — Moved `initAuditLog()`, `cleanupExpiredLogs()`, and console interceptor initialization to Next.js `instrumentation.ts` (runs on both dev and prod server start)
-- **Structured Logger file output** — `structuredLogger.ts` now also appends JSON log entries to the log file
-- **Pino Logger fix** — Fixed broken mix of pino `transport` targets + manual `createWriteStream`; now uses `pino/file` transport targets exclusively with absolute paths
+### Fixed
 
-### 🗂️ Files Added
-
-| File                                                 | Purpose                                                           |
-| ---------------------------------------------------- | ----------------------------------------------------------------- |
-| `src/app/(dashboard)/dashboard/logs/page.tsx`        | Tabbed Logs Dashboard page                                        |
-| `src/app/(dashboard)/dashboard/logs/AuditLogTab.tsx` | Audit log tab component extracted from standalone page            |
-| `src/shared/components/ConsoleLogViewer.tsx`         | Terminal-style real-time log viewer                               |
-| `src/app/api/logs/console/route.ts`                  | API endpoint to read log file (filters last 1h, level, component) |
-| `src/lib/consoleInterceptor.ts`                      | Console method monkey-patching for file capture                   |
-| `src/lib/logRotation.ts`                             | Log rotation by size and cleanup by retention days                |
-
-### 🗂️ Files Modified
-
-| File                                    | Change                                                                          |
-| --------------------------------------- | ------------------------------------------------------------------------------- |
-| `src/shared/components/Sidebar.tsx`     | Nav: "Request Logs" → "Logs" with `description` icon                            |
-| `src/shared/components/Breadcrumbs.tsx` | Added breadcrumb labels for `logs`, `audit-log`, `console`                      |
-| `src/instrumentation.ts`                | Added console interceptor + audit log init + expired log cleanup                |
-| `src/server-init.ts`                    | Added console interceptor import (backup init)                                  |
-| `src/shared/utils/logger.ts`            | Fixed pino file transport using `pino/file` targets                             |
-| `src/shared/utils/structuredLogger.ts`  | Added `appendFileSync` file writing + log file config                           |
-| `.env.example`                          | Added `LOG_TO_FILE`, `LOG_FILE_PATH`, `LOG_MAX_FILE_SIZE`, `LOG_RETENTION_DAYS` |
-
-### ⚙️ Configuration
-
-New environment variables:
-
-| Variable             | Default                    | Description                   |
-| -------------------- | -------------------------- | ----------------------------- |
-| `LOG_TO_FILE`        | `true`                     | Enable/disable file logging   |
-| `LOG_FILE_PATH`      | `logs/application/app.log` | Log file path                 |
-| `LOG_MAX_FILE_SIZE`  | `50M`                      | Max file size before rotation |
-| `LOG_RETENTION_DAYS` | `7`                        | Days to retain old log files  |
+- 🐛 Fix CI build and lint failures
+- 🐛 Fix ghost import in `chatHelpers.js` SSE handling
 
 ---
 
-## [1.0.2] — 2026-02-18
+## [0.3.0] — 2026-02-15
 
-> ### 🔒 Security Hardening, Architecture Improvements & UX Polish
->
-> Comprehensive audit-driven improvements across security, architecture, testing, and user experience.
+### Added
 
-### 🛡️ Security (Phase 0)
+- ⚡ **Resilience system** — Exponential backoff, circuit breaker, anti-thundering herd mutex, Resilience UI settings page
+- 🖥️ **100% frontend API coverage** — 7 implementation batches covering all backend routes
+- 📊 **9 new API routes** — Budget, telemetry, compliance, tags, storage health, and more
+- 🧪 **Eval framework & compliance** — ADRs, accessibility, CLI specs, Playwright test specs (46 tasks)
+- 🏗️ **Pipeline integration** — 7 backend modules wired into request processing pipeline
+- 🔐 **Security hardening** — Phases 01–06 (input validation, CSRF, rate limiting, auth hardening)
+- 🤖 **Advanced features** — Phases 07–09 (domain extraction, error codes, request ID, fetch timeout)
+- 🔄 **Unrecoverable token handling** — Detect and mark connections as expired on fatal refresh errors
 
-- **Auth guard** — API route protection via `withAuth` middleware for all dashboard routes
-- **CSRF protection** — Token-based CSRF guard for all state-changing API routes
-- **Request payload validation** — Zod schemas for provider, combo, key, and settings endpoints
-- **Prompt injection guard** — Input sanitization against malicious prompt patterns
-- **Body size guard** — Route-specific body size limits with dedicated audio upload threshold
-- **Rate limiter** — Per-IP rate limiting with configurable windows and thresholds
+### Changed
 
-### 🏗️ Architecture (Phase 1–2)
-
-- **DI container** — Simple dependency injection container for service registration
-- **Policy engine** — Consolidated `PolicyEngine` for routing, security, and rate limiting
-- **SQLite migration** — Database migration system with versioned migration runner
-- **Graceful shutdown** — Clean server shutdown with connection draining
-- **TypeScript fixes** — Resolved all `tsc` errors; removed redundant `@ts-check` directives
-- **Pipeline decomposition** — `handleSingleModelChat` decomposed into composable pipeline stages
-- **Prompt template versioning** — Version-tracked prompt templates with rollback support
-- **Eval scheduling** — Automated evaluation suite scheduling with cron-based runner
-- **Plugin architecture** — Extensible plugin system for custom middleware and handlers
-
-### 🧪 Testing & CI (Phase 2)
-
-- **Coverage thresholds** — Jest coverage thresholds enforced in CI (368 tests passing)
-- **Proxy pipeline integration tests** — End-to-end tests for the proxy request pipeline
-- **CI audit workflow** — npm audit and security scanning in GitHub Actions
-- **k6 load tests** — Performance testing with ramping VUs and custom metrics
-
-### ✨ UX & Polish (Phase 3–4)
-
-- **Session management** — Session info card with login time, age, user agent, and logout
-- **Focus indicators** — Global `:focus-visible` styles and `--focus-ring` CSS utility
-- **Audit log viewer** — Security event audit log with structured data display
-- **Dashboard cleanup** — Removed unused files, fixed Quick Start links to Endpoint page
-- **Documentation** — Troubleshooting guide, deployment improvements
+- ♻️ Decompose `usageDb`, `handleSingleModelChat`, and UI components for maintainability
+- ⬇️ Downgrade ESLint v10 → v9 for `eslint-config-next` compatibility
 
 ---
 
-## [1.1.0] — 2026-02-18
+## [0.2.0] — 2026-02-14
 
-> ### 🔧 API Compatibility & SDK Hardening
->
-> Response sanitization, role normalization, and structured output improvements for strict OpenAI SDK compatibility and cross-provider robustness.
+### Added
 
-### 🛡️ Response Sanitization (NEW)
-
-- **Response sanitizer module** — New `responseSanitizer.ts` strips non-standard fields (`x_groq`, `usage_breakdown`, `service_tier`, etc.) from all OpenAI-format provider responses, fixing OpenAI Python SDK v1.83+ Pydantic validation failures that returned raw strings instead of parsed `ChatCompletion` objects
-- **Streaming chunk sanitization** — Passthrough streaming mode now sanitizes each SSE chunk in real-time via `sanitizeStreamingChunk()`, ensuring strict `chat.completion.chunk` schema compliance
-- **ID/Object/Usage normalization** — Ensures `id`, `object`, `created`, `model`, `choices`, and `usage` fields always exist with correct types
-- **Usage field cleanup** — Strips non-standard usage sub-fields, keeps only `prompt_tokens`, `completion_tokens`, `total_tokens`, and OpenAI detail fields
-
-### 🧠 Think Tag Extraction (NEW)
-
-- **`<think>` tag extraction** — Automatically extracts `<think>...</think>` blocks from thinking model responses (DeepSeek R1, Kimi K2 Thinking, etc.) into OpenAI's standard `reasoning_content` field
-- **Streaming think-tag stripping** — Real-time `<think>` extraction in passthrough SSE stream, preventing JSON parsing errors in downstream tools
-- **Preserves native reasoning** — Providers that already send `reasoning_content` natively (e.g., OpenAI o1) are not overwritten
-
-### 🔄 Role Normalization (NEW)
-
-- **`developer` → `system` conversion** — OpenAI's new `developer` role is automatically converted to `system` for all non-OpenAI providers (Claude, Gemini, Kiro, etc.)
-- **`system` → `user` merging** — For models that reject the `system` role (GLM, ERNIE), system messages are intelligently merged into the first user message with clear delimiters
-- **Model-aware normalization** — Uses model name prefix matching (`glm-*`, `ernie-*`) for compatibility decisions, avoiding hardcoded provider-level flags
-
-### 📐 Structured Output for Gemini (NEW)
-
-- **`response_format` → Gemini conversion** — OpenAI's `json_schema` structured output is now translated to Gemini's `responseMimeType` + `responseSchema` in the translator pipeline
-- **`json_object` support** — `response_format: { type: "json_object" }` maps to Gemini's `application/json` MIME type
-- **Schema cleanup** — Automatically removes unsupported JSON Schema keywords (`$schema`, `additionalProperties`) for Gemini compatibility
-
-### 📁 Files Added
-
-| File                                     | Purpose                                                                |
-| ---------------------------------------- | ---------------------------------------------------------------------- |
-| `open-sse/handlers/responseSanitizer.ts` | Response field stripping, think-tag extraction, ID/usage normalization |
-| `open-sse/services/roleNormalizer.ts`    | Developer→system, system→user role conversion pipeline                 |
-
-### 📁 Files Modified
-
-| File                                              | Change                                                                          |
-| ------------------------------------------------- | ------------------------------------------------------------------------------- |
-| `open-sse/handlers/chatCore.ts`                   | Integrated response sanitizer for non-streaming OpenAI responses                |
-| `open-sse/utils/stream.ts`                        | Integrated streaming chunk sanitizer + think-tag extraction in passthrough mode |
-| `open-sse/translator/index.ts`                    | Integrated role normalizer into the request translation pipeline                |
-| `open-sse/translator/request/openai-to-gemini.ts` | Added `response_format` → `responseMimeType`/`responseSchema` conversion        |
+- 🛣️ **Advanced routing services** — Priority-based routing, global strategy configuration
+- 💰 **Cost analytics dashboard** — Token cost tracking and analytics visualization
+- 💎 **Pricing overhaul** — Comprehensive pricing data for all supported providers and models
+- 📦 **npm badge & CLI options** — npm version badge in README, CLI options table, automated release docs
 
 ---
 
-## [1.0.0] — 2026-02-18
+## [0.1.0] — 2026-02-14
 
-> ### 🎉 First Major Release — OmniRoute 1.0
->
-> OmniRoute is an intelligent API gateway that unifies 20+ AI providers behind a single OpenAI-compatible endpoint. This release represents the culmination of the entire development effort — from initial prototype to production-ready platform.
+### Added
 
-### 🧠 Core Routing & Intelligence
-
-- **Smart 4-tier fallback** — Auto-routing: Subscription → Cheap → Free → Emergency
-- **6 routing strategies** — Fill First, Round Robin, Power-of-Two-Choices, Random, Least Used, Cost Optimized
-- **Semantic caching** — Auto-cache responses for deduplication with configurable TTL
-- **Request idempotency** — Prevent duplicate processing of identical requests
-- **Thinking budget validation** — Control reasoning token allocation per request
-- **System prompt injection** — Configurable global system prompts for all requests
-
-### 🔌 Providers & Models
-
-- **20+ AI providers** — OpenAI, Claude (Anthropic), Gemini, GitHub Copilot, DeepSeek, Groq, xAI, Mistral, Qwen, iFlow, Kiro, OpenRouter, GLM, MiniMax, Kimi, NVIDIA NIM, and more
-- **Multi-account support** — Multiple accounts per provider with automatic rotation
-- **OAuth 2.0 (PKCE)** — Automatic token management and refresh for Claude Code, Codex, Gemini CLI, Copilot, Kiro
-- **Auto token refresh** — Background refresh with expiry detection and unrecoverable error handling
-- **Model import** — Import models from API-compatible passthrough providers
-- **OpenAI-compatible validation** — Fallback validation via chat completions for providers without `/models` endpoint
-- **TLS fingerprint spoofing** — Browser-like TLS fingerprinting via `wreq-js` to bypass bot detection
-
-### 🔄 Format Translation
-
-- **Multi-format translation** — Seamless OpenAI ↔ Claude ↔ Gemini ↔ OpenAI Responses API conversion
-- **Translator Playground** — 4 interactive modes:
-  - **Playground** — Test format translations between any provider formats
-  - **Chat Tester** — Send real requests through the proxy with visual response rendering
-  - **Test Bench** — Automated batch testing across multiple providers
-  - **Live Monitor** — Real-time stream of active proxy requests and translations
-
-### 🎯 Combos & Fallback Chains
-
-- **Custom combos** — Create model combinations with multi-provider fallback chains
-- **6 combo balancing strategies** — Fill First, Round Robin, Random, Least Used, P2C, Cost Optimized
-- **Combo circuit breaker** — Auto-disable failing providers within a combo chain
-
-### 🛡️ Resilience & Security
-
-- **Circuit breakers** — Auto-recovery with configurable thresholds and cooldown periods
-- **Exponential backoff** — Progressive retry delays for failed requests
-- **Anti-thundering herd** — Mutex-based protection against concurrent retry storms
-- **Rate limit detection** — Per-provider RPM, min gap, and max concurrent request tracking
-- **Editable rate limits** — Configurable defaults via Settings → Resilience with persistence
-- **Prompt injection guard** — Input sanitization for malicious prompt patterns
-- **PII redaction** — Automatic detection and masking of personally identifiable information
-- **AES-256-GCM encryption** — Credential encryption at rest
-- **IP access control** — Whitelist/blacklist IP filtering
-- **SOCKS5 proxy support** — Outbound proxy for upstream provider calls
-
-### 📊 Observability & Analytics
-
-- **Analytics dashboard** — Recharts-based SVG charts: stat cards, model usage bar chart, provider breakdown table with success rates and latency
-- **Real-time health monitoring** — Provider health, rate limits, latency telemetry
-- **Request logs** — Dedicated page with SQLite-persisted proxy request/response logs
-- **Limits & Quotas** — Separate dashboard for quota monitoring with reset countdowns
-- **Cost analytics** — Token cost tracking and budget management per provider
-- **Request telemetry** — Correlation IDs, structured logging, request timing
-
-### 💾 Database & Backup
-
-- **Dual database** — LowDB (JSON) for config + SQLite for domain state and proxy logs
-- **Export database** — `GET /api/db-backups/export` — Download SQLite database file
-- **Export all** — `GET /api/db-backups/exportAll` — Full backup as `.tar.gz` archive (DB + settings + combos + providers + masked API keys)
-- **Import database** — `POST /api/db-backups/import` — Upload and restore with validation, integrity check, and pre-import backup
-- **Automatic backups** — Configurable backup schedule with retention
-- **Storage health** — Dashboard widget with database size, path, and backup status
-
-### 🖥️ Dashboard & UI
-
-- **Full dashboard** — Provider management, analytics, health monitoring, settings, CLI tools
-- **9 dashboard sections** — Providers, Combos, Analytics, Health, Translator, Settings, CLI Tools, Usage, Endpoint
-- **Settings restructure** — 6 tabs: Security, Routing, Resilience, AI, System/Storage, Advanced
-- **Shared UI component library** — Reusable components (Avatar, Badge, Button, Card, DataTable, Modal, etc.)
-- **Dark/Light/System theme** — Persistent theme selection with system preference detection
-- **Agent showcase grid** — Visual grid of 10 AI coding agents in README header
-- **Provider logos** — Logo assets for all supported agents and providers
-- **Red shield badges** — Styled badge icons across all documentation
-
-### ☁️ Deployment & Infrastructure
-
-- **Docker support** — Multi-stage Dockerfile with `base` and `cli` profiles
-- **Docker Hub** — `diegosouzapw/omniroute` with `latest` and versioned tags
-- **Docker CI/CD** — GitHub Actions auto-build and push on release
-- **npm CLI package** — `npx omniroute` with auto-launch
-- **npm CI/CD** — GitHub Actions auto-publish to npm on release
-- **Akamai VM deployment** — Production deployment on Nanode 1GB with nginx reverse proxy
-- **Cloud sync** — Sync configuration across devices via Cloudflare Worker
-- **Edge compatibility** — Native `crypto.randomUUID()` for Cloudflare Workers
-
-### 🧪 Testing & Quality
-
-- **100% TypeScript** — Full migration of `src/` (200+ files) and `open-sse/` (94 files) — zero `@ts-ignore`, zero TypeScript errors
-- **CI/CD pipeline** — GitHub Actions for lint, build, test, npm publish, Docker publish
-- **Unit tests** — 20+ test suites covering domain logic, security, caching, routing
-- **E2E tests** — Playwright specs for API, navigation, and responsive behavior
-- **LLM evaluations** — Golden set testing framework with 4 match strategies (`exact`, `contains`, `regex`, `custom`)
-- **Security tests** — CLI runtime, Docker hardening, cloud sync, and OpenAI compatibility
-
-### 📖 Documentation
-
-- **8 language READMEs** — English, Portuguese (pt-BR), Spanish, Russian, Chinese (zh-CN), German, French, Italian
-- **VM Deployment Guide** — Complete guide (VM + Docker + nginx + Cloudflare + security)
-- **Features Gallery** — 9 dashboard screenshots with descriptions
-- **API Reference** — Full endpoint documentation including backup/export/import
-- **User Guide** — Step-by-step setup, configuration, and usage instructions
-- **Architecture docs** — System design, component decomposition, ADRs
-- **OpenAPI specification** — Machine-readable API documentation
-- **Troubleshooting guide** — Common issues and solutions
-- **Security policy** — `SECURITY.md` with vulnerability reporting via GitHub Security Advisories
-- **Roadmap** — 150+ planned features across 6 categories
-
-### 🔌 API Endpoints
-
-- `/v1/chat/completions` — OpenAI-compatible chat endpoint with format translation
-- `/v1/embeddings` — Embedding generation
-- `/v1/images/generations` — Image generation
-- `/v1/models` — Model listing with provider filtering
-- `/v1/rerank` — Re-ranking endpoint
-- `/v1/audio/*` — Audio transcription and translation
-- `/v1/moderations` — Content moderation
-- `/api/db-backups/export` — Database export
-- `/api/db-backups/exportAll` — Full archive export
-- `/api/db-backups/import` — Database import with validation
-- 30+ dashboard API routes for providers, combos, settings, analytics, health, CLI tools
+- 🎉 **Initial OmniRoute release** — Rebranded from 9router with full feature set
+- 🔄 **28 AI providers** — OpenAI, Claude, Gemini, Copilot, DeepSeek, Groq, xAI, Mistral, Qwen, iFlow, and more
+- 🎯 **Smart fallback** — 3-tier auto-routing (Subscription → Cheap → Free)
+- 🔀 **Format translation** — Seamless OpenAI ↔ Claude ↔ Gemini format conversion
+- 👥 **Multi-account support** — Multiple accounts per provider with round-robin
+- 🔐 **OAuth 2.0 (PKCE)** — Automatic token management and refresh
+- 📊 **Usage tracking** — Real-time quota monitoring with reset countdown
+- 🎨 **Custom combos** — Create model combinations with fallback chains
+- ☁️ **Cloud sync** — Sync configuration across devices via Cloudflare Worker
+- 📖 **OpenAPI specification** — Full API documentation
+- 🛡️ **SOCKS5 proxy support** — Outbound proxy for upstream provider calls
+- 🔌 **New endpoints** — `/v1/rerank`, `/v1/audio/*`, `/v1/moderations`
+- 📦 **npm CLI package** — `npm install -g omniroute` with auto-launch
+- 🐳 **Docker support** — Multi-stage Dockerfile with `base` and `cli` profiles
+- 🔒 **Security policy** — `SECURITY.md` with vulnerability reporting guidelines
+- 🧪 **CI/CD pipeline** — GitHub Actions for lint, build, test, and npm publish
 
 ---
 
-[1.0.7]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.7
-[1.0.6]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.6
-[1.0.5]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.5
-[1.0.4]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.4
-[1.1.0]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.1.0
-[1.0.3]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.3
-[1.0.2]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.2
-[1.0.0]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v1.0.0
+[0.9.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.8.8...v0.9.0
+[0.8.8]: https://github.com/diegosouzapw/OmniRoute/compare/v0.8.5...v0.8.8
+[0.8.5]: https://github.com/diegosouzapw/OmniRoute/compare/v0.8.0...v0.8.5
+[0.8.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.7.0...v0.8.0
+[0.7.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.6.0...v0.7.0
+[0.6.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.5.0...v0.6.0
+[0.5.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.4.0...v0.5.0
+[0.4.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.3.0...v0.4.0
+[0.3.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.2.0...v0.3.0
+[0.2.0]: https://github.com/diegosouzapw/OmniRoute/compare/v0.1.0...v0.2.0
+[0.1.0]: https://github.com/diegosouzapw/OmniRoute/releases/tag/v0.1.0

CONTRIBUTING.md

@@ -159,7 +159,7 @@ src/                        # TypeScript (.ts / .tsx)
 │   ├── cacheLayer.ts       # LRU cache
 │   ├── semanticCache.ts    # Semantic response cache
 │   ├── idempotencyLayer.ts # Request deduplication
-│   └── localDb.ts          # Settings facade (LowDB for config, SQLite for domain data)
+│   └── localDb.ts          # LowDB (JSON) storage
 ├── shared/
 │   ├── components/         # React components (.tsx)
 │   ├── middleware/          # Correlation IDs, etc.

Dockerfile

@@ -20,8 +20,7 @@ ENV NODE_ENV=production
 ENV PORT=20128
 ENV HOSTNAME=0.0.0.0
 
-# Data directory inside Docker — must match the volume mount in docker-compose.yml
-ENV DATA_DIR=/app/data
+# Runtime writable location for localDb when DATA_DIR is configured to /app/data
 RUN mkdir -p /app/data
 
 COPY --from=builder /app/public ./public

README.de.md

@@ -1,5 +1,5 @@
 <div align="center">
-  <img src="./docs/screenshots/MainOmniRoute.png" alt="OmniRoute Dashboard" width="800"/>
+  <img src="./images/omniroute.png" alt="OmniRoute Dashboard" width="800"/>
   
   # 🚀 OmniRoute — Das kostenlose AI-Gateway
 
@@ -100,7 +100,6 @@ _Verbinde jedes KI-gesteuerte IDE- oder CLI-Tool über OmniRoute — kostenloses
 [![Docker Hub](https://img.shields.io/docker/v/diegosouzapw/omniroute?label=Docker%20Hub&logo=docker&color=2496ED)](https://hub.docker.com/r/diegosouzapw/omniroute)
 [![License](https://img.shields.io/github/license/diegosouzapw/OmniRoute)](https://github.com/diegosouzapw/OmniRoute/blob/main/LICENSE)
 [![Website](https://img.shields.io/badge/Website-omniroute.online-blue?logo=google-chrome&logoColor=white)](https://omniroute.online)
-[![WhatsApp](https://img.shields.io/badge/WhatsApp-Community-25D366?logo=whatsapp&logoColor=white)](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 
 [🌐 Website](https://omniroute.online) • [🚀 Schnellstart](#-schnellstart) • [💡 Funktionen](#-hauptfunktionen) • [📖 Doku](#-dokumentation) • [💰 Preise](#-preisübersicht)
 
@@ -243,7 +242,7 @@ docker compose --profile cli up -d
 | Image                    | Tag      | Größe  | Beschreibung             |
 | ------------------------ | -------- | ------ | ------------------------ |
 | `diegosouzapw/omniroute` | `latest` | ~250MB | Letztes stabiles Release |
-| `diegosouzapw/omniroute` | `1.0.6`  | ~250MB | Aktuelle Version         |
+| `diegosouzapw/omniroute` | `0.9.0`  | ~250MB | Aktuelle Version         |
 
 ---
 
@@ -893,7 +892,7 @@ Das vorgeladene „OmniRoute Golden Set" enthält 10 Testfälle:
 **Verbindungstest zeigt „Invalid" für OpenAI-kompatible Anbieter**
 
 - Viele Anbieter stellen den `/models` Endpoint nicht bereit
-- OmniRoute v1.0.6+ enthält Fallback-Validierung via Chat Completions
+- OmniRoute v0.9.0+ enthält Fallback-Validierung via Chat Completions
 - Stelle sicher, dass die Base URL den `/v1` Suffix enthält
 
 </details>
@@ -903,7 +902,7 @@ Das vorgeladene „OmniRoute Golden Set" enthält 10 Testfälle:
 ## 🛠️ Technologie-Stack
 
 - **Runtime**: Node.js 20+
-- **Sprache**: TypeScript 5.9 — **100% TypeScript** in `src/` und `open-sse/` (v1.0.6)
+- **Sprache**: TypeScript 5.9 — **100% TypeScript** in `src/` und `open-sse/` (v0.9.0)
 - **Framework**: Next.js 16 + React 19 + Tailwind CSS 4
 - **Datenbank**: LowDB (JSON) + SQLite (Domain-Status + Proxy-Logs)
 - **Streaming**: Server-Sent Events (SSE)
@@ -933,13 +932,9 @@ Das vorgeladene „OmniRoute Golden Set" enthält 10 Testfälle:
 
 ## 📧 Support
 
-> 💬 **Treten Sie unserer Community bei!** [WhatsApp-Gruppe](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t) — Hilfe bekommen, Tipps teilen und auf dem Laufenden bleiben.
-
 - **Website**: [omniroute.online](https://omniroute.online)
 - **GitHub**: [github.com/diegosouzapw/OmniRoute](https://github.com/diegosouzapw/OmniRoute)
 - **Issues**: [github.com/diegosouzapw/OmniRoute/issues](https://github.com/diegosouzapw/OmniRoute/issues)
-- **WhatsApp**: [Community-Gruppe](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
-- **WhatsApp**: [Community-Gruppe](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 - **Originalprojekt**: [9router von decolua](https://github.com/decolua/9router)
 
 ---
@@ -962,7 +957,7 @@ Siehe [CONTRIBUTING.md](CONTRIBUTING.md) für detaillierte Richtlinien.
 
 ```bash
 # Release erstellen — npm-Veröffentlichung erfolgt automatisch
-gh release create v1.0.6 --title "v1.0.6" --generate-notes
+gh release create v0.9.0 --title "v0.9.0" --generate-notes
 ```
 
 ---

README.es.md

@@ -1,5 +1,5 @@
 <div align="center">
-  <img src="./docs/screenshots/MainOmniRoute.png" alt="OmniRoute Dashboard" width="800"/>
+  <img src="./images/omniroute.png" alt="OmniRoute Dashboard" width="800"/>
   
   # 🚀 OmniRoute — El Gateway de IA Gratuito
 
@@ -100,7 +100,6 @@ _Conecta cualquier IDE o herramienta CLI con IA a través de OmniRoute — gatew
 [![Docker Hub](https://img.shields.io/docker/v/diegosouzapw/omniroute?label=Docker%20Hub&logo=docker&color=2496ED)](https://hub.docker.com/r/diegosouzapw/omniroute)
 [![License](https://img.shields.io/github/license/diegosouzapw/OmniRoute)](https://github.com/diegosouzapw/OmniRoute/blob/main/LICENSE)
 [![Website](https://img.shields.io/badge/Website-omniroute.online-blue?logo=google-chrome&logoColor=white)](https://omniroute.online)
-[![WhatsApp](https://img.shields.io/badge/WhatsApp-Community-25D366?logo=whatsapp&logoColor=white)](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 
 [🌐 Website](https://omniroute.online) • [🚀 Inicio Rápido](#-inicio-rápido) • [💡 Características](#-características-principales) • [📖 Docs](#-documentación) • [💰 Precios](#-precios-resumidos)
 
@@ -243,7 +242,7 @@ docker compose --profile cli up -d
 | Imagen                   | Tag      | Tamaño | Descripción            |
 | ------------------------ | -------- | ------ | ---------------------- |
 | `diegosouzapw/omniroute` | `latest` | ~250MB | Última versión estable |
-| `diegosouzapw/omniroute` | `1.0.6`  | ~250MB | Versión actual         |
+| `diegosouzapw/omniroute` | `0.9.0`  | ~250MB | Versión actual         |
 
 ---
 
@@ -893,7 +892,7 @@ El "OmniRoute Golden Set" precargado contiene 10 casos de prueba que cubren:
 **Prueba de conexión muestra "Invalid" para proveedores compatibles con OpenAI**
 
 - Muchos proveedores no exponen el endpoint `/models`
-- OmniRoute v1.0.6+ incluye validación vía chat completions como fallback
+- OmniRoute v0.9.0+ incluye validación vía chat completions como fallback
 - Asegúrate de que la URL base incluya el sufijo `/v1`
 
 </details>
@@ -903,7 +902,7 @@ El "OmniRoute Golden Set" precargado contiene 10 casos de prueba que cubren:
 ## 🛠️ Stack Tecnológico
 
 - **Runtime**: Node.js 20+
-- **Lenguaje**: TypeScript 5.9 — **100% TypeScript** en `src/` y `open-sse/` (v1.0.6)
+- **Lenguaje**: TypeScript 5.9 — **100% TypeScript** en `src/` y `open-sse/` (v0.9.0)
 - **Framework**: Next.js 16 + React 19 + Tailwind CSS 4
 - **Base de Datos**: LowDB (JSON) + SQLite (estado del dominio + logs de proxy)
 - **Streaming**: Server-Sent Events (SSE)
@@ -933,12 +932,9 @@ El "OmniRoute Golden Set" precargado contiene 10 casos de prueba que cubren:
 
 ## 📧 Soporte
 
-> 💬 **¡Únete a la comunidad!** [Grupo WhatsApp](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t) — Obtén ayuda, comparte consejos y mantente al día.
-
 - **Website**: [omniroute.online](https://omniroute.online)
 - **GitHub**: [github.com/diegosouzapw/OmniRoute](https://github.com/diegosouzapw/OmniRoute)
 - **Issues**: [github.com/diegosouzapw/OmniRoute/issues](https://github.com/diegosouzapw/OmniRoute/issues)
-- **WhatsApp**: [Grupo de la Comunidad](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 - **Proyecto Original**: [9router por decolua](https://github.com/decolua/9router)
 
 ---
@@ -961,7 +957,7 @@ Consulta [CONTRIBUTING.md](CONTRIBUTING.md) para directrices detalladas.
 
 ```bash
 # Crea un release — la publicación en npm ocurre automáticamente
-gh release create v1.0.6 --title "v1.0.6" --generate-notes
+gh release create v0.9.0 --title "v0.9.0" --generate-notes
 ```
 
 ---

README.fr.md

@@ -1,5 +1,5 @@
 <div align="center">
-  <img src="./docs/screenshots/MainOmniRoute.png" alt="OmniRoute Dashboard" width="800"/>
+  <img src="./images/omniroute.png" alt="OmniRoute Dashboard" width="800"/>
   
   # 🚀 OmniRoute — La Passerelle IA Gratuite
 
@@ -100,7 +100,6 @@ _Connectez n'importe quel IDE ou outil CLI alimenté par l'IA via OmniRoute —
 [![Docker Hub](https://img.shields.io/docker/v/diegosouzapw/omniroute?label=Docker%20Hub&logo=docker&color=2496ED)](https://hub.docker.com/r/diegosouzapw/omniroute)
 [![License](https://img.shields.io/github/license/diegosouzapw/OmniRoute)](https://github.com/diegosouzapw/OmniRoute/blob/main/LICENSE)
 [![Website](https://img.shields.io/badge/Website-omniroute.online-blue?logo=google-chrome&logoColor=white)](https://omniroute.online)
-[![WhatsApp](https://img.shields.io/badge/WhatsApp-Community-25D366?logo=whatsapp&logoColor=white)](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 
 [🌐 Site web](https://omniroute.online) • [🚀 Démarrage rapide](#-démarrage-rapide) • [💡 Fonctionnalités](#-fonctionnalités-principales) • [📖 Docs](#-documentation) • [💰 Tarifs](#-aperçu-des-tarifs)
 
@@ -243,7 +242,7 @@ docker compose --profile cli up -d
 | Image                    | Tag      | Taille | Description             |
 | ------------------------ | -------- | ------ | ----------------------- |
 | `diegosouzapw/omniroute` | `latest` | ~250MB | Dernière version stable |
-| `diegosouzapw/omniroute` | `1.0.6`  | ~250MB | Version actuelle        |
+| `diegosouzapw/omniroute` | `0.9.0`  | ~250MB | Version actuelle        |
 
 ---
 
@@ -893,7 +892,7 @@ Le « OmniRoute Golden Set » préchargé contient 10 cas de test :
 **Le test de connexion affiche « Invalid » pour les fournisseurs compatibles OpenAI**
 
 - Beaucoup de fournisseurs n'exposent pas le point de terminaison `/models`
-- OmniRoute v1.0.6+ inclut une validation de secours via chat completions
+- OmniRoute v0.9.0+ inclut une validation de secours via chat completions
 - Assurez-vous que l'URL de base inclut le suffixe `/v1`
 
 </details>
@@ -903,7 +902,7 @@ Le « OmniRoute Golden Set » préchargé contient 10 cas de test :
 ## 🛠️ Stack technologique
 
 - **Runtime** : Node.js 20+
-- **Langage** : TypeScript 5.9 — **100% TypeScript** dans `src/` et `open-sse/` (v1.0.6)
+- **Langage** : TypeScript 5.9 — **100% TypeScript** dans `src/` et `open-sse/` (v0.9.0)
 - **Framework** : Next.js 16 + React 19 + Tailwind CSS 4
 - **Base de données** : LowDB (JSON) + SQLite (état du domaine + logs proxy)
 - **Streaming** : Server-Sent Events (SSE)
@@ -933,12 +932,9 @@ Le « OmniRoute Golden Set » préchargé contient 10 cas de test :
 
 ## 📧 Support
 
-> 💬 **Rejoignez notre communauté !** [Groupe WhatsApp](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t) — Obtenez de l'aide, partagez des astuces et restez informé.
-
 - **Site web** : [omniroute.online](https://omniroute.online)
 - **GitHub** : [github.com/diegosouzapw/OmniRoute](https://github.com/diegosouzapw/OmniRoute)
 - **Issues** : [github.com/diegosouzapw/OmniRoute/issues](https://github.com/diegosouzapw/OmniRoute/issues)
-- **WhatsApp** : [Groupe communautaire](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 - **Projet original** : [9router par decolua](https://github.com/decolua/9router)
 
 ---
@@ -961,7 +957,7 @@ Consultez [CONTRIBUTING.md](CONTRIBUTING.md) pour les directives détaillées.
 
 ```bash
 # Créer un release — la publication npm est automatique
-gh release create v1.0.6 --title "v1.0.6" --generate-notes
+gh release create v0.9.0 --title "v0.9.0" --generate-notes
 ```
 
 ---

README.it.md

@@ -1,5 +1,5 @@
 <div align="center">
-  <img src="./docs/screenshots/MainOmniRoute.png" alt="OmniRoute Dashboard" width="800"/>
+  <img src="./images/omniroute.png" alt="OmniRoute Dashboard" width="800"/>
   
   # 🚀 OmniRoute — Il Gateway IA Gratuito
 
@@ -100,7 +100,6 @@ _Connetti qualsiasi IDE o strumento CLI con IA tramite OmniRoute — gateway API
 [![Docker Hub](https://img.shields.io/docker/v/diegosouzapw/omniroute?label=Docker%20Hub&logo=docker&color=2496ED)](https://hub.docker.com/r/diegosouzapw/omniroute)
 [![License](https://img.shields.io/github/license/diegosouzapw/OmniRoute)](https://github.com/diegosouzapw/OmniRoute/blob/main/LICENSE)
 [![Website](https://img.shields.io/badge/Website-omniroute.online-blue?logo=google-chrome&logoColor=white)](https://omniroute.online)
-[![WhatsApp](https://img.shields.io/badge/WhatsApp-Community-25D366?logo=whatsapp&logoColor=white)](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 
 [🌐 Sito Web](https://omniroute.online) • [🚀 Avvio Rapido](#-avvio-rapido) • [💡 Funzionalità](#-funzionalità-principali) • [📖 Docs](#-documentazione) • [💰 Prezzi](#-panoramica-prezzi)
 
@@ -243,7 +242,7 @@ docker compose --profile cli up -d
 | Immagine                 | Tag      | Dimensione | Descrizione             |
 | ------------------------ | -------- | ---------- | ----------------------- |
 | `diegosouzapw/omniroute` | `latest` | ~250MB     | Ultima versione stabile |
-| `diegosouzapw/omniroute` | `1.0.6`  | ~250MB     | Versione attuale        |
+| `diegosouzapw/omniroute` | `0.9.0`  | ~250MB     | Versione attuale        |
 
 ---
 
@@ -893,7 +892,7 @@ Il "OmniRoute Golden Set" precaricato contiene 10 casi di test:
 **Il test di connessione mostra "Invalid" per provider compatibili OpenAI**
 
 - Molti provider non espongono l'endpoint `/models`
-- OmniRoute v1.0.6+ include validazione fallback tramite chat completions
+- OmniRoute v0.9.0+ include validazione fallback tramite chat completions
 - Assicurati che la URL base includa il suffisso `/v1`
 
 </details>
@@ -903,7 +902,7 @@ Il "OmniRoute Golden Set" precaricato contiene 10 casi di test:
 ## 🛠️ Stack Tecnologico
 
 - **Runtime**: Node.js 20+
-- **Linguaggio**: TypeScript 5.9 — **100% TypeScript** in `src/` e `open-sse/` (v1.0.6)
+- **Linguaggio**: TypeScript 5.9 — **100% TypeScript** in `src/` e `open-sse/` (v0.9.0)
 - **Framework**: Next.js 16 + React 19 + Tailwind CSS 4
 - **Database**: LowDB (JSON) + SQLite (stato dominio + log proxy)
 - **Streaming**: Server-Sent Events (SSE)
@@ -933,13 +932,9 @@ Il "OmniRoute Golden Set" precaricato contiene 10 casi di test:
 
 ## 📧 Supporto
 
-> 💬 **Unisciti alla nostra community!** [Gruppo WhatsApp](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t) — Ottieni aiuto, condividi consigli e rimani aggiornato.
-
 - **Sito Web**: [omniroute.online](https://omniroute.online)
 - **GitHub**: [github.com/diegosouzapw/OmniRoute](https://github.com/diegosouzapw/OmniRoute)
 - **Issues**: [github.com/diegosouzapw/OmniRoute/issues](https://github.com/diegosouzapw/OmniRoute/issues)
-- **WhatsApp**: [Gruppo della comunità](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
-- **WhatsApp**: [Gruppo della comunità](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 - **Progetto Originale**: [9router di decolua](https://github.com/decolua/9router)
 
 ---
@@ -962,7 +957,7 @@ Consulta [CONTRIBUTING.md](CONTRIBUTING.md) per le linee guida dettagliate.
 
 ```bash
 # Crea un rilascio — la pubblicazione npm avviene automaticamente
-gh release create v1.0.6 --title "v1.0.6" --generate-notes
+gh release create v0.9.0 --title "v0.9.0" --generate-notes
 ```
 
 ---

README.md

@@ -1,5 +1,5 @@
 <div align="center">
-  <img src="./docs/screenshots/MainOmniRoute.png" alt="OmniRoute Dashboard" width="800"/>
+  <img src="./images/omniroute.png" alt="OmniRoute Dashboard" width="800"/>
   
   # 🚀 OmniRoute — The Free AI Gateway
 
@@ -100,9 +100,8 @@ _Connect any AI-powered IDE or CLI tool through OmniRoute — free API gateway f
 [![Docker Hub](https://img.shields.io/docker/v/diegosouzapw/omniroute?label=Docker%20Hub&logo=docker&color=2496ED)](https://hub.docker.com/r/diegosouzapw/omniroute)
 [![License](https://img.shields.io/github/license/diegosouzapw/OmniRoute)](https://github.com/diegosouzapw/OmniRoute/blob/main/LICENSE)
 [![Website](https://img.shields.io/badge/Website-omniroute.online-blue?logo=google-chrome&logoColor=white)](https://omniroute.online)
-[![WhatsApp](https://img.shields.io/badge/WhatsApp-Community-25D366?logo=whatsapp&logoColor=white)](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 
-[🌐 Website](https://omniroute.online) • [🚀 Quick Start](#-quick-start) • [💡 Features](#-key-features) • [📖 Docs](#-documentation) • [💰 Pricing](#-pricing-at-a-glance) • [💬 WhatsApp](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
+[🌐 Website](https://omniroute.online) • [🚀 Quick Start](#-quick-start) • [💡 Features](#-key-features) • [📖 Docs](#-documentation) • [💰 Pricing](#-pricing-at-a-glance)
 
 🌐 **Available in:** [English](README.md) | [Português](README.pt-BR.md) | [Español](README.es.md) | [Русский](README.ru.md) | [中文](README.zh-CN.md) | [Deutsch](README.de.md) | [Français](README.fr.md) | [Italiano](README.it.md)
 
@@ -243,7 +242,7 @@ docker compose --profile cli up -d
 | Image                    | Tag      | Size   | Description           |
 | ------------------------ | -------- | ------ | --------------------- |
 | `diegosouzapw/omniroute` | `latest` | ~250MB | Latest stable release |
-| `diegosouzapw/omniroute` | `1.0.3`  | ~250MB | Current version       |
+| `diegosouzapw/omniroute` | `0.9.0`  | ~250MB | Current version       |
 
 ---
 
@@ -341,7 +340,7 @@ Access via: WhatsApp, Telegram, Slack, Discord, iMessage, Signal...
 | ------------------------------- | ------------------------------------------------------------------------------ |
 | 🎯 **Smart 4-Tier Fallback**    | Auto-route: Subscription → API Key → Cheap → Free                              |
 | 📊 **Real-Time Quota Tracking** | Live token count + reset countdown per provider                                |
-| 🔄 **Format Translation**       | OpenAI ↔ Claude ↔ Gemini ↔ Cursor ↔ Kiro seamless + response sanitization      |
+| 🔄 **Format Translation**       | OpenAI ↔ Claude ↔ Gemini ↔ Cursor ↔ Kiro seamless                              |
 | 👥 **Multi-Account Support**    | Multiple accounts per provider with intelligent selection                      |
 | 🔄 **Auto Token Refresh**       | OAuth tokens refresh automatically with retry                                  |
 | 🎨 **Custom Combos**            | 6 strategies: fill-first, round-robin, p2c, random, least-used, cost-optimized |
@@ -373,23 +372,20 @@ Access via: WhatsApp, Telegram, Slack, Discord, iMessage, Signal...
 | 🔒 **TLS Fingerprint Spoofing** | Bypass TLS-based bot detection via wreq-js                    |
 | 🌐 **IP Filtering**             | Allowlist/blocklist for API access control                    |
 | 📊 **Editable Rate Limits**     | Configurable RPM, min gap, and max concurrent at system level |
-| 🛡 **API Endpoint Protection**  | Auth gating + provider blocking for the `/models` endpoint    |
 
 ### 📊 Observability & Analytics
 
-| Feature                    | What It Does                                                           |
-| -------------------------- | ---------------------------------------------------------------------- |
-| 📝 **Request Logging**     | Debug mode with full request/response logs                             |
-| 💾 **SQLite Proxy Logs**   | Persistent proxy logs survive server restarts                          |
-| 📊 **Analytics Dashboard** | Recharts-powered: stat cards, model usage chart, provider table        |
-| 📈 **Progress Tracking**   | Opt-in SSE progress events for streaming                               |
-| 🧪 **LLM Evaluations**     | Golden set testing with 4 match strategies                             |
-| 🔍 **Request Telemetry**   | p50/p95/p99 latency aggregation + X-Request-Id tracing                 |
-| 📋 **Logs Dashboard**      | Unified 4-tab page: Request Logs, Proxy Logs, Audit Logs, Console      |
-| 🖥️ **Console Log Viewer**  | Real-time terminal-style viewer with level filter, search, auto-scroll |
-| 📑 **File-Based Logging**  | Console interceptor captures all output to JSON log file with rotation |
-| 🏥 **Health Dashboard**    | System uptime, circuit breaker states, lockouts, cache stats           |
-| 💰 **Cost Tracking**       | Budget management + per-model pricing configuration                    |
+| Feature                      | What It Does                                                    |
+| ---------------------------- | --------------------------------------------------------------- |
+| 📝 **Request Logging**       | Debug mode with full request/response logs                      |
+| 💾 **SQLite Proxy Logs**     | Persistent proxy logs survive server restarts                   |
+| 📊 **Analytics Dashboard**   | Recharts-powered: stat cards, model usage chart, provider table |
+| 📈 **Progress Tracking**     | Opt-in SSE progress events for streaming                        |
+| 🧪 **LLM Evaluations**       | Golden set testing with 4 match strategies                      |
+| 🔍 **Request Telemetry**     | p50/p95/p99 latency aggregation + X-Request-Id tracing          |
+| 📋 **Request Logs + Quotas** | Dedicated pages for log browsing and limits/quotas tracking     |
+| 🏥 **Health Dashboard**      | System uptime, circuit breaker states, lockouts, cache stats    |
+| 💰 **Cost Tracking**         | Budget management + per-model pricing configuration             |
 
 ### ☁️ Deployment & Sync
 
@@ -400,7 +396,7 @@ Access via: WhatsApp, Telegram, Slack, Discord, iMessage, Signal...
 | 🔑 **API Key Management**  | Generate, rotate, and scope API keys per provider                     |
 | 🧙 **Onboarding Wizard**   | 4-step guided setup for first-time users                              |
 | 🔧 **CLI Tools Dashboard** | One-click configure Claude, Codex, Cline, OpenClaw, Kilo, Antigravity |
-| 🔄 **DB Backups**          | Automatic backup, restore, export & import for all settings           |
+| 🔄 **DB Backups**          | Automatic backup and restore for all settings                         |
 
 <details>
 <summary><b>📖 Feature Details</b></summary>
@@ -433,10 +429,6 @@ Seamless translation between formats:
 - **OpenAI** ↔ **Claude** ↔ **Gemini** ↔ **OpenAI Responses**
 - Your CLI tool sends OpenAI format → OmniRoute translates → Provider receives native format
 - Works with any tool that supports custom OpenAI endpoints
-- **Response sanitization** — Strips non-standard fields for strict OpenAI SDK compatibility
-- **Role normalization** — `developer` → `system` for non-OpenAI; `system` → `user` for GLM/ERNIE models
-- **Think tag extraction** — `<think>` blocks → `reasoning_content` for thinking models
-- **Structured output** — `json_schema` → Gemini's `responseMimeType`/`responseSchema`
 
 ### 👥 Multi-Account Support
 
@@ -467,16 +459,9 @@ Seamless translation between formats:
 
 ### 🔧 Translator Playground
 
-OmniRoute includes a powerful built-in Translator Playground with **4 modes** for debugging, testing, and monitoring API translations:
-
-| Mode                | Description                                                                                                                                                                                                                     |
-| ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| **💻 Playground**   | Direct format translation — paste any API request body and instantly see how OmniRoute translates it between provider formats (OpenAI ↔ Claude ↔ Gemini ↔ Responses API). Includes example templates and format auto-detection. |
-| **💬 Chat Tester**  | Send real chat requests through OmniRoute and see the full round-trip: your input, the translated request, the provider response, and the translated response back. Invaluable for validating combo routing.                    |
-| **🧪 Test Bench**   | Batch testing mode — define multiple test cases with different inputs and expected outputs, run them all at once, and compare results across providers and models.                                                              |
-| **📱 Live Monitor** | Real-time request monitoring — watch incoming requests as they flow through OmniRoute, see format translations happening live, and identify issues instantly.                                                                   |
-
-**Access:** Dashboard → Translator (sidebar)
+- Debug, test, and visualize API format translations
+- Send requests and see how OmniRoute translates between provider formats
+- Invaluable for troubleshooting integration issues
 
 ### 💾 Cloud Sync
 
@@ -859,99 +844,6 @@ The pre-loaded "OmniRoute Golden Set" contains 10 test cases covering:
 
 ---
 
-## 🔐 OAuth em Servidor Remoto (Remote OAuth Setup)
-
-<a name="oauth-em-servidor-remoto"></a>
-
-> **⚠️ IMPORTANTE para usuários com OmniRoute em VPS/Docker/servidor remoto**
-
-### Por que o OAuth do Antigravity / Gemini CLI falha em servidores remotos?
-
-Os provedores **Antigravity** e **Gemini CLI** usam **Google OAuth 2.0** para autenticação. O Google exige que a `redirect_uri` usada no fluxo OAuth seja **exatamente** uma das URIs pré-cadastradas no Google Cloud Console do aplicativo.
-
-As credenciais OAuth embutidas no OmniRoute estão cadastradas **apenas para `localhost`**. Quando você acessa o OmniRoute em um servidor remoto (ex: `https://omniroute.meuservidor.com`), o Google rejeita a autenticação com:
-
-```
-Error 400: redirect_uri_mismatch
-```
-
-### Solução: Configure suas próprias credenciais OAuth
-
-Você precisa criar um **OAuth 2.0 Client ID** no Google Cloud Console com a URI do seu servidor.
-
-#### Passo a passo
-
-**1. Acesse o Google Cloud Console**
-
-Abra: [https://console.cloud.google.com/apis/credentials](https://console.cloud.google.com/apis/credentials)
-
-**2. Crie um novo OAuth 2.0 Client ID**
-
-- Clique em **"+ Create Credentials"** → **"OAuth client ID"**
-- Tipo de aplicativo: **"Web application"**
-- Nome: escolha qualquer nome (ex: `OmniRoute Remote`)
-
-**3. Adicione as Authorized Redirect URIs**
-
-No campo **"Authorized redirect URIs"**, adicione:
-
-```
-https://seu-servidor.com/callback
-```
-
-> Substitua `seu-servidor.com` pelo domínio ou IP do seu servidor (inclua a porta se necessário, ex: `http://45.33.32.156:20128/callback`).
-
-**4. Salve e copie as credenciais**
-
-Após criar, o Google mostrará o **Client ID** e o **Client Secret**.
-
-**5. Configure as variáveis de ambiente**
-
-No seu `.env` (ou nas variáveis de ambiente do Docker):
-
-```bash
-# Para Antigravity:
-ANTIGRAVITY_OAUTH_CLIENT_ID=seu-client-id.apps.googleusercontent.com
-ANTIGRAVITY_OAUTH_CLIENT_SECRET=GOCSPX-seu-secret
-
-# Para Gemini CLI:
-GEMINI_OAUTH_CLIENT_ID=seu-client-id.apps.googleusercontent.com
-GEMINI_OAUTH_CLIENT_SECRET=GOCSPX-seu-secret
-GEMINI_CLI_OAUTH_CLIENT_SECRET=GOCSPX-seu-secret
-```
-
-**6. Reinicie o OmniRoute**
-
-```bash
-# Se usando npm:
-npm run dev
-
-# Se usando Docker:
-docker restart omniroute
-```
-
-**7. Tente conectar novamente**
-
-Dashboard → Providers → Antigravity (ou Gemini CLI) → OAuth
-
-Agora o Google redirecionará corretamente para `https://seu-servidor.com/callback` e a autenticação funcionará.
-
----
-
-### Workaround temporário (sem configurar credenciais próprias)
-
-Se não quiser criar credenciais próprias agora, ainda é possível usar o fluxo **manual de URL**:
-
-1. O OmniRoute abrirá a URL de autorização do Google
-2. Após você autorizar, o Google tentará redirecionar para `localhost` (que falha no servidor remoto)
-3. **Copie a URL completa** da barra de endereço do seu browser (mesmo que a página não carregue)
-4. Cole essa URL no campo que aparece no modal de conexão do OmniRoute
-5. Clique em **"Connect"**
-
-> Este workaround funciona porque o código de autorização na URL é válido independente do redirect ter carregado ou não.
-
----
-
 ## 🐛 Troubleshooting
 
 <details>
@@ -1000,7 +892,7 @@ Se não quiser criar credenciais próprias agora, ainda é possível usar o flux
 **Connection test shows "Invalid" for OpenAI-compatible providers**
 
 - Many providers don't expose a `/models` endpoint
-- OmniRoute v1.0.6+ includes fallback validation via chat completions
+- OmniRoute v0.9.0+ includes fallback validation via chat completions
 - Ensure base URL includes `/v1` suffix
 
 </details>
@@ -1010,7 +902,7 @@ Se não quiser criar credenciais próprias agora, ainda é possível usar o flux
 ## 🛠️ Tech Stack
 
 - **Runtime**: Node.js 20+
-- **Language**: TypeScript 5.9 — **100% TypeScript** across `src/` and `open-sse/` (v1.0.6)
+- **Language**: TypeScript 5.9 — **100% TypeScript** across `src/` and `open-sse/` (v0.9.0)
 - **Framework**: Next.js 16 + React 19 + Tailwind CSS 4
 - **Database**: LowDB (JSON) + SQLite (domain state + proxy logs)
 - **Streaming**: Server-Sent Events (SSE)
@@ -1026,72 +918,23 @@ Se não quiser criar credenciais próprias agora, ainda é possível usar o flux
 
 ## 📖 Documentation
 
-| Document                                     | Description                                    |
-| -------------------------------------------- | ---------------------------------------------- |
-| [User Guide](docs/USER_GUIDE.md)             | Providers, combos, CLI integration, deployment |
-| [API Reference](docs/API_REFERENCE.md)       | All endpoints with examples                    |
-| [Troubleshooting](docs/TROUBLESHOOTING.md)   | Common problems and solutions                  |
-| [Architecture](docs/ARCHITECTURE.md)         | System architecture and internals              |
-| [Contributing](CONTRIBUTING.md)              | Development setup and guidelines               |
-| [OpenAPI Spec](docs/openapi.yaml)            | OpenAPI 3.0 specification                      |
-| [Security Policy](SECURITY.md)               | Vulnerability reporting and security practices |
-| [VM Deployment](docs/VM_DEPLOYMENT_GUIDE.md) | Complete guide: VM + nginx + Cloudflare setup  |
-| [Features Gallery](docs/FEATURES.md)         | Visual dashboard tour with screenshots         |
-
-### 📸 Dashboard Preview
-
-<details>
-<summary><b>Click to see dashboard screenshots</b></summary>
-
-| Page           | Screenshot                                        |
-| -------------- | ------------------------------------------------- |
-| **Providers**  | ![Providers](docs/screenshots/01-providers.png)   |
-| **Combos**     | ![Combos](docs/screenshots/02-combos.png)         |
-| **Analytics**  | ![Analytics](docs/screenshots/03-analytics.png)   |
-| **Health**     | ![Health](docs/screenshots/04-health.png)         |
-| **Translator** | ![Translator](docs/screenshots/05-translator.png) |
-| **Settings**   | ![Settings](docs/screenshots/06-settings.png)     |
-| **CLI Tools**  | ![CLI Tools](docs/screenshots/07-cli-tools.png)   |
-| **Usage Logs** | ![Usage](docs/screenshots/08-usage.png)           |
-| **Endpoint**   | ![Endpoint](docs/screenshots/09-endpoint.png)     |
-
-</details>
-
----
-
-## 🗺️ Roadmap
-
-OmniRoute has **210+ features planned** across multiple development phases. Here are the key areas:
-
-| Category                      | Planned Features | Highlights                                                                             |
-| ----------------------------- | ---------------- | -------------------------------------------------------------------------------------- |
-| 🧠 **Routing & Intelligence** | 25+              | Lowest-latency routing, tag-based routing, quota preflight, P2C account selection      |
-| 🔒 **Security & Compliance**  | 20+              | SSRF hardening, credential cloaking, rate-limit per endpoint, management key scoping   |
-| 📊 **Observability**          | 15+              | OpenTelemetry integration, real-time quota monitoring, cost tracking per model         |
-| 🔄 **Provider Integrations**  | 20+              | Dynamic model registry, provider cooldowns, multi-account Codex, Copilot quota parsing |
-| ⚡ **Performance**            | 15+              | Dual cache layer, prompt cache, response cache, streaming keepalive, batch API         |
-| 🌐 **Ecosystem**              | 10+              | WebSocket API, config hot-reload, distributed config store, commercial mode            |
-
-### 🔜 Coming Soon
-
-- 🔗 **OpenCode Integration** — Native provider support for the OpenCode AI coding IDE
-- 🔗 **TRAE Integration** — Full support for the TRAE AI development framework
-- 📦 **Batch API** — Asynchronous batch processing for bulk requests
-- 🎯 **Tag-Based Routing** — Route requests based on custom tags and metadata
-- 💰 **Lowest-Cost Strategy** — Automatically select the cheapest available provider
-
-> 📝 Full feature specifications available in [`docs/new-features/`](docs/new-features/) (217 detailed specs)
+| Document                                   | Description                                    |
+| ------------------------------------------ | ---------------------------------------------- |
+| [User Guide](docs/USER_GUIDE.md)           | Providers, combos, CLI integration, deployment |
+| [API Reference](docs/API_REFERENCE.md)     | All endpoints with examples                    |
+| [Troubleshooting](docs/TROUBLESHOOTING.md) | Common problems and solutions                  |
+| [Architecture](docs/ARCHITECTURE.md)       | System architecture and internals              |
+| [Contributing](CONTRIBUTING.md)            | Development setup and guidelines               |
+| [OpenAPI Spec](docs/openapi.yaml)          | OpenAPI 3.0 specification                      |
+| [Security Policy](SECURITY.md)             | Vulnerability reporting and security practices |
 
 ---
 
 ## 📧 Support
 
-> 💬 **Join our community!** [WhatsApp Group](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t) — Get help, share tips, and stay updated.
-
 - **Website**: [omniroute.online](https://omniroute.online)
 - **GitHub**: [github.com/diegosouzapw/OmniRoute](https://github.com/diegosouzapw/OmniRoute)
 - **Issues**: [github.com/diegosouzapw/OmniRoute/issues](https://github.com/diegosouzapw/OmniRoute/issues)
-- **WhatsApp**: [Community Group](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 - **Original Project**: [9router by decolua](https://github.com/decolua/9router)
 
 ---
@@ -1114,7 +957,7 @@ See [CONTRIBUTING.md](CONTRIBUTING.md) for detailed guidelines.
 
 ```bash
 # Create a release — npm publish happens automatically
-gh release create v1.0.6 --title "v1.0.6" --generate-notes
+gh release create v0.9.0 --title "v0.9.0" --generate-notes
 ```
 
 ---

README.pt-BR.md

@@ -1,5 +1,5 @@
 <div align="center">
-  <img src="./docs/screenshots/MainOmniRoute.png" alt="OmniRoute Dashboard" width="800"/>
+  <img src="./images/omniroute.png" alt="OmniRoute Dashboard" width="800"/>
   
   # 🚀 OmniRoute — O Gateway de IA Gratuito
 
@@ -100,7 +100,6 @@ _Conecte qualquer IDE ou ferramenta CLI com IA através do OmniRoute — gateway
 [![Docker Hub](https://img.shields.io/docker/v/diegosouzapw/omniroute?label=Docker%20Hub&logo=docker&color=2496ED)](https://hub.docker.com/r/diegosouzapw/omniroute)
 [![License](https://img.shields.io/github/license/diegosouzapw/OmniRoute)](https://github.com/diegosouzapw/OmniRoute/blob/main/LICENSE)
 [![Website](https://img.shields.io/badge/Website-omniroute.online-blue?logo=google-chrome&logoColor=white)](https://omniroute.online)
-[![WhatsApp](https://img.shields.io/badge/WhatsApp-Community-25D366?logo=whatsapp&logoColor=white)](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 
 [🌐 Website](https://omniroute.online) • [🚀 Início Rápido](#-início-rápido) • [💡 Funcionalidades](#-funcionalidades-principais) • [📖 Docs](#-documentação) • [💰 Preços](#-preços-resumidos)
 
@@ -243,7 +242,7 @@ docker compose --profile cli up -d
 | Imagem                   | Tag      | Tamanho | Descrição             |
 | ------------------------ | -------- | ------- | --------------------- |
 | `diegosouzapw/omniroute` | `latest` | ~250MB  | Última versão estável |
-| `diegosouzapw/omniroute` | `1.0.6`  | ~250MB  | Versão atual          |
+| `diegosouzapw/omniroute` | `0.9.0`  | ~250MB  | Versão atual          |
 
 ---
 
@@ -373,7 +372,6 @@ Acesso via: WhatsApp, Telegram, Slack, Discord, iMessage, Signal...
 | 🔒 **Spoofing de Fingerprint TLS** | Bypass de detecção de bot via TLS com wreq-js                         |
 | 🌐 **Filtragem de IP**             | Allowlist/blocklist para controle de acesso à API                     |
 | 📊 **Rate Limits Editáveis**       | RPM, gap mínimo e concorrência máxima configuráveis                   |
-| 🛡 **Proteção de Endpoint API**    | Gateway de Auth + bloqueio de provedores para o endpoint `/models`    |
 
 ### 📊 Observabilidade e Analytics
 
@@ -391,14 +389,14 @@ Acesso via: WhatsApp, Telegram, Slack, Discord, iMessage, Signal...
 
 ### ☁️ Deploy e Sincronização
 
-| Funcionalidade                    | O que Faz                                                                         |
-| --------------------------------- | --------------------------------------------------------------------------------- |
-| 💾 **Cloud Sync**                 | Sincronize configurações entre dispositivos via Cloudflare Workers                |
-| 🌐 **Deploy em Qualquer Lugar**   | Localhost, VPS, Docker, Cloudflare Workers                                        |
-| 🔑 **Gestão de API Keys**         | Gere, rotacione e defina escopo de API keys por provedor                          |
-| 🧙 **Assistente de Configuração** | Setup guiado em 4 etapas para novos usuários                                      |
-| 🔧 **Dashboard CLI Tools**        | Configuração em um clique para Claude, Codex, Cline, OpenClaw, Kilo, Antigravity  |
-| 🔄 **Backups de DB**              | Backup, restauração, exportação e importação automática de todas as configurações |
+| Funcionalidade                    | O que Faz                                                                        |
+| --------------------------------- | -------------------------------------------------------------------------------- |
+| 💾 **Cloud Sync**                 | Sincronize configurações entre dispositivos via Cloudflare Workers               |
+| 🌐 **Deploy em Qualquer Lugar**   | Localhost, VPS, Docker, Cloudflare Workers                                       |
+| 🔑 **Gestão de API Keys**         | Gere, rotacione e defina escopo de API keys por provedor                         |
+| 🧙 **Assistente de Configuração** | Setup guiado em 4 etapas para novos usuários                                     |
+| 🔧 **Dashboard CLI Tools**        | Configuração em um clique para Claude, Codex, Cline, OpenClaw, Kilo, Antigravity |
+| 🔄 **Backups de DB**              | Backup e restauração automáticos de todas as configurações                       |
 
 <details>
 <summary><b>📖 Detalhes das Funcionalidades</b></summary>
@@ -461,16 +459,9 @@ Tradução transparente entre formatos:
 
 ### 🔧 Playground do Tradutor
 
-O OmniRoute inclui um poderoso Playground de Tradução integrado com **4 modos** para debug, teste e monitoramento de traduções de API:
-
-| Modo                | Descrição                                                                                                                                                                                                                             |
-| ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| **💻 Playground**   | Tradução direta entre formatos — cole qualquer corpo de requisição e veja instantaneamente como o OmniRoute traduz entre formatos (OpenAI ↔ Claude ↔ Gemini ↔ Responses API). Inclui templates de exemplo e auto-detecção de formato. |
-| **💬 Chat Tester**  | Envie requisições reais pelo OmniRoute e veja a viagem completa: sua entrada, a requisição traduzida, a resposta do provedor, e a resposta traduzida de volta. Inestimável para validar roteamento de combos.                         |
-| **🧪 Test Bench**   | Modo de teste em lote — defina múltiplos casos de teste com diferentes entradas e saídas esperadas, execute todos de uma vez, e compare resultados entre provedores e modelos.                                                        |
-| **📱 Live Monitor** | Monitoramento de requisições em tempo real — acompanhe requisições entrando conforme fluem pelo OmniRoute, veja traduções de formato acontecendo ao vivo, e identifique problemas instantaneamente.                                   |
-
-**Acesso:** Dashboard → Translator (barra lateral)
+- Debug, teste e visualize traduções de formato de API
+- Envie requisições e veja como o OmniRoute traduz entre formatos de provedores
+- Inestimável para troubleshooting de problemas de integração
 
 ### 💾 Cloud Sync
 
@@ -901,7 +892,7 @@ O "OmniRoute Golden Set" pré-carregado contém 10 casos de teste cobrindo:
 **Teste de conexão mostra "Invalid" para provedores compatíveis com OpenAI**
 
 - Muitos provedores não expõem endpoint `/models`
-- OmniRoute v1.0.6+ inclui validação via chat completions como fallback
+- OmniRoute v0.9.0+ inclui validação via chat completions como fallback
 - Certifique-se de que a base URL inclui sufixo `/v1`
 
 </details>
@@ -911,7 +902,7 @@ O "OmniRoute Golden Set" pré-carregado contém 10 casos de teste cobrindo:
 ## 🛠️ Stack Tecnológico
 
 - **Runtime**: Node.js 20+
-- **Linguagem**: TypeScript 5.9 — **100% TypeScript** em `src/` e `open-sse/` (v1.0.6)
+- **Linguagem**: TypeScript 5.9 — **100% TypeScript** em `src/` e `open-sse/` (v0.9.0)
 - **Framework**: Next.js 16 + React 19 + Tailwind CSS 4
 - **Banco de Dados**: LowDB (JSON) + SQLite (estado do domínio + logs de proxy)
 - **Streaming**: Server-Sent Events (SSE)
@@ -936,63 +927,14 @@ O "OmniRoute Golden Set" pré-carregado contém 10 casos de teste cobrindo:
 | [Contribuindo](CONTRIBUTING.md)                 | Setup de desenvolvimento e diretrizes             |
 | [Spec OpenAPI](docs/openapi.yaml)               | Especificação OpenAPI 3.0                         |
 | [Política de Segurança](SECURITY.md)            | Reportar vulnerabilidades e práticas de segurança |
-| [Deploy em VM](docs/VM_DEPLOYMENT_GUIDE.md)     | Guia completo: VM + nginx + Cloudflare            |
-| [Galeria de Features](docs/FEATURES.md)         | Tour visual do dashboard com screenshots          |
-
-### 📸 Preview do Dashboard
-
-<details>
-<summary><b>Clique para ver screenshots do dashboard</b></summary>
-
-| Página            | Screenshot                                        |
-| ----------------- | ------------------------------------------------- |
-| **Provedores**    | ![Providers](docs/screenshots/01-providers.png)   |
-| **Combos**        | ![Combos](docs/screenshots/02-combos.png)         |
-| **Analytics**     | ![Analytics](docs/screenshots/03-analytics.png)   |
-| **Saúde**         | ![Health](docs/screenshots/04-health.png)         |
-| **Tradutor**      | ![Translator](docs/screenshots/05-translator.png) |
-| **Configurações** | ![Settings](docs/screenshots/06-settings.png)     |
-| **CLI Tools**     | ![CLI Tools](docs/screenshots/07-cli-tools.png)   |
-| **Logs de Uso**   | ![Usage](docs/screenshots/08-usage.png)           |
-| **Endpoint**      | ![Endpoint](docs/screenshots/09-endpoint.png)     |
-
-</details>
-
----
-
-## 🗺️ Roadmap
-
-O OmniRoute tem **210+ funcionalidades planejadas** em múltiplas fases de desenvolvimento. Áreas principais:
-
-| Categoria                        | Features Planejadas | Destaques                                                                   |
-| -------------------------------- | ------------------- | --------------------------------------------------------------------------- |
-| 🧠 **Roteamento e Inteligência** | 25+                 | Roteamento por menor latência, roteamento por tags, pré-verificação de cota |
-| 🔒 **Segurança e Compliance**    | 20+                 | Hardening SSRF, cloaking de credenciais, rate-limit por endpoint            |
-| 📊 **Observabilidade**           | 15+                 | Integração OpenTelemetry, monitoramento de cota em tempo real               |
-| 🔄 **Integrações**               | 20+                 | Registro dinâmico de modelos, cooldowns de provedor                         |
-| ⚡ **Performance**               | 15+                 | Cache dupla camada, prompt cache, response cache, batch API                 |
-| 🌐 **Ecossistema**               | 10+                 | WebSocket API, config hot-reload, modo comercial                            |
-
-### 🔜 Em Breve
-
-- 🔗 **Integração com OpenCode** — Suporte nativo como provider para a IDE OpenCode
-- 🔗 **Integração com TRAE** — Suporte completo ao framework de desenvolvimento TRAE
-- 📦 **Batch API** — Processamento assíncrono em lote para requisições em massa
-- 🎯 **Roteamento por Tags** — Roteamento de requisições baseado em tags personalizadas
-- 💰 **Estratégia de Menor Custo** — Seleção automática do provedor mais barato
-
-> 📝 Especificações completas de features disponíveis em [`docs/new-features/`](docs/new-features/) (217 specs detalhadas)
 
 ---
 
 ## 📧 Suporte
 
-> 💬 **Participe da comunidade!** [Grupo WhatsApp](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t) — Tire dúvidas, compartilhe dicas e fique atualizado.
-
 - **Website**: [omniroute.online](https://omniroute.online)
 - **GitHub**: [github.com/diegosouzapw/OmniRoute](https://github.com/diegosouzapw/OmniRoute)
 - **Issues**: [github.com/diegosouzapw/OmniRoute/issues](https://github.com/diegosouzapw/OmniRoute/issues)
-- **WhatsApp**: [Grupo da Comunidade](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 - **Projeto Original**: [9router por decolua](https://github.com/decolua/9router)
 
 ---
@@ -1015,7 +957,7 @@ Veja [CONTRIBUTING.md](CONTRIBUTING.md) para diretrizes detalhadas.
 
 ```bash
 # Crie um release — publicação no npm acontece automaticamente
-gh release create v1.0.6 --title "v1.0.6" --generate-notes
+gh release create v0.9.0 --title "v0.9.0" --generate-notes
 ```
 
 ---

README.ru.md

@@ -1,5 +1,5 @@
 <div align="center">
-  <img src="./docs/screenshots/MainOmniRoute.png" alt="OmniRoute Dashboard" width="800"/>
+  <img src="./images/omniroute.png" alt="OmniRoute Dashboard" width="800"/>
   
   # 🚀 OmniRoute — Бесплатный AI Gateway
 
@@ -100,7 +100,6 @@ _Подключайте любую IDE или CLI-инструмент с AI ч
 [![Docker Hub](https://img.shields.io/docker/v/diegosouzapw/omniroute?label=Docker%20Hub&logo=docker&color=2496ED)](https://hub.docker.com/r/diegosouzapw/omniroute)
 [![License](https://img.shields.io/github/license/diegosouzapw/OmniRoute)](https://github.com/diegosouzapw/OmniRoute/blob/main/LICENSE)
 [![Website](https://img.shields.io/badge/Website-omniroute.online-blue?logo=google-chrome&logoColor=white)](https://omniroute.online)
-[![WhatsApp](https://img.shields.io/badge/WhatsApp-Community-25D366?logo=whatsapp&logoColor=white)](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 
 [🌐 Сайт](https://omniroute.online) • [🚀 Быстрый старт](#-быстрый-старт) • [💡 Функции](#-основные-функции) • [📖 Документация](#-документация) • [💰 Цены](#-обзор-цен)
 
@@ -243,7 +242,7 @@ docker compose --profile cli up -d
 | Образ                    | Тег      | Размер | Описание                   |
 | ------------------------ | -------- | ------ | -------------------------- |
 | `diegosouzapw/omniroute` | `latest` | ~250MB | Последний стабильный релиз |
-| `diegosouzapw/omniroute` | `1.0.6`  | ~250MB | Текущая версия             |
+| `diegosouzapw/omniroute` | `0.9.0`  | ~250MB | Текущая версия             |
 
 ---
 
@@ -893,7 +892,7 @@ OmniRoute включает встроенный фреймворк оценки
 **Тест подключения показывает «Invalid» для OpenAI-совместимых провайдеров**
 
 - Многие провайдеры не предоставляют endpoint `/models`
-- OmniRoute v1.0.6+ включает fallback-валидацию через chat completions
+- OmniRoute v0.9.0+ включает fallback-валидацию через chat completions
 - Убедитесь что base URL содержит суффикс `/v1`
 
 </details>
@@ -903,7 +902,7 @@ OmniRoute включает встроенный фреймворк оценки
 ## 🛠️ Технологический стек
 
 - **Runtime**: Node.js 20+
-- **Язык**: TypeScript 5.9 — **100% TypeScript** в `src/` и `open-sse/` (v1.0.6)
+- **Язык**: TypeScript 5.9 — **100% TypeScript** в `src/` и `open-sse/` (v0.9.0)
 - **Framework**: Next.js 16 + React 19 + Tailwind CSS 4
 - **База данных**: LowDB (JSON) + SQLite (состояние домена + proxy-логи)
 - **Стриминг**: Server-Sent Events (SSE)
@@ -933,12 +932,9 @@ OmniRoute включает встроенный фреймворк оценки
 
 ## 📧 Поддержка
 
-> 💬 **Присоединяйтесь к сообществу!** [Группа WhatsApp](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t) — Получайте помощь, делитесь советами и оставайтесь в курсе.
-
 - **Сайт**: [omniroute.online](https://omniroute.online)
 - **GitHub**: [github.com/diegosouzapw/OmniRoute](https://github.com/diegosouzapw/OmniRoute)
 - **Issues**: [github.com/diegosouzapw/OmniRoute/issues](https://github.com/diegosouzapw/OmniRoute/issues)
-- **WhatsApp**: [Группа сообщества](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 - **Оригинальный проект**: [9router от decolua](https://github.com/decolua/9router)
 
 ---
@@ -961,7 +957,7 @@ OmniRoute включает встроенный фреймворк оценки
 
 ```bash
 # Создайте релиз — публикация в npm происходит автоматически
-gh release create v1.0.6 --title "v1.0.6" --generate-notes
+gh release create v0.9.0 --title "v0.9.0" --generate-notes
 ```
 
 ---

README.zh-CN.md

@@ -1,5 +1,5 @@
 <div align="center">
-  <img src="./docs/screenshots/MainOmniRoute.png" alt="OmniRoute Dashboard" width="800"/>
+  <img src="./images/omniroute.png" alt="OmniRoute Dashboard" width="800"/>
   
   # 🚀 OmniRoute — 免费 AI 网关
 
@@ -100,7 +100,6 @@ _通过 OmniRoute 连接任何 AI 驱动的 IDE 或 CLI 工具 — 免费 API
 [![Docker Hub](https://img.shields.io/docker/v/diegosouzapw/omniroute?label=Docker%20Hub&logo=docker&color=2496ED)](https://hub.docker.com/r/diegosouzapw/omniroute)
 [![License](https://img.shields.io/github/license/diegosouzapw/OmniRoute)](https://github.com/diegosouzapw/OmniRoute/blob/main/LICENSE)
 [![Website](https://img.shields.io/badge/Website-omniroute.online-blue?logo=google-chrome&logoColor=white)](https://omniroute.online)
-[![WhatsApp](https://img.shields.io/badge/WhatsApp-Community-25D366?logo=whatsapp&logoColor=white)](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 
 [🌐 网站](https://omniroute.online) • [🚀 快速开始](#-快速开始) • [💡 功能特性](#-核心功能) • [📖 文档](#-文档) • [💰 定价](#-定价概览)
 
@@ -243,7 +242,7 @@ docker compose --profile cli up -d
 | 镜像                     | 标签     | 大小   | 描述       |
 | ------------------------ | -------- | ------ | ---------- |
 | `diegosouzapw/omniroute` | `latest` | ~250MB | 最新稳定版 |
-| `diegosouzapw/omniroute` | `1.0.6`  | ~250MB | 当前版本   |
+| `diegosouzapw/omniroute` | `0.9.0`  | ~250MB | 当前版本   |
 
 ---
 
@@ -893,7 +892,7 @@ OmniRoute 包含内置评估框架，用于针对黄金集测试 LLM 响应质
 **兼容 OpenAI 的提供商连接测试显示 "Invalid"**
 
 - 许多提供商不暴露 `/models` 端点
-- OmniRoute v1.0.6+ 包含通过 chat completions 的回退验证
+- OmniRoute v0.9.0+ 包含通过 chat completions 的回退验证
 - 确保 base URL 包含 `/v1` 后缀
 
 </details>
@@ -903,7 +902,7 @@ OmniRoute 包含内置评估框架，用于针对黄金集测试 LLM 响应质
 ## 🛠️ 技术栈
 
 - **运行时**: Node.js 20+
-- **语言**: TypeScript 5.9 — `src/` 和 `open-sse/` 中 **100% TypeScript**（v1.0.6）
+- **语言**: TypeScript 5.9 — `src/` 和 `open-sse/` 中 **100% TypeScript**（v0.9.0）
 - **框架**: Next.js 16 + React 19 + Tailwind CSS 4
 - **数据库**: LowDB (JSON) + SQLite（领域状态 + 代理日志）
 - **流式传输**: Server-Sent Events (SSE)
@@ -933,12 +932,9 @@ OmniRoute 包含内置评估框架，用于针对黄金集测试 LLM 响应质
 
 ## 📧 支持
 
-> 💬 **加入我们的社区！** [WhatsApp 群组](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t) — 获取帮助、分享技巧、了解最新动态。
-
 - **网站**: [omniroute.online](https://omniroute.online)
 - **GitHub**: [github.com/diegosouzapw/OmniRoute](https://github.com/diegosouzapw/OmniRoute)
 - **Issues**: [github.com/diegosouzapw/OmniRoute/issues](https://github.com/diegosouzapw/OmniRoute/issues)
-- **WhatsApp**: [社区群组](https://chat.whatsapp.com/JI7cDQ1GyaiDHhVBpLxf8b?mode=gi_t)
 - **原始项目**: [decolua 的 9router](https://github.com/decolua/9router)
 
 ---
@@ -961,7 +957,7 @@ OmniRoute 包含内置评估框架，用于针对黄金集测试 LLM 响应质
 
 ```bash
 # 创建发布 — npm 发布自动完成
-gh release create v1.0.6 --title "v1.0.6" --generate-notes
+gh release create v0.9.0 --title "v0.9.0" --generate-notes
 ```
 
 ---

SECURITY.md

@@ -20,9 +20,9 @@ If you discover a security vulnerability in OmniRoute, please report it responsi
 
 | Version | Support Status |
 | ------- | -------------- |
-| 1.0.x   | ✅ Active      |
-| 0.8.x   | ✅ Security    |
-| < 0.8.0 | ❌ Unsupported |
+| 0.8.x   | ✅ Active      |
+| 0.7.x   | ✅ Security    |
+| < 0.7.0 | ❌ Unsupported |
 
 ---
 

docker-compose.yml

@@ -18,8 +18,6 @@
 x-common: &common
   restart: unless-stopped
   env_file: .env
-  environment:
-    - DATA_DIR=/app/data # Must match the volume mount below
   volumes:
     - omniroute-data:/app/data
   healthcheck:

docs/API_REFERENCE.md

@@ -227,17 +227,6 @@ Response example:
 | `/api/monitoring/health` | GET        | Health check            |
 | `/api/cache`             | GET/DELETE | Cache stats / clear     |
 
-### Backup & Export/Import
-
-| Endpoint                    | Method | Description                             |
-| --------------------------- | ------ | --------------------------------------- |
-| `/api/db-backups`           | GET    | List available backups                  |
-| `/api/db-backups`           | PUT    | Create a manual backup                  |
-| `/api/db-backups`           | POST   | Restore from a specific backup          |
-| `/api/db-backups/export`    | GET    | Download database as .sqlite file       |
-| `/api/db-backups/import`    | POST   | Upload .sqlite file to replace database |
-| `/api/db-backups/exportAll` | GET    | Download full backup as .tar.gz archive |
-
 ### Cloud Sync
 
 | Endpoint               | Method  | Description           |

docs/ARCHITECTURE.md

@@ -1,6 +1,6 @@
 # OmniRoute Architecture
 
-_Last updated: 2026-02-18_
+_Last updated: 2026-02-17_
 
 ## Executive Summary
 
@@ -17,9 +17,6 @@ Core capabilities:
 - Embedding generation via `/v1/embeddings` (6 providers, 9 models)
 - Image generation via `/v1/images/generations` (4 providers, 9 models)
 - Think tag parsing (`<think>...</think>`) for reasoning models
-- Response sanitization for strict OpenAI SDK compatibility
-- Role normalization (developer→system, system→user) for cross-provider compatibility
-- Structured output conversion (json_schema → Gemini responseSchema)
 - Local persistence for providers, keys, aliases, combos, settings, pricing
 - Usage/cost tracking and request logging
 - Optional cloud sync for multi-device/state sync
@@ -183,8 +180,6 @@ Main flow modules:
 - Embedding provider registry: `open-sse/config/embeddingRegistry.ts`
 - Image generation handler: `open-sse/handlers/imageGeneration.ts`
 - Image provider registry: `open-sse/config/imageRegistry.ts`
-- Response sanitization: `open-sse/handlers/responseSanitizer.ts`
-- Role normalization: `open-sse/services/roleNormalizer.ts`
 
 Services (business logic):
 
@@ -652,13 +647,6 @@ Source Format → OpenAI (hub) → Target Format
 
 Translations are selected dynamically based on source payload shape and provider target format.
 
-Additional processing layers in the translation pipeline:
-
-- **Response sanitization** — Strips non-standard fields from OpenAI-format responses (both streaming and non-streaming) to ensure strict SDK compliance
-- **Role normalization** — Converts `developer` → `system` for non-OpenAI targets; merges `system` → `user` for models that reject the system role (GLM, ERNIE)
-- **Think tag extraction** — Parses `<think>...</think>` blocks from content into `reasoning_content` field
-- **Structured output** — Converts OpenAI `response_format.json_schema` to Gemini's `responseMimeType` + `responseSchema`
-
 ## Supported API Endpoints
 
 | Endpoint                                           | Format             | Handler                                              |
@@ -771,8 +759,8 @@ Environment variables actively used by code:
 
 ## Operational Verification Checklist
 
-- Build from source: `npm run build`
-- Build Docker image: `docker build -t omniroute .`
+- Build from source: `cd /root/dev/omniroute && npm run build`
+- Build Docker image: `cd /root/dev/omniroute && docker build -t omniroute .`
 - Start service and verify:
 - `GET /api/settings`
 - `GET /api/v1/models`

docs/FEATURES.md

@@ -1,75 +0,0 @@
-# OmniRoute — Dashboard Features Gallery
-
-Visual guide to every section of the OmniRoute dashboard.
-
----
-
-## 🔌 Providers
-
-Manage AI provider connections: OAuth providers (Claude Code, Codex, Gemini CLI), API key providers (Groq, DeepSeek, OpenRouter), and free providers (iFlow, Qwen, Kiro).
-
-![Providers Dashboard](screenshots/01-providers.png)
-
----
-
-## 🎨 Combos
-
-Create model routing combos with 6 strategies: fill-first, round-robin, power-of-two-choices, random, least-used, and cost-optimized. Each combo chains multiple models with automatic fallback.
-
-![Combos Dashboard](screenshots/02-combos.png)
-
----
-
-## 📊 Analytics
-
-Comprehensive usage analytics with token consumption, cost estimates, activity heatmaps, weekly distribution charts, and per-provider breakdowns.
-
-![Analytics Dashboard](screenshots/03-analytics.png)
-
----
-
-## 🏥 System Health
-
-Real-time monitoring: uptime, memory, version, latency percentiles (p50/p95/p99), cache statistics, and provider circuit breaker states.
-
-![Health Dashboard](screenshots/04-health.png)
-
----
-
-## 🔧 Translator Playground
-
-Four modes for debugging API translations: **Playground** (format converter), **Chat Tester** (live requests), **Test Bench** (batch tests), and **Live Monitor** (real-time stream).
-
-![Translator Playground](screenshots/05-translator.png)
-
----
-
-## ⚙️ Settings
-
-General settings, system storage, backup management (export/import database), appearance (dark/light mode), security (includes API endpoint protection and custom provider blocking), routing, resilience, and advanced configuration.
-
-![Settings Dashboard](screenshots/06-settings.png)
-
----
-
-## 🔧 CLI Tools
-
-One-click configuration for AI coding tools: Claude Code, Codex CLI, Gemini CLI, OpenClaw, Kilo Code, and Antigravity.
-
-![CLI Tools Dashboard](screenshots/07-cli-tools.png)
-
----
-
-## 📝 Request Logs
-
-Real-time request logging with filtering by provider, model, account, and API key. Shows status codes, token usage, latency, and response details.
-
-![Usage Logs](screenshots/08-usage.png)
-
----
-
-## 🌐 API Endpoint
-
-Your unified API endpoint with capability breakdown: Chat Completions, Embeddings, Image Generation, Reranking, Audio Transcription, and registered API keys.
-
-![Endpoint Dashboard](screenshots/09-endpoint.png)

docs/TROUBLESHOOTING.md

@@ -177,10 +177,6 @@ Use **Dashboard → Translator** to debug format translation issues:
 - **Thinking tags not appearing** — Check if the target provider supports thinking and the thinking budget setting
 - **Tool calls dropping** — Some format translations may strip unsupported fields; verify in Playground mode
 - **System prompt missing** — Claude and Gemini handle system prompts differently; check translation output
-- **SDK returns raw string instead of object** — Fixed in v1.1.0: response sanitizer now strips non-standard fields (`x_groq`, `usage_breakdown`, etc.) that cause OpenAI SDK Pydantic validation failures
-- **GLM/ERNIE rejects `system` role** — Fixed in v1.1.0: role normalizer automatically merges system messages into user messages for incompatible models
-- **`developer` role not recognized** — Fixed in v1.1.0: automatically converted to `system` for non-OpenAI providers
-- **`json_schema` not working with Gemini** — Fixed in v1.1.0: `response_format` is now converted to Gemini's `responseMimeType` + `responseSchema`
 
 ---
 

docs/USER_GUIDE.md

@@ -572,45 +572,13 @@ OmniRoute implements provider-level resilience with four components:
 
 ---
 
-### Database Export / Import
-
-Manage database backups in **Dashboard → Settings → System & Storage**.
-
-| Action                   | Description                                                                                                                    |
-| ------------------------ | ------------------------------------------------------------------------------------------------------------------------------ |
-| **Export Database**      | Downloads the current SQLite database as a `.sqlite` file                                                                      |
-| **Export All (.tar.gz)** | Downloads a full backup archive including: database, settings, combos, provider connections (no credentials), API key metadata |
-| **Import Database**      | Upload a `.sqlite` file to replace the current database. A pre-import backup is automatically created                          |
-
-```bash
-# API: Export database
-curl -o backup.sqlite http://localhost:20128/api/db-backups/export
-
-# API: Export all (full archive)
-curl -o backup.tar.gz http://localhost:20128/api/db-backups/exportAll
-
-# API: Import database
-curl -X POST http://localhost:20128/api/db-backups/import \
-  -F "file=@backup.sqlite"
-```
-
-**Import Validation:** The imported file is validated for integrity (SQLite pragma check), required tables (`provider_connections`, `provider_nodes`, `combos`, `api_keys`), and size (max 100MB).
-
-**Use Cases:**
-
-- Migrate OmniRoute between machines
-- Create external backups for disaster recovery
-- Share configurations between team members (export all → share archive)
-
----
-
 ### Settings Dashboard
 
 The settings page is organized into 5 tabs for easy navigation:
 
 | Tab            | Contents                                                                                       |
 | -------------- | ---------------------------------------------------------------------------------------------- |
-| **Security**   | Login/Password settings, IP Access Control, API auth for `/models`, and Provider Blocking      |
+| **Security**   | Login/Password settings and IP Access Control (allowlist/blocklist)                            |
 | **Routing**    | Global routing strategy (6 options), wildcard model aliases, fallback chains, combo defaults   |
 | **Resilience** | Provider profiles, editable rate limits, circuit breaker status, policies & locked identifiers |
 | **AI**         | Thinking budget configuration, global system prompt injection, prompt cache stats              |

docs/VM_DEPLOYMENT_GUIDE.md

@@ -1,399 +0,0 @@
-# OmniRoute — Guia de Deploy em VM com Cloudflare
-
-Guia completo para instalar e configurar o OmniRoute em uma VM (VPS) com domínio gerenciado via Cloudflare.
-
----
-
-## Pré-Requisitos
-
-| Item        | Mínimo                   | Recomendado      |
-| ----------- | ------------------------ | ---------------- |
-| **CPU**     | 1 vCPU                   | 2 vCPU           |
-| **RAM**     | 1 GB                     | 2 GB             |
-| **Disco**   | 10 GB SSD                | 25 GB SSD        |
-| **SO**      | Ubuntu 22.04 LTS         | Ubuntu 24.04 LTS |
-| **Domínio** | Registrado no Cloudflare | —                |
-| **Docker**  | Docker Engine 24+        | Docker 27+       |
-
-**Providers testados**: Akamai (Linode), DigitalOcean, Vultr, Hetzner, AWS Lightsail.
-
----
-
-## 1. Configurar a VM
-
-### 1.1 Criar a instância
-
-No seu provider de VPS preferido:
-
-- Escolha Ubuntu 24.04 LTS
-- Selecione o plano mínimo (1 vCPU / 1 GB RAM)
-- Defina uma senha forte para root ou configure SSH key
-- Anote o **IP público** (ex: `203.0.113.10`)
-
-### 1.2 Conectar via SSH
-
-```bash
-ssh root@203.0.113.10
-```
-
-### 1.3 Atualizar o sistema
-
-```bash
-apt update && apt upgrade -y
-```
-
-### 1.4 Instalar Docker
-
-```bash
-# Instalar dependências
-apt install -y ca-certificates curl gnupg
-
-# Adicionar repositório oficial do Docker
-install -m 0755 -d /etc/apt/keyrings
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
-chmod a+r /etc/apt/keyrings/docker.gpg
-echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null
-apt update
-apt install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
-```
-
-### 1.5 Instalar nginx
-
-```bash
-apt install -y nginx
-```
-
-### 1.6 Configurar Firewall (UFW)
-
-```bash
-ufw default deny incoming
-ufw default allow outgoing
-ufw allow 22/tcp    # SSH
-ufw allow 80/tcp    # HTTP (redirect)
-ufw allow 443/tcp   # HTTPS
-ufw enable
-```
-
-> **Dica**: Para segurança máxima, restrinja as portas 80 e 443 apenas para IPs da Cloudflare. Veja a seção [Segurança Avançada](#segurança-avançada).
-
----
-
-## 2. Instalar o OmniRoute
-
-### 2.1 Criar diretório de configuração
-
-```bash
-mkdir -p /opt/omniroute
-```
-
-### 2.2 Criar arquivo de variáveis de ambiente
-
-```bash
-cat > /opt/omniroute/.env << 'EOF'
-# === Segurança ===
-JWT_SECRET=ALTERE-PARA-CHAVE-SECRETA-UNICA-64-CHARS
-INITIAL_PASSWORD=SuaSenhaSegura123!
-API_KEY_SECRET=ALTERE-PARA-OUTRA-CHAVE-SECRETA
-STORAGE_ENCRYPTION_KEY=ALTERE-PARA-TERCEIRA-CHAVE-SECRETA
-STORAGE_ENCRYPTION_KEY_VERSION=v1
-MACHINE_ID_SALT=ALTERE-PARA-SALT-UNICO
-
-# === App ===
-PORT=20128
-NODE_ENV=production
-HOSTNAME=0.0.0.0
-DATA_DIR=/app/data
-STORAGE_DRIVER=sqlite
-ENABLE_REQUEST_LOGS=true
-AUTH_COOKIE_SECURE=false
-REQUIRE_API_KEY=false
-
-# === Domain (altere para seu domínio) ===
-BASE_URL=https://llms.seudominio.com
-NEXT_PUBLIC_BASE_URL=https://llms.seudominio.com
-
-# === Cloud Sync (opcional) ===
-# CLOUD_URL=https://cloud.omniroute.online
-# NEXT_PUBLIC_CLOUD_URL=https://cloud.omniroute.online
-EOF
-```
-
-> ⚠️ **IMPORTANTE**: Gere chaves secretas únicas! Use `openssl rand -hex 32` para cada chave.
-
-### 2.3 Iniciar o container
-
-```bash
-docker pull diegosouzapw/omniroute:latest
-
-docker run -d \
-  --name omniroute \
-  --restart unless-stopped \
-  --env-file /opt/omniroute/.env \
-  -p 20128:20128 \
-  -v omniroute-data:/app/data \
-  diegosouzapw/omniroute:latest
-```
-
-### 2.4 Verificar se está rodando
-
-```bash
-docker ps | grep omniroute
-docker logs omniroute --tail 20
-```
-
-Deve exibir: `[DB] SQLite database ready` e `listening on port 20128`.
-
----
-
-## 3. Configurar nginx (Reverse Proxy)
-
-### 3.1 Gerar certificado SSL (Cloudflare Origin)
-
-No painel da Cloudflare:
-
-1. Vá em **SSL/TLS → Origin Server**
-2. Clique **Create Certificate**
-3. Deixe os padrões (15 anos, \*.seudominio.com)
-4. Copie o **Origin Certificate** e a **Private Key**
-
-```bash
-mkdir -p /etc/nginx/ssl
-
-# Colar o certificado
-nano /etc/nginx/ssl/origin.crt
-
-# Colar a chave privada
-nano /etc/nginx/ssl/origin.key
-
-chmod 600 /etc/nginx/ssl/origin.key
-```
-
-### 3.2 Configuração do nginx
-
-```bash
-cat > /etc/nginx/sites-available/omniroute << 'NGINX'
-# Default server — bloqueia acesso direto por IP
-server {
-    listen 80 default_server;
-    listen [::]:80 default_server;
-    listen 443 ssl default_server;
-    listen [::]:443 ssl default_server;
-    ssl_certificate     /etc/nginx/ssl/origin.crt;
-    ssl_certificate_key /etc/nginx/ssl/origin.key;
-    server_name _;
-    return 444;
-}
-
-# OmniRoute — HTTPS
-server {
-    listen 443 ssl;
-    listen [::]:443 ssl;
-    server_name llms.seudominio.com;  # Altere para seu domínio
-
-    ssl_certificate     /etc/nginx/ssl/origin.crt;
-    ssl_certificate_key /etc/nginx/ssl/origin.key;
-    ssl_protocols TLSv1.2 TLSv1.3;
-
-    client_max_body_size 100M;
-
-    location / {
-        proxy_pass http://127.0.0.1:20128;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-
-        # WebSocket support
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection "upgrade";
-
-        # SSE (Server-Sent Events) — streaming AI responses
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_read_timeout 300s;
-        proxy_send_timeout 300s;
-    }
-}
-
-# HTTP → HTTPS redirect
-server {
-    listen 80;
-    listen [::]:80;
-    server_name llms.seudominio.com;
-    return 301 https://$server_name$request_uri;
-}
-NGINX
-```
-
-### 3.3 Ativar e testar
-
-```bash
-# Remover config padrão
-rm -f /etc/nginx/sites-enabled/default
-
-# Ativar OmniRoute
-ln -sf /etc/nginx/sites-available/omniroute /etc/nginx/sites-enabled/omniroute
-
-# Testar e recarregar
-nginx -t && systemctl reload nginx
-```
-
----
-
-## 4. Configurar Cloudflare DNS
-
-### 4.1 Adicionar registro DNS
-
-No painel da Cloudflare → DNS:
-
-| Type | Name   | Content                   | Proxy      |
-| ---- | ------ | ------------------------- | ---------- |
-| A    | `llms` | `203.0.113.10` (IP da VM) | ✅ Proxied |
-
-### 4.2 Configurar SSL
-
-Em **SSL/TLS → Overview**:
-
-- Modo: **Full (Strict)**
-
-Em **SSL/TLS → Edge Certificates**:
-
-- Always Use HTTPS: ✅ On
-- Minimum TLS Version: TLS 1.2
-- Automatic HTTPS Rewrites: ✅ On
-
-### 4.3 Testar
-
-```bash
-curl -sI https://llms.seudominio.com/health
-# Deve retornar HTTP/2 200
-```
-
----
-
-## 5. Operações e Manutenção
-
-### Atualizar para nova versão
-
-```bash
-docker pull diegosouzapw/omniroute:latest
-docker stop omniroute && docker rm omniroute
-docker run -d --name omniroute --restart unless-stopped \
-  --env-file /opt/omniroute/.env \
-  -p 20128:20128 \
-  -v omniroute-data:/app/data \
-  diegosouzapw/omniroute:latest
-```
-
-### Ver logs
-
-```bash
-docker logs -f omniroute          # Stream em tempo real
-docker logs omniroute --tail 50   # Últimas 50 linhas
-```
-
-### Backup manual do banco
-
-```bash
-# Copiar dados do volume para o host
-docker cp omniroute:/app/data ./backup-$(date +%F)
-
-# Ou comprimir todo o volume
-docker run --rm -v omniroute-data:/data -v $(pwd):/backup \
-  alpine tar czf /backup/omniroute-data-$(date +%F).tar.gz /data
-```
-
-### Restaurar de backup
-
-```bash
-docker stop omniroute
-docker run --rm -v omniroute-data:/data -v $(pwd):/backup \
-  alpine sh -c "rm -rf /data/* && tar xzf /backup/omniroute-data-YYYY-MM-DD.tar.gz -C /"
-docker start omniroute
-```
-
----
-
-## 6. Segurança Avançada
-
-### Restringir nginx para Cloudflare IPs
-
-```bash
-cat > /etc/nginx/cloudflare-ips.conf << 'CF'
-# Cloudflare IPv4 ranges — atualizar periodicamente
-# https://www.cloudflare.com/ips-v4/
-set_real_ip_from 173.245.48.0/20;
-set_real_ip_from 103.21.244.0/22;
-set_real_ip_from 103.22.200.0/22;
-set_real_ip_from 103.31.4.0/22;
-set_real_ip_from 141.101.64.0/18;
-set_real_ip_from 108.162.192.0/18;
-set_real_ip_from 190.93.240.0/20;
-set_real_ip_from 188.114.96.0/20;
-set_real_ip_from 197.234.240.0/22;
-set_real_ip_from 198.41.128.0/17;
-set_real_ip_from 162.158.0.0/15;
-set_real_ip_from 104.16.0.0/13;
-set_real_ip_from 104.24.0.0/14;
-set_real_ip_from 172.64.0.0/13;
-set_real_ip_from 131.0.72.0/22;
-real_ip_header CF-Connecting-IP;
-CF
-```
-
-Adicionar no `nginx.conf` dentro do bloco `http {}`:
-
-```nginx
-include /etc/nginx/cloudflare-ips.conf;
-```
-
-### Install fail2ban
-
-```bash
-apt install -y fail2ban
-systemctl enable fail2ban
-systemctl start fail2ban
-
-# Verificar status
-fail2ban-client status sshd
-```
-
-### Bloquear acesso direto na porta do Docker
-
-```bash
-# Impedir acesso externo direto à porta 20128
-iptables -I DOCKER-USER -p tcp --dport 20128 -j DROP
-iptables -I DOCKER-USER -i lo -p tcp --dport 20128 -j ACCEPT
-
-# Persistir as regras
-apt install -y iptables-persistent
-netfilter-persistent save
-```
-
----
-
-## 7. Deploy do Cloud Worker (Opcional)
-
-Para acesso remoto via Cloudflare Workers (sem expor a VM diretamente):
-
-```bash
-# No repositório local
-cd omnirouteCloud
-npm install
-npx wrangler login
-npx wrangler deploy
-```
-
-Ver documentação completa em [omnirouteCloud/README.md](../omnirouteCloud/README.md).
-
----
-
-## Resumo de Portas
-
-| Porta | Serviço     | Acesso                        |
-| ----- | ----------- | ----------------------------- |
-| 22    | SSH         | Público (com fail2ban)        |
-| 80    | nginx HTTP  | Redirect → HTTPS              |
-| 443   | nginx HTTPS | Via Cloudflare Proxy          |
-| 20128 | OmniRoute   | Somente localhost (via nginx) |

docs/adr/ADR-001-nextjs-foundation.md

@@ -1,37 +0,0 @@
-# ADR-001: Next.js as the Foundation for an AI Gateway
-
-## Status: Accepted
-
-## Context
-
-OmniRoute is an AI routing gateway that translates, forwards, and manages requests across 20+ LLM providers. We needed a framework that could serve both the API proxy layer and a management dashboard from a single codebase.
-
-**Alternatives considered:**
-
-- **Express.js only** — Simpler proxy, but requires separate frontend tooling
-- **Fastify** — Fast, but no built-in SSR/dashboard support
-- **Next.js** — Unified full-stack framework with API routes, SSR, and static pages
-
-## Decision
-
-We chose Next.js because:
-
-1. **Single deployment** — API routes (`/api/*`) and dashboard UI in one process
-2. **Middleware layer** — Native request interception for auth guards and request tracing
-3. **File-based routing** — Easy to map provider endpoints to handlers
-4. **Built-in TypeScript** — Type safety across the entire codebase
-
-## Consequences
-
-**Positive:**
-
-- One `npm run build` produces both API and UI
-- Middleware provides centralized auth and request tracing
-- Dashboard gets automatic code splitting and optimization
-
-**Negative:**
-
-- Next.js middleware has limitations (no heavy imports, edge runtime constraints)
-- Serverless deployment model doesn't align with persistent WebSocket/SSE connections
-- Build times are longer than Express-only setups
-- The SSE proxy layer (`open-sse/`) operates outside Next.js conventions

docs/adr/ADR-002-hub-spoke-translation.md

@@ -1,37 +0,0 @@
-# ADR-002: Hub-and-Spoke Translation with OpenAI as Intermediate Format
-
-## Status: Accepted
-
-## Context
-
-OmniRoute routes requests across 20+ providers, each with its own API format (OpenAI, Anthropic Messages, Google Gemini, AWS Bedrock, etc.). Direct provider-to-provider translation would require O(n²) translators.
-
-**Alternatives considered:**
-
-- **Direct translation** — Each pair needs a dedicated translator (n² complexity)
-- **Common intermediate format** — Translate to/from a canonical format (2n complexity)
-- **Protocol buffers** — Strong typing but heavy overhead for a proxy
-
-## Decision
-
-We use the **OpenAI Chat Completions format** as the canonical intermediate representation. All incoming requests are normalized to OpenAI format, processed, then translated to the target provider's format.
-
-```
-Client → [any format] → OpenAI canonical → [target format] → Provider
-Provider → [response] → OpenAI canonical → [original format] → Client
-```
-
-## Consequences
-
-**Positive:**
-
-- Only 2 translators per provider (inbound + outbound) instead of n² pairs
-- OpenAI format is the de facto standard — most clients already use it
-- Adding a new provider requires only implementing one translator pair
-- Streaming (SSE) works consistently through the canonical format
-
-**Negative:**
-
-- Some provider-specific features may be lost in translation
-- The double translation adds latency (typically < 5ms)
-- OpenAI format changes require updating the canonical representation

docs/adr/ADR-003-dual-storage-sqlite.md

@@ -1,39 +0,0 @@
-# ADR-003: Dual Storage — SQLite Primary with JSON Migration Path
-
-## Status: Accepted
-
-## Context
-
-OmniRoute originally used LowDB (JSON file) for all persistence. As the project grew, JSON-based storage became a bottleneck for concurrent access, querying, and data integrity.
-
-**Alternatives considered:**
-
-- **LowDB only** — Simple but no concurrent access, no ACID, no querying
-- **SQLite only** — Fast, ACID-compliant, but breaks existing deployments
-- **PostgreSQL** — Production-grade but requires external dependency
-- **Dual storage with migration** — SQLite primary + automatic JSON migration
-
-## Decision
-
-We migrated to **SQLite as the primary store** with an automatic one-time migration from `db.json`:
-
-1. On startup, if `db.json` exists and SQLite is empty, auto-migrate all data
-2. All new reads/writes go through SQLite
-3. The `db.json` file is preserved but no longer written to
-
-Settings remain in a hybrid model where LowDB handles simple key-value configuration for backward compatibility.
-
-## Consequences
-
-**Positive:**
-
-- ACID transactions for provider connections, API keys, and usage data
-- Proper SQL queries for analytics and log filtering
-- Concurrent read/write safety via WAL mode
-- Zero-downtime migration from JSON — users upgrade transparently
-
-**Negative:**
-
-- Two storage engines to maintain (SQLite + LowDB for settings)
-- Migration code must handle edge cases and partial data
-- SQLite binary dependency needed in deployment environments

eslint.config.mjs

@@ -1,10 +1,9 @@
 import nextVitals from "eslint-config-next/core-web-vitals";
-import tseslint from "typescript-eslint";
 
 /** @type {import("eslint").Linter.Config[]} */
 const eslintConfig = [
   ...nextVitals,
-  // FASE-02: Security rules (strict everywhere)
+  // FASE-02: Security rules
   {
     rules: {
       "no-eval": "error",
@@ -12,28 +11,18 @@ const eslintConfig = [
       "no-new-func": "error",
     },
   },
-  // Relaxed rules for open-sse and tests (incremental adoption)
-  {
-    files: ["open-sse/**/*.ts", "tests/**/*.mjs", "tests/**/*.ts"],
-    plugins: {
-      "@typescript-eslint": tseslint.plugin,
-    },
-    rules: {
-      "@typescript-eslint/no-explicit-any": "warn",
-      "@next/next/no-assign-module-variable": "off",
-      "react-hooks/rules-of-hooks": "off",
-    },
-  },
-  // Global ignores (open-sse and tests REMOVED — now linted)
+  // Global ignores
   {
     ignores: [
       ".next/**",
       "out/**",
       "build/**",
       "next-env.d.ts",
+      "tests/**",
       "scripts/**",
       "bin/**",
       "node_modules/**",
+      "open-sse/**",
     ],
   },
 ];

llm.txt

@@ -1,134 +0,0 @@
-# OmniRoute
-
-> OmniRoute is a free, open-source AI Gateway that acts as a universal API proxy for multi-provider LLMs. It provides smart routing, automatic fallback, load balancing, and format translation across 36+ AI providers — all through a single OpenAI-compatible endpoint.
-
-## Overview
-
-OmniRoute solves the problem of managing multiple AI provider subscriptions, quotas, and rate limits. It sits between your AI-powered tools (IDE agents, CLI tools) and AI providers, routing requests intelligently through a 4-tier fallback system: Subscription → API Key → Cheap → Free.
-
-**Key value:** One endpoint (`http://localhost:20128/v1`), unlimited models, zero downtime, minimal cost.
-
-## Tech Stack
-
-- **Runtime:** Node.js >= 18
-- **Framework:** Next.js 16 (App Router) with TypeScript
-- **Database:** SQLite via better-sqlite3 (local, zero-config)
-- **State management:** Zustand (client), lowdb (server JSON persistence)
-- **UI:** React 19, Tailwind CSS 4, Recharts for analytics
-- **Auth:** OAuth 2.0 (PKCE) for providers, bcrypt for local user auth
-- **Background jobs:** Custom token health check scheduler
-- **Streaming:** Server-Sent Events (SSE) for real-time proxy responses
-- **Proxy engine:** Custom pipeline with format translation, circuit breaker, rate limiting
-- **Package:** Published on npm (`omniroute`) and Docker Hub (`diegosouzapw/omniroute`)
-
-## Project Structure
-
-```
-/
-├── src/                          # Main application source
-│   ├── app/                      # Next.js App Router pages and API routes
-│   │   ├── (dashboard)/          # Dashboard UI pages (providers, combos, analytics, logs, etc.)
-│   │   ├── api/                  # REST API endpoints
-│   │   │   ├── v1/               # OpenAI-compatible API (chat, models, embeddings, images, audio)
-│   │   │   ├── oauth/            # OAuth flows per provider (authorize, exchange, callback)
-│   │   │   ├── providers/        # Provider CRUD and batch testing
-│   │   │   ├── models/           # Dashboard model listing and aliases
-│   │   │   ├── combos/           # Combo CRUD (multi-model fallback chains)
-│   │   │   └── ...               # Other endpoints (usage, logs, health, settings, etc.)
-│   │   └── login/                # Login page
-│   ├── domain/                   # Domain types and business logic interfaces
-│   ├── lib/                      # Core libraries
-│   │   ├── db/                   # SQLite database layer (providers, combos, prompts, logs)
-│   │   ├── oauth/                # OAuth providers, services, and utilities
-│   │   │   ├── providers/        # Provider-specific OAuth configs (GitHub, Google, Claude, etc.)
-│   │   │   ├── services/         # Provider-specific token exchange logic
-│   │   │   └── utils/            # PKCE, callback server, token helpers
-│   │   ├── cloudSync.ts          # Cloud sync via Cloudflare Workers
-│   │   ├── tokenHealthCheck.ts   # Background OAuth token refresh scheduler
-│   │   └── localDb.ts            # Unified database access layer
-│   ├── shared/                   # Shared utilities, components, and constants
-│   │   ├── components/           # Reusable UI components (Card, Badge, Button, Modal, etc.)
-│   │   ├── constants/            # Provider definitions, model lists, pricing
-│   │   └── utils/                # Helpers (auth, CORS, error codes, machine ID)
-│   ├── sse/                      # SSE proxy pipeline
-│   │   ├── services/             # Auth resolution, format translation, response handling
-│   │   └── middleware/           # Rate limiting, circuit breaker, caching, idempotency
-│   ├── store/                    # Zustand client-side stores
-│   ├── types/                    # TypeScript type definitions
-│   ├── proxy.ts                  # Main proxy request handler
-│   └── server-init.ts            # Server initialization (DB, health checks)
-├── open-sse/                     # Standalone SSE server (npm workspace)
-│   ├── config/                   # Model registries (embedding, image, audio, rerank, moderation)
-│   ├── handlers/                 # Request handlers per API type
-│   └── translators/              # Format translators (OpenAI ↔ Claude ↔ Gemini ↔ Responses)
-├── tests/                        # Test suites
-│   ├── unit/                     # Unit tests (32+ test files)
-│   └── integration/              # Integration tests
-├── docs/                         # Documentation and screenshots
-├── bin/                          # CLI entry points (omniroute, reset-password)
-└── .env.example                  # Environment variable template
-```
-
-## Key Architectural Decisions
-
-1. **OpenAI-compatible API surface:** All incoming requests follow the OpenAI API format (`/v1/chat/completions`, `/v1/models`, etc.). This makes OmniRoute a drop-in replacement for any tool that supports custom OpenAI endpoints.
-
-2. **Provider abstraction via format translators:** Each AI provider (Claude, Gemini, etc.) has a translator in `open-sse/translators/` that converts between the OpenAI format and the provider's native format. This happens transparently.
-
-3. **Connection-based provider model:** Providers are stored as "connections" in SQLite. Each connection has an `id`, `provider`, `authType` (oauth/apikey/free), `isActive` flag, and credentials. Multiple connections per provider are supported for multi-account rotation.
-
-4. **Combo system for fallback:** Users create "combos" — ordered lists of `provider/model` pairs. The proxy tries each in order until one succeeds. Supports 6 strategies: fill-first, round-robin, power-of-two-choices, random, least-used, cost-optimized.
-
-5. **SSE proxy pipeline (`src/sse/`):** The proxy pipeline is middleware-based: request → auth resolution → rate limiting → circuit breaker → format translation → upstream call → response translation → SSE streaming back to client.
-
-6. **SQLite for persistence:** All state (providers, combos, logs, settings) is stored in a single SQLite database file at `data/omniroute.db`. This keeps the app self-contained and zero-config.
-
-7. **OAuth with PKCE:** OAuth flows use PKCE for security. A local callback server (`src/lib/oauth/utils/server.ts`) handles the redirect. Token refresh is handled by a background job (`tokenHealthCheck.ts`).
-
-## Main Flows
-
-### Proxy Request Flow
-1. Client sends OpenAI-format request to `/v1/chat/completions`
-2. API key validation (`src/shared/utils/apiAuth.ts`)
-3. Model resolution: direct model or combo lookup
-4. For combos: iterate through models in fallback order
-5. Auth resolution: get credentials for the target provider
-6. Format translation: OpenAI → provider native format
-7. Upstream request with circuit breaker and rate limiting
-8. Response translation: provider → OpenAI format
-9. SSE streaming back to client
-
-### OAuth Flow
-1. Dashboard initiates `/api/oauth/[provider]/authorize`
-2. User completes OAuth login in browser
-3. Callback hits `/api/oauth/[provider]/exchange`
-4. Tokens stored as a provider connection in SQLite
-5. Background job refreshes tokens before expiry
-
-### Model Listing
-- `/api/models` — Dashboard endpoint, lists all defined models with aliases
-- `/v1/models` — OpenAI-compatible endpoint, lists only models from active providers
-
-## Important Notes for LLMs
-
-1. **Two model endpoints exist:** `/api/models` (dashboard, all models) and `/v1/models` (OpenAI-compatible, active only). Don't confuse them.
-
-2. **Provider IDs vs aliases:** Providers have both an ID (`claude`, `github`) and a short alias (`cc`, `gh`). Models are referenced as `alias/model-name` (e.g., `cc/claude-opus-4-6`).
-
-3. **The `open-sse/` directory is a separate npm workspace** with its own config, handlers, and translators. It handles the actual SSE streaming and format translation.
-
-4. **Environment variables:** All configuration is in `.env` (from `.env.example`). Key vars: `PORT`, `NEXT_PUBLIC_BASE_URL`, `API_KEY`, `ADMIN_PASSWORD`.
-
-5. **Database migrations:** SQLite schema is managed inline in `src/lib/db/core.ts` and `src/lib/db/providers.ts`. No migration framework — schema changes are applied on startup.
-
-6. **Tests use Node.js built-in test runner:** Run `npm test` or `node --test tests/unit/*.test.mjs`. Playwright is used for E2E tests.
-
-7. **The proxy pipeline is in `src/sse/`**, not in `src/app/api/v1/`. The API routes in `src/app/api/v1/` delegate to the SSE server running on a separate Express instance.
-
-## Links
-
-- Repository: https://github.com/diegosouzapw/OmniRoute
-- Website: https://omniroute.online
-- npm: https://www.npmjs.com/package/omniroute
-- Docker Hub: https://hub.docker.com/r/diegosouzapw/omniroute
-- Documentation: See `/docs/` directory

next.config.mjs

@@ -2,12 +2,12 @@
 const nextConfig = {
   turbopack: {},
   output: "standalone",
-  serverExternalPackages: ["better-sqlite3"],
   transpilePackages: ["@omniroute/open-sse"],
   allowedDevOrigins: ["192.168.*"],
   typescript: {
-    // All TS errors resolved — strict checking enforced
-    ignoreBuildErrors: false,
+    // Migration Phase: ignore TS errors during build.
+    // Remove after all 984 type errors are resolved.
+    ignoreBuildErrors: true,
   },
   images: {
     unoptimized: true,

open-sse/handlers/audioSpeech.ts

@@ -1,4 +1,3 @@
-import { getCorsOrigin } from "../utils/cors.ts";
 /**
  * Audio Speech Handler (TTS)
  *
@@ -41,10 +40,7 @@ async function handleHyperbolicSpeech(providerConfig, body, token) {
     const errText = await res.text();
     return new Response(errText, {
       status: res.status,
-      headers: {
-        "Content-Type": "application/json",
-        "Access-Control-Allow-Origin": getCorsOrigin(),
-      },
+      headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
     });
   }
 
@@ -56,7 +52,7 @@ async function handleHyperbolicSpeech(providerConfig, body, token) {
     status: 200,
     headers: {
       "Content-Type": "audio/mpeg",
-      "Access-Control-Allow-Origin": getCorsOrigin(),
+      "Access-Control-Allow-Origin": "*",
     },
   });
 }
@@ -81,10 +77,7 @@ async function handleDeepgramSpeech(providerConfig, body, modelId, token) {
     const errText = await res.text();
     return new Response(errText, {
       status: res.status,
-      headers: {
-        "Content-Type": "application/json",
-        "Access-Control-Allow-Origin": getCorsOrigin(),
-      },
+      headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
     });
   }
 
@@ -93,7 +86,7 @@ async function handleDeepgramSpeech(providerConfig, body, modelId, token) {
     status: 200,
     headers: {
       "Content-Type": contentType,
-      "Access-Control-Allow-Origin": getCorsOrigin(),
+      "Access-Control-Allow-Origin": "*",
       "Transfer-Encoding": "chunked",
     },
   });
@@ -161,10 +154,7 @@ export async function handleAudioSpeech({ body, credentials }) {
       const errText = await res.text();
       return new Response(errText, {
         status: res.status,
-        headers: {
-          "Content-Type": "application/json",
-          "Access-Control-Allow-Origin": getCorsOrigin(),
-        },
+        headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
       });
     }
 
@@ -174,7 +164,7 @@ export async function handleAudioSpeech({ body, credentials }) {
       status: 200,
       headers: {
         "Content-Type": contentType,
-        "Access-Control-Allow-Origin": getCorsOrigin(),
+        "Access-Control-Allow-Origin": "*",
         "Transfer-Encoding": "chunked",
       },
     });

open-sse/handlers/audioTranscription.ts

@@ -1,4 +1,3 @@
-import { getCorsOrigin } from "../utils/cors.ts";
 /**
  * Audio Transcription Handler
  *
@@ -47,10 +46,7 @@ async function handleDeepgramTranscription(providerConfig, file, modelId, token)
     const errText = await res.text();
     return new Response(errText, {
       status: res.status,
-      headers: {
-        "Content-Type": "application/json",
-        "Access-Control-Allow-Origin": getCorsOrigin(),
-      },
+      headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
     });
   }
 
@@ -58,7 +54,7 @@ async function handleDeepgramTranscription(providerConfig, file, modelId, token)
   // Transform Deepgram response to OpenAI Whisper format
   const text = data.results?.channels?.[0]?.alternatives?.[0]?.transcript || "";
 
-  return Response.json({ text }, { headers: { "Access-Control-Allow-Origin": getCorsOrigin() } });
+  return Response.json({ text }, { headers: { "Access-Control-Allow-Origin": "*" } });
 }
 
 /**
@@ -82,10 +78,7 @@ async function handleAssemblyAITranscription(providerConfig, file, modelId, toke
     const errText = await uploadRes.text();
     return new Response(errText, {
       status: uploadRes.status,
-      headers: {
-        "Content-Type": "application/json",
-        "Access-Control-Allow-Origin": getCorsOrigin(),
-      },
+      headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
     });
   }
 
@@ -109,10 +102,7 @@ async function handleAssemblyAITranscription(providerConfig, file, modelId, toke
     const errText = await submitRes.text();
     return new Response(errText, {
       status: submitRes.status,
-      headers: {
-        "Content-Type": "application/json",
-        "Access-Control-Allow-Origin": getCorsOrigin(),
-      },
+      headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
     });
   }
 
@@ -134,7 +124,7 @@ async function handleAssemblyAITranscription(providerConfig, file, modelId, toke
     if (result.status === "completed") {
       return Response.json(
         { text: result.text || "" },
-        { headers: { "Access-Control-Allow-Origin": getCorsOrigin() } }
+        { headers: { "Access-Control-Allow-Origin": "*" } }
       );
     }
 
@@ -192,11 +182,7 @@ export async function handleAudioTranscription({ formData, credentials }) {
 
   // Default: OpenAI/Groq-compatible multipart proxy
   const upstreamForm = new FormData();
-  upstreamForm.append(
-    "file",
-    /** @type {Blob} */ file,
-    /** @type {any} */ file.name || "audio.wav"
-  );
+  upstreamForm.append("file", /** @type {Blob} */ (file), /** @type {any} */ (file).name || "audio.wav");
   upstreamForm.append("model", modelId);
 
   // Forward optional parameters
@@ -209,7 +195,7 @@ export async function handleAudioTranscription({ formData, credentials }) {
   ]) {
     const val = formData.get(key);
     if (val !== null && val !== undefined) {
-      upstreamForm.append(key, /** @type {string} */ val);
+      upstreamForm.append(key, /** @type {string} */ (val));
     }
   }
 
@@ -224,10 +210,7 @@ export async function handleAudioTranscription({ formData, credentials }) {
       const errText = await res.text();
       return new Response(errText, {
         status: res.status,
-        headers: {
-          "Content-Type": "application/json",
-          "Access-Control-Allow-Origin": getCorsOrigin(),
-        },
+        headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
       });
     }
 
@@ -236,7 +219,7 @@ export async function handleAudioTranscription({ formData, credentials }) {
 
     return new Response(data, {
       status: 200,
-      headers: { "Content-Type": contentType, "Access-Control-Allow-Origin": getCorsOrigin() },
+      headers: { "Content-Type": contentType, "Access-Control-Allow-Origin": "*" },
     });
   } catch (err) {
     return errorResponse(500, `Transcription request failed: ${err.message}`);

open-sse/handlers/chatCore.ts

@@ -1,4 +1,3 @@
-import { getCorsOrigin } from "../utils/cors.ts";
 import { detectFormat, getTargetFormat } from "../services/provider.ts";
 import { translateRequest, needsTranslation } from "../translator/index.ts";
 import { FORMATS } from "../translator/formats.ts";
@@ -25,7 +24,6 @@ import { getExecutor } from "../executors/index.ts";
 import { translateNonStreamingResponse } from "./responseTranslator.ts";
 import { extractUsageFromResponse } from "./usageExtractor.ts";
 import { parseSSEToOpenAIResponse, parseSSEToResponsesOutput } from "./sseParser.ts";
-import { sanitizeOpenAIResponse } from "./responseSanitizer.ts";
 import {
   withRateLimit,
   updateFromHeaders,
@@ -83,7 +81,7 @@ export async function handleChatCore({
         status: cachedIdemp.status,
         headers: {
           "Content-Type": "application/json",
-          "Access-Control-Allow-Origin": getCorsOrigin(),
+          "Access-Control-Allow-Origin": "*",
           "X-OmniRoute-Idempotent": "true",
         },
       }),
@@ -110,8 +108,8 @@ export async function handleChatCore({
   const modelTargetFormat = getModelTargetFormat(alias, model);
   const targetFormat = modelTargetFormat || getTargetFormat(provider);
 
-  // Default to false unless client explicitly sets stream: true (OpenAI spec compliant)
-  const stream = body.stream === true;
+  // Default to streaming unless client explicitly sets stream: false
+  const stream = body.stream !== false;
 
   // ── Phase 9.1: Semantic cache check (non-streaming, temp=0 only) ──
   if (isCacheable(body, clientRawRequest?.headers)) {
@@ -124,7 +122,7 @@ export async function handleChatCore({
         response: new Response(JSON.stringify(cached), {
           headers: {
             "Content-Type": "application/json",
-            "Access-Control-Allow-Origin": getCorsOrigin(),
+            "Access-Control-Allow-Origin": "*",
             "X-OmniRoute-Cache": "HIT",
           },
         }),
@@ -190,7 +188,7 @@ export async function handleChatCore({
             status: statusCode,
             headers: {
               "Content-Type": "application/json",
-              "Access-Control-Allow-Origin": getCorsOrigin(),
+              "Access-Control-Allow-Origin": "*",
             },
           }
         ),
@@ -473,17 +471,10 @@ export async function handleChatCore({
     }
 
     // Translate response to client's expected format (usually OpenAI)
-    let translatedResponse = needsTranslation(targetFormat, sourceFormat)
+    const translatedResponse = needsTranslation(targetFormat, sourceFormat)
       ? translateNonStreamingResponse(responseBody, targetFormat, sourceFormat)
       : responseBody;
 
-    // Sanitize response for OpenAI SDK compatibility
-    // Strips non-standard fields (x_groq, usage_breakdown, service_tier, etc.)
-    // Extracts <think> tags into reasoning_content
-    if (sourceFormat === FORMATS.OPENAI) {
-      translatedResponse = sanitizeOpenAIResponse(translatedResponse);
-    }
-
     // Add buffer and filter usage for client (to prevent CLI context errors)
     if (translatedResponse?.usage) {
       const buffered = addBufferToUsage(translatedResponse.usage);
@@ -515,7 +506,7 @@ export async function handleChatCore({
       response: new Response(JSON.stringify(translatedResponse), {
         headers: {
           "Content-Type": "application/json",
-          "Access-Control-Allow-Origin": getCorsOrigin(),
+          "Access-Control-Allow-Origin": "*",
           "X-OmniRoute-Cache": "MISS",
         },
       }),
@@ -533,7 +524,7 @@ export async function handleChatCore({
     "Content-Type": "text/event-stream",
     "Cache-Control": "no-cache",
     Connection: "keep-alive",
-    "Access-Control-Allow-Origin": getCorsOrigin(),
+    "Access-Control-Allow-Origin": "*",
   };
 
   // Create transform stream with logger for streaming response

open-sse/handlers/moderations.ts

@@ -1,4 +1,3 @@
-import { getCorsOrigin } from "../utils/cors.ts";
 /**
  * Moderation Handler
  *
@@ -56,16 +55,13 @@ export async function handleModeration({ body, credentials }) {
       const errText = await res.text();
       return new Response(errText, {
         status: res.status,
-        headers: {
-          "Content-Type": "application/json",
-          "Access-Control-Allow-Origin": getCorsOrigin(),
-        },
+        headers: { "Content-Type": "application/json", "Access-Control-Allow-Origin": "*" },
       });
     }
 
     const data = await res.json();
     return Response.json(data, {
-      headers: { "Access-Control-Allow-Origin": getCorsOrigin() },
+      headers: { "Access-Control-Allow-Origin": "*" },
     });
   } catch (err) {
     return errorResponse(500, `Moderation request failed: ${err.message}`);

open-sse/handlers/rerank.ts

@@ -1,4 +1,3 @@
-import { getCorsOrigin } from "../utils/cors.ts";
 /**
  * Rerank Handler
  *
@@ -130,7 +129,7 @@ export async function handleRerank({
     const result = transformResponseFromProvider(providerConfig, data);
 
     return Response.json(result, {
-      headers: { "Access-Control-Allow-Origin": getCorsOrigin() },
+      headers: { "Access-Control-Allow-Origin": "*" },
     });
   } catch (err) {
     return errorResponse(500, `Rerank request failed: ${err.message}`);

open-sse/handlers/responseSanitizer.ts

@@ -1,269 +0,0 @@
-/**
- * Response Sanitizer — Normalizes LLM responses to strict OpenAI SDK format.
- *
- * Fixes Issues:
- * 1. Strips non-standard fields (x_groq, usage_breakdown, service_tier) that
- *    break OpenAI Python SDK v1.83+ Pydantic validation (returns str instead of object)
- * 2. Extracts <think> tags from thinking models into reasoning_content
- * 3. Normalizes response id, object, and usage fields
- * 4. Converts developer role → system for non-OpenAI providers
- */
-
-// ── Standard OpenAI ChatCompletion fields ──────────────────────────────────
-const ALLOWED_TOP_LEVEL_FIELDS = new Set([
-  "id",
-  "object",
-  "created",
-  "model",
-  "choices",
-  "usage",
-  "system_fingerprint",
-]);
-
-const ALLOWED_USAGE_FIELDS = new Set([
-  "prompt_tokens",
-  "completion_tokens",
-  "total_tokens",
-  "prompt_tokens_details",
-  "completion_tokens_details",
-]);
-
-const ALLOWED_MESSAGE_FIELDS = new Set([
-  "role",
-  "content",
-  "tool_calls",
-  "function_call",
-  "refusal",
-  "reasoning_content",
-]);
-
-const ALLOWED_CHOICE_FIELDS = new Set(["index", "message", "delta", "finish_reason", "logprobs"]);
-
-// ── Think tag regex ────────────────────────────────────────────────────────
-// Matches <think>...</think> blocks (greedy, dotAll)
-const THINK_TAG_REGEX = /<think>([\s\S]*?)<\/think>/gi;
-
-/**
- * Extract <think> blocks from text content and return separated parts.
- * @returns {{ content: string, thinking: string | null }}
- */
-export function extractThinkingFromContent(text: string): {
-  content: string;
-  thinking: string | null;
-} {
-  if (!text || typeof text !== "string") {
-    return { content: text || "", thinking: null };
-  }
-
-  const thinkingParts: string[] = [];
-  let hasThinkTags = false;
-
-  const cleaned = text.replace(THINK_TAG_REGEX, (_, thinkContent) => {
-    hasThinkTags = true;
-    const trimmed = thinkContent.trim();
-    if (trimmed) {
-      thinkingParts.push(trimmed);
-    }
-    return "";
-  });
-
-  if (!hasThinkTags) {
-    return { content: text, thinking: null };
-  }
-
-  return {
-    content: cleaned.trim(),
-    thinking: thinkingParts.length > 0 ? thinkingParts.join("\n\n") : null,
-  };
-}
-
-/**
- * Sanitize a non-streaming OpenAI ChatCompletion response.
- * Strips non-standard fields and normalizes required fields.
- */
-export function sanitizeOpenAIResponse(body: any): any {
-  if (!body || typeof body !== "object") return body;
-
-  // Build sanitized response with only allowed top-level fields
-  const sanitized: Record<string, any> = {};
-
-  // Ensure required fields exist
-  sanitized.id = normalizeResponseId(body.id);
-  sanitized.object = body.object || "chat.completion";
-  sanitized.created = body.created || Math.floor(Date.now() / 1000);
-  sanitized.model = body.model || "unknown";
-
-  // Sanitize choices
-  if (Array.isArray(body.choices)) {
-    sanitized.choices = body.choices.map((choice: any, idx: number) => sanitizeChoice(choice, idx));
-  } else {
-    sanitized.choices = [];
-  }
-
-  // Sanitize usage
-  if (body.usage && typeof body.usage === "object") {
-    sanitized.usage = sanitizeUsage(body.usage);
-  }
-
-  // Keep system_fingerprint if present (it's a valid OpenAI field)
-  if (body.system_fingerprint) {
-    sanitized.system_fingerprint = body.system_fingerprint;
-  }
-
-  return sanitized;
-}
-
-/**
- * Sanitize a single choice object.
- */
-function sanitizeChoice(choice: any, defaultIndex: number): any {
-  const sanitized: Record<string, any> = {
-    index: choice.index ?? defaultIndex,
-    finish_reason: choice.finish_reason || null,
-  };
-
-  // Sanitize message (non-streaming) or delta (streaming)
-  if (choice.message) {
-    sanitized.message = sanitizeMessage(choice.message);
-  }
-  if (choice.delta) {
-    sanitized.delta = sanitizeMessage(choice.delta);
-  }
-
-  // Keep logprobs if present
-  if (choice.logprobs !== undefined) {
-    sanitized.logprobs = choice.logprobs;
-  }
-
-  return sanitized;
-}
-
-/**
- * Sanitize a message object, extracting <think> tags if present.
- */
-function sanitizeMessage(msg: any): any {
-  if (!msg || typeof msg !== "object") return msg;
-
-  const sanitized: Record<string, any> = {};
-
-  // Copy only allowed fields
-  if (msg.role) sanitized.role = msg.role;
-  if (msg.refusal !== undefined) sanitized.refusal = msg.refusal;
-
-  // Handle content — extract <think> tags
-  if (typeof msg.content === "string") {
-    const { content, thinking } = extractThinkingFromContent(msg.content);
-    sanitized.content = content;
-
-    // Set reasoning_content from <think> tags (if not already set)
-    if (thinking && !msg.reasoning_content) {
-      sanitized.reasoning_content = thinking;
-    }
-  } else if (msg.content !== undefined) {
-    sanitized.content = msg.content;
-  }
-
-  // Preserve existing reasoning_content (from providers that natively support it)
-  if (msg.reasoning_content && !sanitized.reasoning_content) {
-    sanitized.reasoning_content = msg.reasoning_content;
-  }
-
-  // Preserve tool_calls
-  if (msg.tool_calls) {
-    sanitized.tool_calls = msg.tool_calls;
-  }
-
-  // Preserve function_call (legacy)
-  if (msg.function_call) {
-    sanitized.function_call = msg.function_call;
-  }
-
-  return sanitized;
-}
-
-/**
- * Sanitize usage object — keep only standard fields.
- */
-function sanitizeUsage(usage: any): any {
-  if (!usage || typeof usage !== "object") return usage;
-
-  const sanitized: Record<string, any> = {};
-  for (const key of ALLOWED_USAGE_FIELDS) {
-    if (usage[key] !== undefined) {
-      sanitized[key] = usage[key];
-    }
-  }
-
-  // Ensure required fields
-  if (sanitized.prompt_tokens === undefined) sanitized.prompt_tokens = 0;
-  if (sanitized.completion_tokens === undefined) sanitized.completion_tokens = 0;
-  if (sanitized.total_tokens === undefined) {
-    sanitized.total_tokens = sanitized.prompt_tokens + sanitized.completion_tokens;
-  }
-
-  return sanitized;
-}
-
-/**
- * Normalize response ID to use chatcmpl- prefix.
- */
-function normalizeResponseId(id: any): string {
-  if (!id || typeof id !== "string") {
-    return `chatcmpl-${crypto.randomUUID().replace(/-/g, "").slice(0, 29)}`;
-  }
-  // Already correct format
-  if (id.startsWith("chatcmpl-")) return id;
-  // Keep custom IDs but don't break them
-  return id;
-}
-
-/**
- * Sanitize a streaming SSE chunk for passthrough mode.
- * Lighter than full sanitization — only strips problematic extra fields.
- */
-export function sanitizeStreamingChunk(parsed: any): any {
-  if (!parsed || typeof parsed !== "object") return parsed;
-
-  // Build sanitized chunk
-  const sanitized: Record<string, any> = {};
-
-  // Keep only standard fields
-  if (parsed.id !== undefined) sanitized.id = parsed.id;
-  sanitized.object = parsed.object || "chat.completion.chunk";
-  if (parsed.created !== undefined) sanitized.created = parsed.created;
-  if (parsed.model !== undefined) sanitized.model = parsed.model;
-
-  // Sanitize choices with delta
-  if (Array.isArray(parsed.choices)) {
-    sanitized.choices = parsed.choices.map((choice: any) => {
-      const c: Record<string, any> = {
-        index: choice.index ?? 0,
-      };
-      if (choice.delta !== undefined) {
-        c.delta = {};
-        const delta = choice.delta;
-        if (delta.role !== undefined) c.delta.role = delta.role;
-        if (delta.content !== undefined) c.delta.content = delta.content;
-        if (delta.reasoning_content !== undefined)
-          c.delta.reasoning_content = delta.reasoning_content;
-        if (delta.tool_calls !== undefined) c.delta.tool_calls = delta.tool_calls;
-        if (delta.function_call !== undefined) c.delta.function_call = delta.function_call;
-      }
-      if (choice.finish_reason !== undefined) c.finish_reason = choice.finish_reason;
-      if (choice.logprobs !== undefined) c.logprobs = choice.logprobs;
-      return c;
-    });
-  }
-
-  // Sanitize usage if present
-  if (parsed.usage && typeof parsed.usage === "object") {
-    sanitized.usage = sanitizeUsage(parsed.usage);
-  }
-
-  // Keep system_fingerprint if present
-  if (parsed.system_fingerprint) {
-    sanitized.system_fingerprint = parsed.system_fingerprint;
-  }
-
-  return sanitized;
-}

open-sse/handlers/responsesHandler.ts

@@ -1,4 +1,3 @@
-import { getCorsOrigin } from "../utils/cors.ts";
 /**
  * Responses API Handler for Workers
  * Converts Chat Completions to Codex Responses API format
@@ -76,7 +75,7 @@ export async function handleResponsesCore({
         "Content-Type": "text/event-stream",
         "Cache-Control": "no-cache",
         Connection: "keep-alive",
-        "Access-Control-Allow-Origin": getCorsOrigin(),
+        "Access-Control-Allow-Origin": "*",
       },
     }),
   };

open-sse/services/roleNormalizer.ts

@@ -1,169 +0,0 @@
-/**
- * Role Normalizer — Converts message roles for provider compatibility.
- *
- * Fixes Issues:
- * 1. GLM/ZhipuAI rejects `system` role → merged into first `user` message
- * 2. OpenAI `developer` role not understood by non-OpenAI providers → normalized to `system`
- * 3. Some providers don't support `system` role at all → prepended to user message
- *
- * Provider capability matrix is defined here rather than in the registry to
- * avoid breaking changes to the existing RegistryEntry interface.
- */
-
-// ── Provider capabilities ──────────────────────────────────────────────────
-
-/**
- * Providers that do NOT support the `system` role in messages.
- * For these, system messages are merged into the first user message.
- *
- * Note: This applies only to OpenAI-format passthrough providers.
- * Claude and Gemini have their own system message handling in dedicated translators.
- */
-const PROVIDERS_WITHOUT_SYSTEM_ROLE = new Set([
-  // Known to reject system role (from troubleshooting report)
-  // GLM uses Claude format, so this is handled through claude translator
-  // But if accessed through OpenAI-format providers like nvidia, it needs this:
-]);
-
-/**
- * Models that are known to reject the `system` role regardless of provider.
- * Uses prefix matching (e.g., "glm-" matches "glm-4.7", "glm-4.5", etc.)
- */
-const MODELS_WITHOUT_SYSTEM_ROLE = [
-  "glm-", // ZhipuAI GLM models
-  "ernie-", // Baidu ERNIE models
-];
-
-/**
- * Check if a provider+model combo supports the system role.
- */
-function supportsSystemRole(provider: string, model: string): boolean {
-  if (PROVIDERS_WITHOUT_SYSTEM_ROLE.has(provider)) return false;
-
-  const modelLower = (model || "").toLowerCase();
-  for (const prefix of MODELS_WITHOUT_SYSTEM_ROLE) {
-    if (modelLower.startsWith(prefix)) return false;
-  }
-
-  return true;
-}
-
-/**
- * Normalize the `developer` role to `system` for non-OpenAI providers.
- * OpenAI introduced `developer` as a replacement for `system` in newer models,
- * but most other providers still expect `system`.
- *
- * @param messages - Array of messages
- * @param targetFormat - The target format (e.g., "openai", "claude", "gemini")
- * @returns Modified messages array
- */
-export function normalizeDeveloperRole(messages: any[], targetFormat: string): any[] {
-  if (!Array.isArray(messages)) return messages;
-
-  // For OpenAI format, keep developer role as-is (it's valid)
-  // For all other formats, convert developer → system
-  if (targetFormat === "openai") return messages;
-
-  return messages.map((msg) => {
-    if (msg.role === "developer") {
-      return { ...msg, role: "system" };
-    }
-    return msg;
-  });
-}
-
-/**
- * Convert `system` messages to user messages for providers that don't support
- * the system role. The system content is prepended to the first user message
- * with a clear delimiter.
- *
- * @param messages - Array of messages
- * @param provider - Provider name
- * @param model - Model name
- * @returns Modified messages array
- */
-export function normalizeSystemRole(messages: any[], provider: string, model: string): any[] {
-  if (!Array.isArray(messages) || messages.length === 0) return messages;
-  if (supportsSystemRole(provider, model)) return messages;
-
-  // Extract system messages
-  const systemMessages = messages.filter((m) => m.role === "system" || m.role === "developer");
-  if (systemMessages.length === 0) return messages;
-
-  // Build system content string
-  const systemContent = systemMessages
-    .map((m) => {
-      if (typeof m.content === "string") return m.content;
-      if (Array.isArray(m.content)) {
-        return m.content
-          .filter((c: any) => c.type === "text")
-          .map((c: any) => c.text)
-          .join("\n");
-      }
-      return "";
-    })
-    .filter(Boolean)
-    .join("\n\n");
-
-  if (!systemContent) {
-    return messages.filter((m) => m.role !== "system" && m.role !== "developer");
-  }
-
-  // Remove system messages and merge into first user message
-  const nonSystemMessages = messages.filter((m) => m.role !== "system" && m.role !== "developer");
-
-  // Find first user message and prepend system content
-  const firstUserIdx = nonSystemMessages.findIndex((m) => m.role === "user");
-  if (firstUserIdx >= 0) {
-    const userMsg = nonSystemMessages[firstUserIdx];
-    const userContent =
-      typeof userMsg.content === "string"
-        ? userMsg.content
-        : Array.isArray(userMsg.content)
-          ? userMsg.content
-              .filter((c: any) => c.type === "text")
-              .map((c: any) => c.text)
-              .join("\n")
-          : "";
-
-    nonSystemMessages[firstUserIdx] = {
-      ...userMsg,
-      content: `[System Instructions]\n${systemContent}\n\n[User Message]\n${userContent}`,
-    };
-  } else {
-    // No user message found — insert as a user message at the beginning
-    nonSystemMessages.unshift({
-      role: "user",
-      content: `[System Instructions]\n${systemContent}`,
-    });
-  }
-
-  return nonSystemMessages;
-}
-
-/**
- * Full role normalization pipeline.
- * Call this before sending the request to the provider.
- *
- * @param messages - Array of messages
- * @param provider - Provider name/id
- * @param model - Model name
- * @param targetFormat - Target API format
- * @returns Normalized messages array
- */
-export function normalizeRoles(
-  messages: any[],
-  provider: string,
-  model: string,
-  targetFormat: string
-): any[] {
-  if (!Array.isArray(messages)) return messages;
-
-  // Step 1: Normalize developer → system (for non-OpenAI formats)
-  let result = normalizeDeveloperRole(messages, targetFormat);
-
-  // Step 2: Normalize system → user (for providers that don't support system role)
-  result = normalizeSystemRole(result, provider, model);
-
-  return result;
-}

open-sse/translator/index.ts

@@ -4,7 +4,6 @@ import { prepareClaudeRequest } from "./helpers/claudeHelper.ts";
 import { filterToOpenAIFormat } from "./helpers/openaiHelper.ts";
 import { normalizeThinkingConfig } from "../services/provider.ts";
 import { applyThinkingBudget } from "../services/thinkingBudget.ts";
-import { normalizeRoles } from "../services/roleNormalizer.ts";
 
 // Registry for translators.
 // NOTE: translator modules import this file and call register() at module-load time.
@@ -133,11 +132,6 @@ export function translateRequest(
   // Fix missing tool responses (insert empty tool_result if needed)
   fixMissingToolResponses(result);
 
-  // Normalize roles: developer→system for non-OpenAI, system→user for incompatible models
-  if (result.messages && Array.isArray(result.messages)) {
-    result.messages = normalizeRoles(result.messages, provider || "", model || "", targetFormat);
-  }
-
   // If same format, skip translation steps
   if (sourceFormat !== targetFormat) {
     // Check for direct translation path first (e.g., Claude → Gemini)

open-sse/translator/request/openai-to-gemini.ts

@@ -199,24 +199,6 @@ function openaiToGeminiBase(model, body, stream) {
     }
   }
 
-  // Convert response_format to Gemini's responseMimeType/responseSchema
-  if (body.response_format) {
-    if (body.response_format.type === "json_schema" && body.response_format.json_schema) {
-      result.generationConfig.responseMimeType = "application/json";
-      // Extract the schema (may be nested under .schema key)
-      const schema = body.response_format.json_schema.schema || body.response_format.json_schema;
-      if (schema && typeof schema === "object") {
-        // Remove unsupported keywords for Gemini (it uses a subset of JSON Schema)
-        const { $schema, additionalProperties, ...cleanSchema } = schema;
-        result.generationConfig.responseSchema = cleanSchema;
-      }
-    } else if (body.response_format.type === "json_object") {
-      result.generationConfig.responseMimeType = "application/json";
-    } else if (body.response_format.type === "text") {
-      result.generationConfig.responseMimeType = "text/plain";
-    }
-  }
-
   return result;
 }
 

open-sse/tsconfig.json

@@ -6,7 +6,6 @@
     "allowJs": true,
     "checkJs": true,
     "noEmit": true,
-    "allowImportingTsExtensions": true,
     "skipLibCheck": true,
     "esModuleInterop": true,
     "strict": false,
@@ -19,5 +18,8 @@
       "@omniroute/open-sse/*": ["./open-sse/*"]
     }
   },
-  "include": ["**/*.ts", "**/*.js"]
+  "include": [
+    "**/*.ts",
+    "**/*.js"
+  ]
 }

open-sse/utils/bypassHandler.ts

@@ -1,4 +1,3 @@
-import { getCorsOrigin } from "./cors.ts";
 import { detectFormat } from "../services/provider.ts";
 import { translateResponse, initState } from "../translator/index.ts";
 import { FORMATS } from "../translator/formats.ts";
@@ -123,7 +122,7 @@ function createNonStreamingResponse(sourceFormat, model) {
       response: new Response(JSON.stringify(openaiResponse), {
         headers: {
           "Content-Type": "application/json",
-          "Access-Control-Allow-Origin": getCorsOrigin(),
+          "Access-Control-Allow-Origin": "*",
         },
       }),
     };
@@ -157,7 +156,7 @@ function createNonStreamingResponse(sourceFormat, model) {
     response: new Response(JSON.stringify(finalResponse), {
       headers: {
         "Content-Type": "application/json",
-        "Access-Control-Allow-Origin": getCorsOrigin(),
+        "Access-Control-Allow-Origin": "*",
       },
     }),
   };
@@ -205,7 +204,7 @@ function createStreamingResponse(sourceFormat, model) {
         "Content-Type": "text/event-stream",
         "Cache-Control": "no-cache",
         Connection: "keep-alive",
-        "Access-Control-Allow-Origin": getCorsOrigin(),
+        "Access-Control-Allow-Origin": "*",
       },
     }),
   };

open-sse/utils/cors.ts

@@ -1,22 +0,0 @@
-/**
- * CORS configuration for open-sse handlers.
- *
- * Reads `CORS_ORIGIN` env var (default: "*") so that all handlers
- * use the same configurable origin. Equivalent to src/shared/utils/cors.ts
- * for the open-sse package boundary.
- */
-
-const CORS_ORIGIN = process.env.CORS_ORIGIN || "*";
-
-export const CORS_HEADERS: Record<string, string> = {
-  "Access-Control-Allow-Origin": CORS_ORIGIN,
-  "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
-  "Access-Control-Allow-Headers": "Content-Type, Authorization, x-api-key, anthropic-version",
-};
-
-/**
- * Returns just the origin header for merging into existing header objects.
- */
-export function getCorsOrigin(): string {
-  return CORS_ORIGIN;
-}

open-sse/utils/error.ts

@@ -1,4 +1,3 @@
-import { getCorsOrigin } from "./cors.ts";
 import { ERROR_TYPES, DEFAULT_ERROR_MESSAGES } from "../config/constants.ts";
 
 /**
@@ -34,7 +33,7 @@ export function errorResponse(statusCode, message) {
     status: statusCode,
     headers: {
       "Content-Type": "application/json",
-      "Access-Control-Allow-Origin": getCorsOrigin(),
+      "Access-Control-Allow-Origin": "*",
     },
   });
 }
@@ -132,11 +131,7 @@ export async function parseUpstreamError(response, provider = null) {
  * @param {number|null} retryAfterMs - Optional retry-after time in milliseconds
  * @returns {{ success: false, status: number, error: string, response: Response, retryAfterMs?: number }}
  */
-export function createErrorResult(
-  statusCode: number,
-  message: string,
-  retryAfterMs: number | null = null
-) {
+export function createErrorResult(statusCode: number, message: string, retryAfterMs: number | null = null) {
   const result: Record<string, any> = {
     success: false,
     status: statusCode,

open-sse/utils/ollamaTransform.ts

@@ -1,4 +1,3 @@
-import { getCorsOrigin } from "./cors.ts";
 // Transform OpenAI SSE stream to Ollama JSON lines format
 export function transformToOllama(response, model) {
   let buffer = "";
@@ -86,9 +85,6 @@ export function transformToOllama(response, model) {
   });
 
   return new Response(response.body.pipeThrough(transform), {
-    headers: {
-      "Content-Type": "application/x-ndjson",
-      "Access-Control-Allow-Origin": getCorsOrigin(),
-    },
+    headers: { "Content-Type": "application/x-ndjson", "Access-Control-Allow-Origin": "*" },
   });
 }

open-sse/utils/stream.ts

@@ -12,10 +12,6 @@ import {
 } from "./usageTracking.ts";
 import { parseSSELine, hasValuableContent, fixInvalidId, formatSSE } from "./streamHelpers.ts";
 import { STREAM_IDLE_TIMEOUT_MS, HTTP_STATUS } from "../config/constants.ts";
-import {
-  sanitizeStreamingChunk,
-  extractThinkingFromContent,
-} from "../handlers/responseSanitizer.ts";
 
 export { COLORS, formatSSE };
 
@@ -134,10 +130,7 @@ export function createSSEStream(options: any = {}) {
 
             if (trimmed.startsWith("data:") && trimmed.slice(5).trim() !== "[DONE]") {
               try {
-                let parsed = JSON.parse(trimmed.slice(5).trim());
-
-                // Sanitize: strip non-standard fields for OpenAI SDK compatibility
-                parsed = sanitizeStreamingChunk(parsed);
+                const parsed = JSON.parse(trimmed.slice(5).trim());
 
                 const idFixed = fixInvalidId(parsed);
 
@@ -146,16 +139,6 @@ export function createSSEStream(options: any = {}) {
                 }
 
                 const delta = parsed.choices?.[0]?.delta;
-
-                // Extract <think> tags from streaming content
-                if (delta?.content && typeof delta.content === "string") {
-                  const { content, thinking } = extractThinkingFromContent(delta.content);
-                  delta.content = content;
-                  if (thinking && !delta.reasoning_content) {
-                    delta.reasoning_content = thinking;
-                  }
-                }
-
                 const content = delta?.content || delta?.reasoning_content;
                 if (content && typeof content === "string") {
                   totalContentLength += content.length;

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "omniroute",
-  "version": "1.0.6",
+  "version": "0.8.5",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "omniroute",
-      "version": "1.0.6",
+      "version": "0.8.5",
       "license": "MIT",
       "workspaces": [
         "open-sse"
@@ -58,8 +58,7 @@
         "prettier": "^3.8.1",
         "tailwindcss": "^4",
         "tsx": "^4.21.0",
-        "typescript": "^5.9.3",
-        "typescript-eslint": "^8.56.0"
+        "typescript": "^5.9.3"
       },
       "engines": {
         "node": ">=18.0.0"
@@ -2490,79 +2489,15 @@
       "integrity": "sha512-zFDAD+tlpf2r4asuHEj0XH6pY6i0g5NeAHPn+15wk3BV6JA69eERFXC1gyGThDkVa1zCyKr5jox1+2LbV/AMLg==",
       "license": "MIT"
     },
-    "node_modules/@typescript-eslint/eslint-plugin": {
-      "version": "8.56.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.56.0.tgz",
-      "integrity": "sha512-lRyPDLzNCuae71A3t9NEINBiTn7swyOhvUj3MyUOxb8x6g6vPEFoOU+ZRmGMusNC3X3YMhqMIX7i8ShqhT74Pw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@eslint-community/regexpp": "^4.12.2",
-        "@typescript-eslint/scope-manager": "8.56.0",
-        "@typescript-eslint/type-utils": "8.56.0",
-        "@typescript-eslint/utils": "8.56.0",
-        "@typescript-eslint/visitor-keys": "8.56.0",
-        "ignore": "^7.0.5",
-        "natural-compare": "^1.4.0",
-        "ts-api-utils": "^2.4.0"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      },
-      "peerDependencies": {
-        "@typescript-eslint/parser": "^8.56.0",
-        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
-        "typescript": ">=4.8.4 <6.0.0"
-      }
-    },
-    "node_modules/@typescript-eslint/eslint-plugin/node_modules/ignore": {
-      "version": "7.0.5",
-      "resolved": "https://registry.npmjs.org/ignore/-/ignore-7.0.5.tgz",
-      "integrity": "sha512-Hs59xBNfUIunMFgWAbGX5cq6893IbWg4KnrjbYwX3tx0ztorVgTDA6B2sxf8ejHJ4wz8BqGUMYlnzNBer5NvGg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">= 4"
-      }
-    },
-    "node_modules/@typescript-eslint/parser": {
-      "version": "8.56.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.56.0.tgz",
-      "integrity": "sha512-IgSWvLobTDOjnaxAfDTIHaECbkNlAlKv2j5SjpB2v7QHKv1FIfjwMy8FsDbVfDX/KjmCmYICcw7uGaXLhtsLNg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@typescript-eslint/scope-manager": "8.56.0",
-        "@typescript-eslint/types": "8.56.0",
-        "@typescript-eslint/typescript-estree": "8.56.0",
-        "@typescript-eslint/visitor-keys": "8.56.0",
-        "debug": "^4.4.3"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      },
-      "peerDependencies": {
-        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
-        "typescript": ">=4.8.4 <6.0.0"
-      }
-    },
     "node_modules/@typescript-eslint/project-service": {
-      "version": "8.56.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/project-service/-/project-service-8.56.0.tgz",
-      "integrity": "sha512-M3rnyL1vIQOMeWxTWIW096/TtVP+8W3p/XnaFflhmcFp+U4zlxUxWj4XwNs6HbDeTtN4yun0GNTTDBw/SvufKg==",
+      "version": "8.55.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/project-service/-/project-service-8.55.0.tgz",
+      "integrity": "sha512-zRcVVPFUYWa3kNnjaZGXSu3xkKV1zXy8M4nO/pElzQhFweb7PPtluDLQtKArEOGmjXoRjnUZ29NjOiF0eCDkcQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/tsconfig-utils": "^8.56.0",
-        "@typescript-eslint/types": "^8.56.0",
+        "@typescript-eslint/tsconfig-utils": "^8.55.0",
+        "@typescript-eslint/types": "^8.55.0",
         "debug": "^4.4.3"
       },
       "engines": {
@@ -2577,14 +2512,14 @@
       }
     },
     "node_modules/@typescript-eslint/scope-manager": {
-      "version": "8.56.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.56.0.tgz",
-      "integrity": "sha512-7UiO/XwMHquH+ZzfVCfUNkIXlp/yQjjnlYUyYz7pfvlK3/EyyN6BK+emDmGNyQLBtLGaYrTAI6KOw8tFucWL2w==",
+      "version": "8.55.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-8.55.0.tgz",
+      "integrity": "sha512-fVu5Omrd3jeqeQLiB9f1YsuK/iHFOwb04bCtY4BSCLgjNbOD33ZdV6KyEqplHr+IlpgT0QTZ/iJ+wT7hvTx49Q==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/types": "8.56.0",
-        "@typescript-eslint/visitor-keys": "8.56.0"
+        "@typescript-eslint/types": "8.55.0",
+        "@typescript-eslint/visitor-keys": "8.55.0"
       },
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -2595,9 +2530,9 @@
       }
     },
     "node_modules/@typescript-eslint/tsconfig-utils": {
-      "version": "8.56.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/tsconfig-utils/-/tsconfig-utils-8.56.0.tgz",
-      "integrity": "sha512-bSJoIIt4o3lKXD3xmDh9chZcjCz5Lk8xS7Rxn+6l5/pKrDpkCwtQNQQwZ2qRPk7TkUYhrq3WPIHXOXlbXP0itg==",
+      "version": "8.55.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/tsconfig-utils/-/tsconfig-utils-8.55.0.tgz",
+      "integrity": "sha512-1R9cXqY7RQd7WuqSN47PK9EDpgFUK3VqdmbYrvWJZYDd0cavROGn+74ktWBlmJ13NXUQKlZ/iAEQHI/V0kKe0Q==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -2611,35 +2546,10 @@
         "typescript": ">=4.8.4 <6.0.0"
       }
     },
-    "node_modules/@typescript-eslint/type-utils": {
-      "version": "8.56.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.56.0.tgz",
-      "integrity": "sha512-qX2L3HWOU2nuDs6GzglBeuFXviDODreS58tLY/BALPC7iu3Fa+J7EOTwnX9PdNBxUI7Uh0ntP0YWGnxCkXzmfA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@typescript-eslint/types": "8.56.0",
-        "@typescript-eslint/typescript-estree": "8.56.0",
-        "@typescript-eslint/utils": "8.56.0",
-        "debug": "^4.4.3",
-        "ts-api-utils": "^2.4.0"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      },
-      "peerDependencies": {
-        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
-        "typescript": ">=4.8.4 <6.0.0"
-      }
-    },
     "node_modules/@typescript-eslint/types": {
-      "version": "8.56.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.56.0.tgz",
-      "integrity": "sha512-DBsLPs3GsWhX5HylbP9HNG15U0bnwut55Lx12bHB9MpXxQ+R5GC8MwQe+N1UFXxAeQDvEsEDY6ZYwX03K7Z6HQ==",
+      "version": "8.55.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-8.55.0.tgz",
+      "integrity": "sha512-ujT0Je8GI5BJWi+/mMoR0wxwVEQaxM+pi30xuMiJETlX80OPovb2p9E8ss87gnSVtYXtJoU9U1Cowcr6w2FE0w==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -2651,16 +2561,16 @@
       }
     },
     "node_modules/@typescript-eslint/typescript-estree": {
-      "version": "8.56.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.56.0.tgz",
-      "integrity": "sha512-ex1nTUMWrseMltXUHmR2GAQ4d+WjkZCT4f+4bVsps8QEdh0vlBsaCokKTPlnqBFqqGaxilDNJG7b8dolW2m43Q==",
+      "version": "8.55.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-8.55.0.tgz",
+      "integrity": "sha512-EwrH67bSWdx/3aRQhCoxDaHM+CrZjotc2UCCpEDVqfCE+7OjKAGWNY2HsCSTEVvWH2clYQK8pdeLp42EVs+xQw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/project-service": "8.56.0",
-        "@typescript-eslint/tsconfig-utils": "8.56.0",
-        "@typescript-eslint/types": "8.56.0",
-        "@typescript-eslint/visitor-keys": "8.56.0",
+        "@typescript-eslint/project-service": "8.55.0",
+        "@typescript-eslint/tsconfig-utils": "8.55.0",
+        "@typescript-eslint/types": "8.55.0",
+        "@typescript-eslint/visitor-keys": "8.55.0",
         "debug": "^4.4.3",
         "minimatch": "^9.0.5",
         "semver": "^7.7.3",
@@ -2717,39 +2627,15 @@
         "node": ">=10"
       }
     },
-    "node_modules/@typescript-eslint/utils": {
-      "version": "8.56.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.56.0.tgz",
-      "integrity": "sha512-RZ3Qsmi2nFGsS+n+kjLAYDPVlrzf7UhTffrDIKr+h2yzAlYP/y5ZulU0yeDEPItos2Ph46JAL5P/On3pe7kDIQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@eslint-community/eslint-utils": "^4.9.1",
-        "@typescript-eslint/scope-manager": "8.56.0",
-        "@typescript-eslint/types": "8.56.0",
-        "@typescript-eslint/typescript-estree": "8.56.0"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      },
-      "peerDependencies": {
-        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
-        "typescript": ">=4.8.4 <6.0.0"
-      }
-    },
     "node_modules/@typescript-eslint/visitor-keys": {
-      "version": "8.56.0",
-      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.56.0.tgz",
-      "integrity": "sha512-q+SL+b+05Ud6LbEE35qe4A99P+htKTKVbyiNEe45eCbJFyh/HVK9QXwlrbz+Q4L8SOW4roxSVwXYj4DMBT7Ieg==",
+      "version": "8.55.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-8.55.0.tgz",
+      "integrity": "sha512-AxNRwEie8Nn4eFS1FzDMJWIISMGoXMb037sgCBJ3UR6o0fQTzr2tqN9WT+DkWJPhIdQCfV7T6D387566VtnCJA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@typescript-eslint/types": "8.56.0",
-        "eslint-visitor-keys": "^5.0.0"
+        "@typescript-eslint/types": "8.55.0",
+        "eslint-visitor-keys": "^4.2.1"
       },
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -2759,19 +2645,6 @@
         "url": "https://opencollective.com/typescript-eslint"
       }
     },
-    "node_modules/@typescript-eslint/visitor-keys/node_modules/eslint-visitor-keys": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/eslint-visitor-keys/-/eslint-visitor-keys-5.0.0.tgz",
-      "integrity": "sha512-A0XeIi7CXU7nPlfHS9loMYEKxUaONu/hTEzHTGba9Huu94Cq1hPivf+DE5erJozZOky0LfvXAyrV/tcswpLI0Q==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "engines": {
-        "node": "^20.19.0 || ^22.13.0 || >=24"
-      },
-      "funding": {
-        "url": "https://opencollective.com/eslint"
-      }
-    },
     "node_modules/@unrs/resolver-binding-android-arm-eabi": {
       "version": "1.11.1",
       "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-android-arm-eabi/-/resolver-binding-android-arm-eabi-1.11.1.tgz",
@@ -3840,7 +3713,7 @@
       }
     },
     "node_modules/content-type": {
-      "version": "1.0.6",
+      "version": "1.0.5",
       "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
       "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
       "license": "MIT",
@@ -4852,6 +4725,16 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/eslint-config-next/node_modules/ignore": {
+      "version": "7.0.5",
+      "resolved": "https://registry.npmjs.org/ignore/-/ignore-7.0.5.tgz",
+      "integrity": "sha512-Hs59xBNfUIunMFgWAbGX5cq6893IbWg4KnrjbYwX3tx0ztorVgTDA6B2sxf8ejHJ4wz8BqGUMYlnzNBer5NvGg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 4"
+      }
+    },
     "node_modules/eslint-config-next/node_modules/resolve": {
       "version": "2.0.0-next.5",
       "resolved": "https://registry.npmjs.org/resolve/-/resolve-2.0.0-next.5.tgz",
@@ -4870,6 +4753,133 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/eslint-config-next/node_modules/typescript-eslint": {
+      "version": "8.55.0",
+      "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.55.0.tgz",
+      "integrity": "sha512-HE4wj+r5lmDVS9gdaN0/+iqNvPZwGfnJ5lZuz7s5vLlg9ODw0bIiiETaios9LvFI1U94/VBXGm3CB2Y5cNFMpw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@typescript-eslint/eslint-plugin": "8.55.0",
+        "@typescript-eslint/parser": "8.55.0",
+        "@typescript-eslint/typescript-estree": "8.55.0",
+        "@typescript-eslint/utils": "8.55.0"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "eslint": "^8.57.0 || ^9.0.0",
+        "typescript": ">=4.8.4 <6.0.0"
+      }
+    },
+    "node_modules/eslint-config-next/node_modules/typescript-eslint/node_modules/@typescript-eslint/eslint-plugin": {
+      "version": "8.55.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-8.55.0.tgz",
+      "integrity": "sha512-1y/MVSz0NglV1ijHC8OT49mPJ4qhPYjiK08YUQVbIOyu+5k862LKUHFkpKHWu//zmr7hDR2rhwUm6gnCGNmGBQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@eslint-community/regexpp": "^4.12.2",
+        "@typescript-eslint/scope-manager": "8.55.0",
+        "@typescript-eslint/type-utils": "8.55.0",
+        "@typescript-eslint/utils": "8.55.0",
+        "@typescript-eslint/visitor-keys": "8.55.0",
+        "ignore": "^7.0.5",
+        "natural-compare": "^1.4.0",
+        "ts-api-utils": "^2.4.0"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "@typescript-eslint/parser": "^8.55.0",
+        "eslint": "^8.57.0 || ^9.0.0",
+        "typescript": ">=4.8.4 <6.0.0"
+      }
+    },
+    "node_modules/eslint-config-next/node_modules/typescript-eslint/node_modules/@typescript-eslint/eslint-plugin/node_modules/@typescript-eslint/type-utils": {
+      "version": "8.55.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-8.55.0.tgz",
+      "integrity": "sha512-x1iH2unH4qAt6I37I2CGlsNs+B9WGxurP2uyZLRz6UJoZWDBx9cJL1xVN/FiOmHEONEg6RIufdvyT0TEYIgC5g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@typescript-eslint/types": "8.55.0",
+        "@typescript-eslint/typescript-estree": "8.55.0",
+        "@typescript-eslint/utils": "8.55.0",
+        "debug": "^4.4.3",
+        "ts-api-utils": "^2.4.0"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "eslint": "^8.57.0 || ^9.0.0",
+        "typescript": ">=4.8.4 <6.0.0"
+      }
+    },
+    "node_modules/eslint-config-next/node_modules/typescript-eslint/node_modules/@typescript-eslint/parser": {
+      "version": "8.55.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.55.0.tgz",
+      "integrity": "sha512-4z2nCSBfVIMnbuu8uinj+f0o4qOeggYJLbjpPHka3KH1om7e+H9yLKTYgksTaHcGco+NClhhY2vyO3HsMH1RGw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@typescript-eslint/scope-manager": "8.55.0",
+        "@typescript-eslint/types": "8.55.0",
+        "@typescript-eslint/typescript-estree": "8.55.0",
+        "@typescript-eslint/visitor-keys": "8.55.0",
+        "debug": "^4.4.3"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "eslint": "^8.57.0 || ^9.0.0",
+        "typescript": ">=4.8.4 <6.0.0"
+      }
+    },
+    "node_modules/eslint-config-next/node_modules/typescript-eslint/node_modules/@typescript-eslint/utils": {
+      "version": "8.55.0",
+      "resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-8.55.0.tgz",
+      "integrity": "sha512-BqZEsnPGdYpgyEIkDC1BadNY8oMwckftxBT+C8W0g1iKPdeqKZBtTfnvcq0nf60u7MkjFO8RBvpRGZBPw4L2ow==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@eslint-community/eslint-utils": "^4.9.1",
+        "@typescript-eslint/scope-manager": "8.55.0",
+        "@typescript-eslint/types": "8.55.0",
+        "@typescript-eslint/typescript-estree": "8.55.0"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/typescript-eslint"
+      },
+      "peerDependencies": {
+        "eslint": "^8.57.0 || ^9.0.0",
+        "typescript": ">=4.8.4 <6.0.0"
+      }
+    },
     "node_modules/eslint-import-resolver-node": {
       "version": "0.3.9",
       "resolved": "https://registry.npmjs.org/eslint-import-resolver-node/-/eslint-import-resolver-node-0.3.9.tgz",
@@ -9605,30 +9615,6 @@
         "node": ">=14.17"
       }
     },
-    "node_modules/typescript-eslint": {
-      "version": "8.56.0",
-      "resolved": "https://registry.npmjs.org/typescript-eslint/-/typescript-eslint-8.56.0.tgz",
-      "integrity": "sha512-c7toRLrotJ9oixgdW7liukZpsnq5CZ7PuKztubGYlNppuTqhIoWfhgHo/7EU0v06gS2l/x0i2NEFK1qMIf0rIg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@typescript-eslint/eslint-plugin": "8.56.0",
-        "@typescript-eslint/parser": "8.56.0",
-        "@typescript-eslint/typescript-estree": "8.56.0",
-        "@typescript-eslint/utils": "8.56.0"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/typescript-eslint"
-      },
-      "peerDependencies": {
-        "eslint": "^8.57.0 || ^9.0.0 || ^10.0.0",
-        "typescript": ">=4.8.4 <6.0.0"
-      }
-    },
     "node_modules/unbox-primitive": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.1.0.tgz",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "omniroute",
-  "version": "1.0.10",
+  "version": "0.9.0",
   "description": "Smart AI Router with auto fallback — route to FREE & cheap models, zero downtime. Works with Cursor, Cline, Claude Desktop, Codex, and any OpenAI-compatible tool.",
   "type": "module",
   "bin": {
@@ -53,7 +53,7 @@
     "test:fixes": "node --test tests/unit/fixes-p1.test.mjs",
     "test:security": "node --test tests/unit/security-fase01.test.mjs",
     "test:e2e": "npx playwright test",
-    "test:coverage": "npx c8 --exclude=open-sse --check-coverage --lines 50 --functions 50 --branches 50 node --import tsx/esm --test tests/unit/*.test.mjs",
+    "test:coverage": "npx c8 --check-coverage --lines 50 --functions 40 --branches 40 node --test tests/unit/*.test.mjs",
     "test:all": "npm run test:unit && npm run test:e2e",
     "check": "npm run lint && npm run test",
     "prepublishOnly": "npm run build:cli",
@@ -102,8 +102,7 @@
     "prettier": "^3.8.1",
     "tailwindcss": "^4",
     "tsx": "^4.21.0",
-    "typescript": "^5.9.3",
-    "typescript-eslint": "^8.56.0"
+    "typescript": "^5.9.3"
   },
   "lint-staged": {
     "*.{js,jsx,ts,tsx,mjs}": [

src/app/(dashboard)/dashboard/HomePageClient.tsx

@@ -158,10 +158,10 @@ export default function HomePageClient({ machineId }) {
                 <span className="font-semibold">1. Create API key</span>
                 <p className="text-text-muted mt-0.5">
                   Go to{" "}
-                  <Link href="/dashboard/endpoint" className="text-primary hover:underline">
-                    Endpoint
+                  <Link href="/dashboard/settings" className="text-primary hover:underline">
+                    Settings
                   </Link>{" "}
-                  → Registered Keys. Generate one key per environment.
+                  → API Keys. Generate one key per environment.
                 </p>
               </div>
             </li>

src/app/(dashboard)/dashboard/analytics/loading.tsx

@@ -1,15 +0,0 @@
-"use client";
-
-export default function AnalyticsLoading() {
-  return (
-    <div className="space-y-6 animate-pulse p-6">
-      <div className="h-8 bg-gray-200 dark:bg-gray-700 rounded w-40" />
-      <div className="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-4 gap-4">
-        {[1, 2, 3, 4].map((i) => (
-          <div key={i} className="h-24 bg-gray-200 dark:bg-gray-700 rounded-lg" />
-        ))}
-      </div>
-      <div className="h-64 bg-gray-200 dark:bg-gray-700 rounded-lg" />
-    </div>
-  );
-}

src/app/(dashboard)/dashboard/audit-log/page.tsx

@@ -1,240 +0,0 @@
-"use client";
-
-/**
- * Audit Log Viewer — P-2
- *
- * Dashboard page for viewing administrative audit log entries.
- * Fetches from /api/compliance/audit-log with filter support.
- */
-
-import { useState, useEffect, useCallback } from "react";
-
-interface AuditEntry {
-  id: number;
-  timestamp: string;
-  action: string;
-  actor: string;
-  target: string | null;
-  details: any;
-  ip_address: string | null;
-}
-
-const PAGE_SIZE = 25;
-
-export default function AuditLogPage() {
-  const [entries, setEntries] = useState<AuditEntry[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [error, setError] = useState<string | null>(null);
-  const [actionFilter, setActionFilter] = useState("");
-  const [actorFilter, setActorFilter] = useState("");
-  const [offset, setOffset] = useState(0);
-  const [hasMore, setHasMore] = useState(false);
-
-  const fetchEntries = useCallback(async () => {
-    setLoading(true);
-    setError(null);
-    try {
-      const params = new URLSearchParams();
-      if (actionFilter) params.set("action", actionFilter);
-      if (actorFilter) params.set("actor", actorFilter);
-      params.set("limit", String(PAGE_SIZE + 1));
-      params.set("offset", String(offset));
-
-      const res = await fetch(`/api/compliance/audit-log?${params.toString()}`);
-      if (!res.ok) throw new Error(`HTTP ${res.status}`);
-      const data: AuditEntry[] = await res.json();
-
-      setHasMore(data.length > PAGE_SIZE);
-      setEntries(data.slice(0, PAGE_SIZE));
-    } catch (err: any) {
-      setError(err.message || "Failed to fetch audit log");
-    } finally {
-      setLoading(false);
-    }
-  }, [actionFilter, actorFilter, offset]);
-
-  useEffect(() => {
-    fetchEntries();
-  }, [fetchEntries]);
-
-  const handleSearch = () => {
-    setOffset(0);
-    fetchEntries();
-  };
-
-  const formatTimestamp = (ts: string) => {
-    try {
-      return new Date(ts).toLocaleString();
-    } catch {
-      return ts;
-    }
-  };
-
-  const actionBadgeColor = (action: string) => {
-    if (action.includes("delete") || action.includes("remove"))
-      return "bg-red-500/15 text-red-400 border-red-500/20";
-    if (action.includes("create") || action.includes("add"))
-      return "bg-green-500/15 text-green-400 border-green-500/20";
-    if (action.includes("update") || action.includes("change"))
-      return "bg-blue-500/15 text-blue-400 border-blue-500/20";
-    if (action.includes("login") || action.includes("auth"))
-      return "bg-purple-500/15 text-purple-400 border-purple-500/20";
-    return "bg-gray-500/15 text-gray-400 border-gray-500/20";
-  };
-
-  return (
-    <div className="max-w-6xl mx-auto p-6 space-y-6">
-      {/* Header */}
-      <div className="flex items-center justify-between">
-        <div>
-          <h1 className="text-2xl font-bold text-[var(--color-text-main)]">
-            Audit Log
-          </h1>
-          <p className="text-sm text-[var(--color-text-muted)] mt-1">
-            Administrative actions and security events
-          </p>
-        </div>
-        <button
-          onClick={fetchEntries}
-          disabled={loading}
-          aria-label="Refresh audit log"
-          className="px-4 py-2 rounded-lg text-sm font-medium bg-[var(--color-surface)] border border-[var(--color-border)] text-[var(--color-text-main)] hover:bg-[var(--color-bg-alt)] transition-colors disabled:opacity-50"
-        >
-          {loading ? "Loading..." : "Refresh"}
-        </button>
-      </div>
-
-      {/* Filters */}
-      <div
-        className="flex flex-wrap gap-3 p-4 rounded-xl bg-[var(--color-surface)] border border-[var(--color-border)]"
-        role="search"
-        aria-label="Filter audit log entries"
-      >
-        <input
-          type="text"
-          placeholder="Filter by action..."
-          value={actionFilter}
-          onChange={(e) => setActionFilter(e.target.value)}
-          onKeyDown={(e) => e.key === "Enter" && handleSearch()}
-          aria-label="Filter by action type"
-          className="flex-1 min-w-[180px] px-3 py-2 rounded-lg text-sm bg-[var(--color-bg)] border border-[var(--color-border)] text-[var(--color-text-main)] placeholder:text-[var(--color-text-muted)] focus:outline-2 focus:outline-[var(--color-accent)]"
-        />
-        <input
-          type="text"
-          placeholder="Filter by actor..."
-          value={actorFilter}
-          onChange={(e) => setActorFilter(e.target.value)}
-          onKeyDown={(e) => e.key === "Enter" && handleSearch()}
-          aria-label="Filter by actor"
-          className="flex-1 min-w-[180px] px-3 py-2 rounded-lg text-sm bg-[var(--color-bg)] border border-[var(--color-border)] text-[var(--color-text-main)] placeholder:text-[var(--color-text-muted)] focus:outline-2 focus:outline-[var(--color-accent)]"
-        />
-        <button
-          onClick={handleSearch}
-          className="px-4 py-2 rounded-lg text-sm font-medium bg-[var(--color-accent)] text-white hover:bg-[var(--color-accent-hover)] transition-colors focus:outline-2 focus:outline-offset-2 focus:outline-[var(--color-accent)]"
-        >
-          Search
-        </button>
-      </div>
-
-      {/* Error */}
-      {error && (
-        <div
-          className="p-4 rounded-lg bg-red-500/10 border border-red-500/30 text-red-400 text-sm"
-          role="alert"
-        >
-          {error}
-        </div>
-      )}
-
-      {/* Table */}
-      <div className="overflow-x-auto rounded-xl border border-[var(--color-border)]">
-        <table className="w-full text-sm" role="table" aria-label="Audit log entries">
-          <thead>
-            <tr className="bg-[var(--color-bg-alt)] border-b border-[var(--color-border)]">
-              <th className="text-left px-4 py-3 font-medium text-[var(--color-text-muted)]">
-                Timestamp
-              </th>
-              <th className="text-left px-4 py-3 font-medium text-[var(--color-text-muted)]">
-                Action
-              </th>
-              <th className="text-left px-4 py-3 font-medium text-[var(--color-text-muted)]">
-                Actor
-              </th>
-              <th className="text-left px-4 py-3 font-medium text-[var(--color-text-muted)]">
-                Target
-              </th>
-              <th className="text-left px-4 py-3 font-medium text-[var(--color-text-muted)]">
-                Details
-              </th>
-              <th className="text-left px-4 py-3 font-medium text-[var(--color-text-muted)]">
-                IP
-              </th>
-            </tr>
-          </thead>
-          <tbody>
-            {entries.length === 0 && !loading ? (
-              <tr>
-                <td colSpan={6} className="px-4 py-8 text-center text-[var(--color-text-muted)]">
-                  No audit log entries found
-                </td>
-              </tr>
-            ) : (
-              entries.map((entry) => (
-                <tr
-                  key={entry.id}
-                  className="border-b border-[var(--color-border)] hover:bg-[var(--color-bg-alt)] transition-colors"
-                >
-                  <td className="px-4 py-3 whitespace-nowrap text-[var(--color-text-muted)] font-mono text-xs">
-                    {formatTimestamp(entry.timestamp)}
-                  </td>
-                  <td className="px-4 py-3">
-                    <span
-                      className={`inline-block px-2 py-0.5 rounded-md text-xs font-medium border ${actionBadgeColor(entry.action)}`}
-                    >
-                      {entry.action}
-                    </span>
-                  </td>
-                  <td className="px-4 py-3 text-[var(--color-text-main)]">
-                    {entry.actor}
-                  </td>
-                  <td className="px-4 py-3 text-[var(--color-text-muted)] max-w-[200px] truncate">
-                    {entry.target || "—"}
-                  </td>
-                  <td className="px-4 py-3 text-[var(--color-text-muted)] max-w-[300px] truncate font-mono text-xs">
-                    {entry.details ? JSON.stringify(entry.details) : "—"}
-                  </td>
-                  <td className="px-4 py-3 text-[var(--color-text-muted)] font-mono text-xs whitespace-nowrap">
-                    {entry.ip_address || "—"}
-                  </td>
-                </tr>
-              ))
-            )}
-          </tbody>
-        </table>
-      </div>
-
-      {/* Pagination */}
-      <div className="flex items-center justify-between">
-        <p className="text-xs text-[var(--color-text-muted)]">
-          Showing {entries.length} entries (offset {offset})
-        </p>
-        <div className="flex gap-2">
-          <button
-            onClick={() => setOffset(Math.max(0, offset - PAGE_SIZE))}
-            disabled={offset === 0}
-            className="px-3 py-1.5 rounded-lg text-xs font-medium bg-[var(--color-surface)] border border-[var(--color-border)] text-[var(--color-text-main)] hover:bg-[var(--color-bg-alt)] disabled:opacity-30 transition-colors"
-          >
-            ← Previous
-          </button>
-          <button
-            onClick={() => setOffset(offset + PAGE_SIZE)}
-            disabled={!hasMore}
-            className="px-3 py-1.5 rounded-lg text-xs font-medium bg-[var(--color-surface)] border border-[var(--color-border)] text-[var(--color-text-main)] hover:bg-[var(--color-bg-alt)] disabled:opacity-30 transition-colors"
-          >
-            Next →
-          </button>
-        </div>
-      </div>
-    </div>
-  );
-}

src/app/(dashboard)/dashboard/combos/page.tsx

@@ -6,7 +6,6 @@ import {
   Button,
   Modal,
   Input,
-  Toggle,
   CardSkeleton,
   ModelSelectModal,
   ProxyConfigModal,
@@ -171,25 +170,6 @@ export default function CombosPage() {
     }
   };
 
-  const handleToggleCombo = async (combo) => {
-    const newActive = combo.isActive === false ? true : false;
-    // Optimistic update
-    setCombos((prev) => prev.map((c) => (c.id === combo.id ? { ...c, isActive: newActive } : c)));
-    try {
-      await fetch(`/api/combos/${combo.id}`, {
-        method: "PUT",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ isActive: newActive }),
-      });
-    } catch (error) {
-      // Revert on error
-      setCombos((prev) =>
-        prev.map((c) => (c.id === combo.id ? { ...c, isActive: !newActive } : c))
-      );
-      notify.error("Failed to toggle combo");
-    }
-  };
-
   if (loading) {
     return (
       <div className="flex flex-col gap-6">
@@ -239,7 +219,6 @@ export default function CombosPage() {
               testing={testingCombo === combo.name}
               onProxy={() => setProxyTargetCombo(combo)}
               hasProxy={!!proxyConfig?.combos?.[combo.id]}
-              onToggle={() => handleToggleCombo(combo)}
             />
           ))}
         </div>
@@ -308,14 +287,12 @@ function ComboCard({
   testing,
   onProxy,
   hasProxy,
-  onToggle,
 }) {
   const strategy = combo.strategy || "priority";
   const models = combo.models || [];
-  const isDisabled = combo.isActive === false;
 
   return (
-    <Card padding="sm" className={`group ${isDisabled ? "opacity-50" : ""}`}>
+    <Card padding="sm" className="group">
       <div className="flex items-center justify-between">
         <div className="flex items-center gap-3 flex-1 min-w-0">
           {/* Icon */}
@@ -409,55 +386,47 @@ function ComboCard({
         </div>
 
         {/* Actions */}
-        <div className="flex items-center gap-1.5 shrink-0 ml-2">
-          <Toggle
-            size="sm"
-            checked={!isDisabled}
-            onChange={onToggle}
-            title={isDisabled ? "Enable combo" : "Disable combo"}
-          />
-          <div className="flex items-center gap-1 opacity-0 group-hover:opacity-100 transition-opacity">
-            <button
-              onClick={onTest}
-              disabled={testing}
-              className="p-1.5 hover:bg-black/5 dark:hover:bg-white/5 rounded text-text-muted hover:text-emerald-500 transition-colors"
-              title="Test combo"
+        <div className="flex gap-0.5 opacity-0 group-hover:opacity-100 transition-opacity shrink-0">
+          <button
+            onClick={onTest}
+            disabled={testing}
+            className="p-1.5 hover:bg-black/5 dark:hover:bg-white/5 rounded text-text-muted hover:text-emerald-500 transition-colors"
+            title="Test combo"
+          >
+            <span
+              className={`material-symbols-outlined text-[16px] ${testing ? "animate-spin" : ""}`}
             >
-              <span
-                className={`material-symbols-outlined text-[16px] ${testing ? "animate-spin" : ""}`}
-              >
-                {testing ? "progress_activity" : "play_arrow"}
-              </span>
-            </button>
-            <button
-              onClick={onDuplicate}
-              className="p-1.5 hover:bg-black/5 dark:hover:bg-white/5 rounded text-text-muted hover:text-primary transition-colors"
-              title="Duplicate"
-            >
-              <span className="material-symbols-outlined text-[16px]">content_copy</span>
-            </button>
-            <button
-              onClick={onProxy}
-              className="p-1.5 hover:bg-black/5 dark:hover:bg-white/5 rounded text-text-muted hover:text-primary transition-colors"
-              title="Proxy configuration"
-            >
-              <span className="material-symbols-outlined text-[16px]">vpn_lock</span>
-            </button>
-            <button
-              onClick={onEdit}
-              className="p-1.5 hover:bg-black/5 dark:hover:bg-white/5 rounded text-text-muted hover:text-primary transition-colors"
-              title="Edit"
-            >
-              <span className="material-symbols-outlined text-[16px]">edit</span>
-            </button>
-            <button
-              onClick={onDelete}
-              className="p-1.5 hover:bg-red-500/10 rounded text-red-500 transition-colors"
-              title="Delete"
-            >
-              <span className="material-symbols-outlined text-[16px]">delete</span>
-            </button>
-          </div>
+              {testing ? "progress_activity" : "play_arrow"}
+            </span>
+          </button>
+          <button
+            onClick={onDuplicate}
+            className="p-1.5 hover:bg-black/5 dark:hover:bg-white/5 rounded text-text-muted hover:text-primary transition-colors"
+            title="Duplicate"
+          >
+            <span className="material-symbols-outlined text-[16px]">content_copy</span>
+          </button>
+          <button
+            onClick={onProxy}
+            className="p-1.5 hover:bg-black/5 dark:hover:bg-white/5 rounded text-text-muted hover:text-primary transition-colors"
+            title="Proxy configuration"
+          >
+            <span className="material-symbols-outlined text-[16px]">vpn_lock</span>
+          </button>
+          <button
+            onClick={onEdit}
+            className="p-1.5 hover:bg-black/5 dark:hover:bg-white/5 rounded text-text-muted hover:text-primary transition-colors"
+            title="Edit"
+          >
+            <span className="material-symbols-outlined text-[16px]">edit</span>
+          </button>
+          <button
+            onClick={onDelete}
+            className="p-1.5 hover:bg-red-500/10 rounded text-red-500 transition-colors"
+            title="Delete"
+          >
+            <span className="material-symbols-outlined text-[16px]">delete</span>
+          </button>
         </div>
       </div>
     </Card>

src/app/(dashboard)/dashboard/logs/AuditLogTab.tsx

@@ -1,232 +0,0 @@
-"use client";
-
-/**
- * Audit Log Tab — Embedded version of the audit-log page for the Logs dashboard.
- * Fetches from /api/compliance/audit-log with filter support.
- */
-
-import { useState, useEffect, useCallback } from "react";
-
-interface AuditEntry {
-  id: number;
-  timestamp: string;
-  action: string;
-  actor: string;
-  target: string | null;
-  details: any;
-  ip_address: string | null;
-}
-
-const PAGE_SIZE = 25;
-
-export default function AuditLogTab() {
-  const [entries, setEntries] = useState<AuditEntry[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [error, setError] = useState<string | null>(null);
-  const [actionFilter, setActionFilter] = useState("");
-  const [actorFilter, setActorFilter] = useState("");
-  const [offset, setOffset] = useState(0);
-  const [hasMore, setHasMore] = useState(false);
-
-  const fetchEntries = useCallback(async () => {
-    setLoading(true);
-    setError(null);
-    try {
-      const params = new URLSearchParams();
-      if (actionFilter) params.set("action", actionFilter);
-      if (actorFilter) params.set("actor", actorFilter);
-      params.set("limit", String(PAGE_SIZE + 1));
-      params.set("offset", String(offset));
-
-      const res = await fetch(`/api/compliance/audit-log?${params.toString()}`);
-      if (!res.ok) throw new Error(`HTTP ${res.status}`);
-      const data: AuditEntry[] = await res.json();
-
-      setHasMore(data.length > PAGE_SIZE);
-      setEntries(data.slice(0, PAGE_SIZE));
-    } catch (err: any) {
-      setError(err.message || "Failed to fetch audit log");
-    } finally {
-      setLoading(false);
-    }
-  }, [actionFilter, actorFilter, offset]);
-
-  useEffect(() => {
-    fetchEntries();
-  }, [fetchEntries]);
-
-  const handleSearch = () => {
-    setOffset(0);
-    fetchEntries();
-  };
-
-  const formatTimestamp = (ts: string) => {
-    try {
-      return new Date(ts).toLocaleString();
-    } catch {
-      return ts;
-    }
-  };
-
-  const actionBadgeColor = (action: string) => {
-    if (action.includes("delete") || action.includes("remove"))
-      return "bg-red-500/15 text-red-400 border-red-500/20";
-    if (action.includes("create") || action.includes("add"))
-      return "bg-green-500/15 text-green-400 border-green-500/20";
-    if (action.includes("update") || action.includes("change"))
-      return "bg-blue-500/15 text-blue-400 border-blue-500/20";
-    if (action.includes("login") || action.includes("auth"))
-      return "bg-purple-500/15 text-purple-400 border-purple-500/20";
-    return "bg-gray-500/15 text-gray-400 border-gray-500/20";
-  };
-
-  return (
-    <div className="space-y-6">
-      {/* Header */}
-      <div className="flex items-center justify-between">
-        <div>
-          <h2 className="text-xl font-bold text-[var(--color-text-main)]">Audit Log</h2>
-          <p className="text-sm text-[var(--color-text-muted)] mt-1">
-            Administrative actions and security events
-          </p>
-        </div>
-        <button
-          onClick={fetchEntries}
-          disabled={loading}
-          aria-label="Refresh audit log"
-          className="px-4 py-2 rounded-lg text-sm font-medium bg-[var(--color-surface)] border border-[var(--color-border)] text-[var(--color-text-main)] hover:bg-[var(--color-bg-alt)] transition-colors disabled:opacity-50"
-        >
-          {loading ? "Loading..." : "Refresh"}
-        </button>
-      </div>
-
-      {/* Filters */}
-      <div
-        className="flex flex-wrap gap-3 p-4 rounded-xl bg-[var(--color-surface)] border border-[var(--color-border)]"
-        role="search"
-        aria-label="Filter audit log entries"
-      >
-        <input
-          type="text"
-          placeholder="Filter by action..."
-          value={actionFilter}
-          onChange={(e) => setActionFilter(e.target.value)}
-          onKeyDown={(e) => e.key === "Enter" && handleSearch()}
-          aria-label="Filter by action type"
-          className="flex-1 min-w-[180px] px-3 py-2 rounded-lg text-sm bg-[var(--color-bg)] border border-[var(--color-border)] text-[var(--color-text-main)] placeholder:text-[var(--color-text-muted)] focus:outline-2 focus:outline-[var(--color-accent)]"
-        />
-        <input
-          type="text"
-          placeholder="Filter by actor..."
-          value={actorFilter}
-          onChange={(e) => setActorFilter(e.target.value)}
-          onKeyDown={(e) => e.key === "Enter" && handleSearch()}
-          aria-label="Filter by actor"
-          className="flex-1 min-w-[180px] px-3 py-2 rounded-lg text-sm bg-[var(--color-bg)] border border-[var(--color-border)] text-[var(--color-text-main)] placeholder:text-[var(--color-text-muted)] focus:outline-2 focus:outline-[var(--color-accent)]"
-        />
-        <button
-          onClick={handleSearch}
-          className="px-4 py-2 rounded-lg text-sm font-medium bg-[var(--color-accent)] text-white hover:bg-[var(--color-accent-hover)] transition-colors focus:outline-2 focus:outline-offset-2 focus:outline-[var(--color-accent)]"
-        >
-          Search
-        </button>
-      </div>
-
-      {/* Error */}
-      {error && (
-        <div
-          className="p-4 rounded-lg bg-red-500/10 border border-red-500/30 text-red-400 text-sm"
-          role="alert"
-        >
-          {error}
-        </div>
-      )}
-
-      {/* Table */}
-      <div className="overflow-x-auto rounded-xl border border-[var(--color-border)]">
-        <table className="w-full text-sm" role="table" aria-label="Audit log entries">
-          <thead>
-            <tr className="bg-[var(--color-bg-alt)] border-b border-[var(--color-border)]">
-              <th className="text-left px-4 py-3 font-medium text-[var(--color-text-muted)]">
-                Timestamp
-              </th>
-              <th className="text-left px-4 py-3 font-medium text-[var(--color-text-muted)]">
-                Action
-              </th>
-              <th className="text-left px-4 py-3 font-medium text-[var(--color-text-muted)]">
-                Actor
-              </th>
-              <th className="text-left px-4 py-3 font-medium text-[var(--color-text-muted)]">
-                Target
-              </th>
-              <th className="text-left px-4 py-3 font-medium text-[var(--color-text-muted)]">
-                Details
-              </th>
-              <th className="text-left px-4 py-3 font-medium text-[var(--color-text-muted)]">IP</th>
-            </tr>
-          </thead>
-          <tbody>
-            {entries.length === 0 && !loading ? (
-              <tr>
-                <td colSpan={6} className="px-4 py-8 text-center text-[var(--color-text-muted)]">
-                  No audit log entries found
-                </td>
-              </tr>
-            ) : (
-              entries.map((entry) => (
-                <tr
-                  key={entry.id}
-                  className="border-b border-[var(--color-border)] hover:bg-[var(--color-bg-alt)] transition-colors"
-                >
-                  <td className="px-4 py-3 whitespace-nowrap text-[var(--color-text-muted)] font-mono text-xs">
-                    {formatTimestamp(entry.timestamp)}
-                  </td>
-                  <td className="px-4 py-3">
-                    <span
-                      className={`inline-block px-2 py-0.5 rounded-md text-xs font-medium border ${actionBadgeColor(entry.action)}`}
-                    >
-                      {entry.action}
-                    </span>
-                  </td>
-                  <td className="px-4 py-3 text-[var(--color-text-main)]">{entry.actor}</td>
-                  <td className="px-4 py-3 text-[var(--color-text-muted)] max-w-[200px] truncate">
-                    {entry.target || "—"}
-                  </td>
-                  <td className="px-4 py-3 text-[var(--color-text-muted)] max-w-[300px] truncate font-mono text-xs">
-                    {entry.details ? JSON.stringify(entry.details) : "—"}
-                  </td>
-                  <td className="px-4 py-3 text-[var(--color-text-muted)] font-mono text-xs whitespace-nowrap">
-                    {entry.ip_address || "—"}
-                  </td>
-                </tr>
-              ))
-            )}
-          </tbody>
-        </table>
-      </div>
-
-      {/* Pagination */}
-      <div className="flex items-center justify-between">
-        <p className="text-xs text-[var(--color-text-muted)]">
-          Showing {entries.length} entries (offset {offset})
-        </p>
-        <div className="flex gap-2">
-          <button
-            onClick={() => setOffset(Math.max(0, offset - PAGE_SIZE))}
-            disabled={offset === 0}
-            className="px-3 py-1.5 rounded-lg text-xs font-medium bg-[var(--color-surface)] border border-[var(--color-border)] text-[var(--color-text-main)] hover:bg-[var(--color-bg-alt)] disabled:opacity-30 transition-colors"
-          >
-            ← Previous
-          </button>
-          <button
-            onClick={() => setOffset(offset + PAGE_SIZE)}
-            disabled={!hasMore}
-            className="px-3 py-1.5 rounded-lg text-xs font-medium bg-[var(--color-surface)] border border-[var(--color-border)] text-[var(--color-text-main)] hover:bg-[var(--color-bg-alt)] disabled:opacity-30 transition-colors"
-          >
-            Next →
-          </button>
-        </div>
-      </div>
-    </div>
-  );
-}

src/app/(dashboard)/dashboard/logs/page.tsx

@@ -1,31 +0,0 @@
-"use client";
-
-import { useState } from "react";
-import { RequestLoggerV2, ProxyLogger, SegmentedControl } from "@/shared/components";
-import ConsoleLogViewer from "@/shared/components/ConsoleLogViewer";
-import AuditLogTab from "./AuditLogTab";
-
-export default function LogsPage() {
-  const [activeTab, setActiveTab] = useState("request-logs");
-
-  return (
-    <div className="flex flex-col gap-6">
-      <SegmentedControl
-        options={[
-          { value: "request-logs", label: "Request Logs" },
-          { value: "proxy-logs", label: "Proxy Logs" },
-          { value: "audit-logs", label: "Audit Logs" },
-          { value: "console", label: "Console" },
-        ]}
-        value={activeTab}
-        onChange={setActiveTab}
-      />
-
-      {/* Content */}
-      {activeTab === "request-logs" && <RequestLoggerV2 />}
-      {activeTab === "proxy-logs" && <ProxyLogger />}
-      {activeTab === "audit-logs" && <AuditLogTab />}
-      {activeTab === "console" && <ConsoleLogViewer />}
-    </div>
-  );
-}

src/app/(dashboard)/dashboard/onboarding/page.tsx

@@ -71,35 +71,27 @@ export default function OnboardingWizard() {
     if (step > 0) setStep(step - 1);
   };
 
-  const [errorMessage, setErrorMessage] = useState("");
-
   const handleSetPassword = async () => {
     if (skipSecurity) {
       handleNext();
       return;
     }
     if (password !== confirmPassword) return;
-    setErrorMessage("");
     try {
-      const res = await fetch("/api/settings/require-login", {
+      await fetch("/api/settings/require-login", {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify({ requireLogin: true, password }),
       });
-      if (!res.ok) {
-        const data = await res.json().catch(() => ({}));
-        setErrorMessage(data.error || "Failed to set password. Try again.");
-        return;
-      }
       handleNext();
     } catch {
-      setErrorMessage("Connection error. Please try again.");
+      // Fallback: skip
+      handleNext();
     }
   };
 
   const handleAddProvider = async () => {
     if (!selectedProvider || !providerKey) return;
-    setErrorMessage("");
     try {
       const provider = COMMON_PROVIDERS.find((p) => p.id === selectedProvider);
       const defaultUrls = {
@@ -110,7 +102,7 @@ export default function OnboardingWizard() {
         groq: "https://api.groq.com/openai",
         mistral: "https://api.mistral.ai",
       };
-      const res = await fetch("/api/providers", {
+      await fetch("/api/providers", {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify({
@@ -121,14 +113,9 @@ export default function OnboardingWizard() {
           isActive: true,
         }),
       });
-      if (!res.ok) {
-        const data = await res.json().catch(() => ({}));
-        setErrorMessage(data.error || "Failed to add provider. Try again.");
-        return;
-      }
       handleNext();
     } catch {
-      setErrorMessage("Connection error. Please try again.");
+      handleNext();
     }
   };
 

src/app/(dashboard)/dashboard/providers/error.tsx

@@ -1,28 +0,0 @@
-"use client";
-
-export default function ProvidersError({
-  error,
-  reset,
-}: {
-  error: Error & { digest?: string };
-  reset: () => void;
-}) {
-  return (
-    <div className="flex flex-col items-center justify-center min-h-[400px] p-6">
-      <div className="text-center space-y-4">
-        <h2 className="text-xl font-semibold text-red-600 dark:text-red-400">
-          Failed to load providers
-        </h2>
-        <p className="text-gray-600 dark:text-gray-400 max-w-md">
-          {error.message || "An unexpected error occurred while loading provider data."}
-        </p>
-        <button
-          onClick={reset}
-          className="px-4 py-2 bg-blue-600 text-white rounded-lg hover:bg-blue-700 transition-colors"
-        >
-          Try Again
-        </button>
-      </div>
-    </div>
-  );
-}

src/app/(dashboard)/dashboard/providers/loading.tsx

@@ -1,14 +0,0 @@
-"use client";
-
-export default function ProvidersLoading() {
-  return (
-    <div className="space-y-6 animate-pulse p-6">
-      <div className="h-8 bg-gray-200 dark:bg-gray-700 rounded w-48" />
-      <div className="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-4">
-        {[1, 2, 3].map((i) => (
-          <div key={i} className="h-40 bg-gray-200 dark:bg-gray-700 rounded-lg" />
-        ))}
-      </div>
-    </div>
-  );
-}

src/app/(dashboard)/dashboard/providers/page.tsx

@@ -3,16 +3,7 @@
 import { useState, useEffect } from "react";
 import Image from "next/image";
 import PropTypes from "prop-types";
-import {
-  Card,
-  CardSkeleton,
-  Badge,
-  Button,
-  Input,
-  Modal,
-  Select,
-  Toggle,
-} from "@/shared/components";
+import { Card, CardSkeleton, Badge, Button, Input, Modal, Select } from "@/shared/components";
 import { OAUTH_PROVIDERS, APIKEY_PROVIDERS } from "@/shared/constants/config";
 import {
   FREE_PROVIDERS,
@@ -143,41 +134,14 @@ export default function ProvidersPage() {
     const error = errorConns.length;
     const total = providerConnections.length;
 
-    // Check if all connections are manually disabled
-    const allDisabled = total > 0 && providerConnections.every((c) => c.isActive === false);
-
     // Get latest error info
     const latestError = errorConns.sort(
-      (a: any, b: any) =>
-        (new Date(b.lastErrorAt || 0) as any) - (new Date(a.lastErrorAt || 0) as any)
+      (a: any, b: any) => (new Date(b.lastErrorAt || 0) as any) - (new Date(a.lastErrorAt || 0) as any)
     )[0];
     const errorCode = latestError ? getConnectionErrorTag(latestError) : null;
     const errorTime = latestError?.lastErrorAt ? getRelativeTime(latestError.lastErrorAt) : null;
 
-    return { connected, error, total, errorCode, errorTime, allDisabled };
-  };
-
-  // Toggle all connections for a provider on/off
-  const handleToggleProvider = async (providerId: string, authType: string, newActive: boolean) => {
-    const providerConns = connections.filter(
-      (c) => c.provider === providerId && c.authType === authType
-    );
-    // Optimistically update UI
-    setConnections((prev) =>
-      prev.map((c) =>
-        c.provider === providerId && c.authType === authType ? { ...c, isActive: newActive } : c
-      )
-    );
-    // Fire API calls in parallel
-    await Promise.allSettled(
-      providerConns.map((c) =>
-        fetch(`/api/providers/${c.id}`, {
-          method: "PUT",
-          headers: { "Content-Type": "application/json" },
-          body: JSON.stringify({ isActive: newActive }),
-        })
-      )
-    );
+    return { connected, error, total, errorCode, errorTime };
   };
 
   const handleBatchTest = async (mode, providerId = null) => {
@@ -269,7 +233,6 @@ export default function ProvidersPage() {
               provider={info}
               stats={getProviderStats(key, "oauth")}
               authType="oauth"
-              onToggle={(active) => handleToggleProvider(key, "oauth", active)}
             />
           ))}
         </div>
@@ -306,7 +269,6 @@ export default function ProvidersPage() {
               provider={info}
               stats={getProviderStats(key, "oauth")}
               authType="free"
-              onToggle={(active) => handleToggleProvider(key, "oauth", active)}
             />
           ))}
         </div>
@@ -344,7 +306,6 @@ export default function ProvidersPage() {
               provider={info}
               stats={getProviderStats(key, "apikey")}
               authType="apikey"
-              onToggle={(active) => handleToggleProvider(key, "apikey", active)}
             />
           ))}
         </div>
@@ -408,7 +369,6 @@ export default function ProvidersPage() {
                 provider={info}
                 stats={getProviderStats(info.id, "apikey")}
                 authType="compatible"
-                onToggle={(active) => handleToggleProvider(info.id, "apikey", active)}
               />
             ))}
           </div>
@@ -461,8 +421,8 @@ export default function ProvidersPage() {
   );
 }
 
-function ProviderCard({ providerId, provider, stats, authType, onToggle }) {
-  const { connected, error, errorCode, errorTime, allDisabled } = stats;
+function ProviderCard({ providerId, provider, stats, authType }) {
+  const { connected, error, errorCode, errorTime } = stats;
   const [imgError, setImgError] = useState(false);
 
   const dotColors = {
@@ -477,7 +437,7 @@ function ProviderCard({ providerId, provider, stats, authType, onToggle }) {
     <Link href={`/dashboard/providers/${providerId}`} className="group">
       <Card
         padding="xs"
-        className={`h-full hover:bg-black/[0.01] dark:hover:bg-white/[0.01] transition-colors cursor-pointer ${allDisabled ? "opacity-50" : ""}`}
+        className="h-full hover:bg-black/[0.01] dark:hover:bg-white/[0.01] transition-colors cursor-pointer"
       >
         <div className="flex items-center justify-between">
           <div className="flex items-center gap-3">
@@ -510,44 +470,14 @@ function ProviderCard({ providerId, provider, stats, authType, onToggle }) {
                 />
               </h3>
               <div className="flex items-center gap-2 text-xs flex-wrap">
-                {allDisabled ? (
-                  <Badge variant="default" size="sm">
-                    <span className="flex items-center gap-1">
-                      <span className="material-symbols-outlined text-[12px]">pause_circle</span>
-                      Disabled
-                    </span>
-                  </Badge>
-                ) : (
-                  <>
-                    {getStatusDisplay(connected, error, errorCode)}
-                    {errorTime && <span className="text-text-muted">• {errorTime}</span>}
-                  </>
-                )}
+                {getStatusDisplay(connected, error, errorCode)}
+                {errorTime && <span className="text-text-muted">• {errorTime}</span>}
               </div>
             </div>
           </div>
-          <div className="flex items-center gap-2">
-            {stats.total > 0 && (
-              <div
-                onClick={(e) => {
-                  e.preventDefault();
-                  e.stopPropagation();
-                  onToggle(!allDisabled ? false : true);
-                }}
-                className=""
-              >
-                <Toggle
-                  size="sm"
-                  checked={!allDisabled}
-                  onChange={() => {}}
-                  title={allDisabled ? "Enable provider" : "Disable provider"}
-                />
-              </div>
-            )}
-            <span className="material-symbols-outlined text-text-muted opacity-0 group-hover:opacity-100 transition-opacity">
-              chevron_right
-            </span>
-          </div>
+          <span className="material-symbols-outlined text-text-muted opacity-0 group-hover:opacity-100 transition-opacity">
+            chevron_right
+          </span>
         </div>
       </Card>
     </Link>
@@ -572,8 +502,8 @@ ProviderCard.propTypes = {
 };
 
 // API Key providers - use image with textIcon fallback (same as OAuth providers)
-function ApiKeyProviderCard({ providerId, provider, stats, authType, onToggle }) {
-  const { connected, error, errorCode, errorTime, allDisabled } = stats;
+function ApiKeyProviderCard({ providerId, provider, stats, authType }) {
+  const { connected, error, errorCode, errorTime } = stats;
   const isCompatible = providerId.startsWith(OPENAI_COMPATIBLE_PREFIX);
   const isAnthropicCompatible = providerId.startsWith(ANTHROPIC_COMPATIBLE_PREFIX);
   const [imgError, setImgError] = useState(false);
@@ -601,7 +531,7 @@ function ApiKeyProviderCard({ providerId, provider, stats, authType, onToggle })
     <Link href={`/dashboard/providers/${providerId}`} className="group">
       <Card
         padding="xs"
-        className={`h-full hover:bg-black/[0.01] dark:hover:bg-white/[0.01] transition-colors cursor-pointer ${allDisabled ? "opacity-50" : ""}`}
+        className="h-full hover:bg-black/[0.01] dark:hover:bg-white/[0.01] transition-colors cursor-pointer"
       >
         <div className="flex items-center justify-between">
           <div className="flex items-center gap-3">
@@ -634,54 +564,24 @@ function ApiKeyProviderCard({ providerId, provider, stats, authType, onToggle })
                 />
               </h3>
               <div className="flex items-center gap-2 text-xs flex-wrap">
-                {allDisabled ? (
+                {getStatusDisplay(connected, error, errorCode)}
+                {isCompatible && (
                   <Badge variant="default" size="sm">
-                    <span className="flex items-center gap-1">
-                      <span className="material-symbols-outlined text-[12px]">pause_circle</span>
-                      Disabled
-                    </span>
+                    {provider.apiType === "responses" ? "Responses" : "Chat"}
                   </Badge>
-                ) : (
-                  <>
-                    {getStatusDisplay(connected, error, errorCode)}
-                    {isCompatible && (
-                      <Badge variant="default" size="sm">
-                        {provider.apiType === "responses" ? "Responses" : "Chat"}
-                      </Badge>
-                    )}
-                    {isAnthropicCompatible && (
-                      <Badge variant="default" size="sm">
-                        Messages
-                      </Badge>
-                    )}
-                    {errorTime && <span className="text-text-muted">• {errorTime}</span>}
-                  </>
                 )}
+                {isAnthropicCompatible && (
+                  <Badge variant="default" size="sm">
+                    Messages
+                  </Badge>
+                )}
+                {errorTime && <span className="text-text-muted">• {errorTime}</span>}
               </div>
             </div>
           </div>
-          <div className="flex items-center gap-2">
-            {stats.total > 0 && (
-              <div
-                onClick={(e) => {
-                  e.preventDefault();
-                  e.stopPropagation();
-                  onToggle(!allDisabled ? false : true);
-                }}
-                className=""
-              >
-                <Toggle
-                  size="sm"
-                  checked={!allDisabled}
-                  onChange={() => {}}
-                  title={allDisabled ? "Enable provider" : "Disable provider"}
-                />
-              </div>
-            )}
-            <span className="material-symbols-outlined text-text-muted opacity-0 group-hover:opacity-100 transition-opacity">
-              chevron_right
-            </span>
-          </div>
+          <span className="material-symbols-outlined text-text-muted opacity-0 group-hover:opacity-100 transition-opacity">
+            chevron_right
+          </span>
         </div>
       </Card>
     </Link>

src/app/(dashboard)/dashboard/settings/components/SecurityTab.tsx

@@ -2,12 +2,10 @@
 
 import { useState, useEffect } from "react";
 import { Card, Button, Input, Toggle } from "@/shared/components";
-import { AI_PROVIDERS } from "@/shared/constants/providers";
 import IPFilterSection from "./IPFilterSection";
-import SessionInfoCard from "./SessionInfoCard";
 
 export default function SecurityTab() {
-  const [settings, setSettings] = useState<any>({ requireLogin: false, hasPassword: false });
+  const [settings, setSettings] = useState({ requireLogin: false, hasPassword: false });
   const [loading, setLoading] = useState(true);
   const [passwords, setPasswords] = useState({ current: "", new: "", confirm: "" });
   const [passStatus, setPassStatus] = useState({ type: "", message: "" });
@@ -38,29 +36,6 @@ export default function SecurityTab() {
     }
   };
 
-  const updateSetting = async (key: string, value: any) => {
-    try {
-      const res = await fetch("/api/settings", {
-        method: "PATCH",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ [key]: value }),
-      });
-      if (res.ok) {
-        setSettings((prev) => ({ ...prev, [key]: value }));
-      }
-    } catch (err) {
-      console.error(`Failed to update ${key}:`, err);
-    }
-  };
-
-  const toggleBlockedProvider = (providerId: string) => {
-    const current: string[] = settings.blockedProviders || [];
-    const updated = current.includes(providerId)
-      ? current.filter((p) => p !== providerId)
-      : [...current, providerId];
-    updateSetting("blockedProviders", updated);
-  };
-
   const handlePasswordChange = async (e) => {
     e.preventDefault();
     if (passwords.new !== passwords.confirm) {
@@ -94,8 +69,6 @@ export default function SecurityTab() {
     }
   };
 
-  const blockedProviders: string[] = settings.blockedProviders || [];
-
   return (
     <div className="flex flex-col gap-6">
       <Card>
@@ -172,93 +145,6 @@ export default function SecurityTab() {
           )}
         </div>
       </Card>
-
-      {/* API Endpoint Protection */}
-      <Card>
-        <div className="flex items-center gap-3 mb-4">
-          <div className="p-2 rounded-lg bg-amber-500/10 text-amber-600 dark:text-amber-400">
-            <span className="material-symbols-outlined text-[20px]" aria-hidden="true">
-              api
-            </span>
-          </div>
-          <h3 className="text-lg font-semibold">API Endpoint Protection</h3>
-        </div>
-        <div className="flex flex-col gap-4">
-          {/* Require auth for /models */}
-          <div className="flex items-center justify-between">
-            <div>
-              <p className="font-medium">Require API key for /models</p>
-              <p className="text-sm text-text-muted">
-                When ON, the{" "}
-                <code className="text-xs bg-black/5 dark:bg-white/5 px-1 py-0.5 rounded">
-                  /v1/models
-                </code>{" "}
-                endpoint returns 404 for unauthenticated requests. Prevents model discovery by
-                unauthorized users.
-              </p>
-            </div>
-            <Toggle
-              checked={settings.requireAuthForModels === true}
-              onChange={() => updateSetting("requireAuthForModels", !settings.requireAuthForModels)}
-              disabled={loading}
-            />
-          </div>
-
-          {/* Blocked Providers */}
-          <div className="pt-4 border-t border-border/50">
-            <div className="mb-3">
-              <p className="font-medium">Blocked Providers</p>
-              <p className="text-sm text-text-muted">
-                Hide specific providers from the{" "}
-                <code className="text-xs bg-black/5 dark:bg-white/5 px-1 py-0.5 rounded">
-                  /v1/models
-                </code>{" "}
-                response. Blocked providers will not appear in model listings.
-              </p>
-            </div>
-            <div className="flex flex-wrap gap-2">
-              {Object.values(AI_PROVIDERS).map((provider: any) => {
-                const isBlocked = blockedProviders.includes(provider.id);
-                return (
-                  <button
-                    key={provider.id}
-                    onClick={() => toggleBlockedProvider(provider.id)}
-                    disabled={loading}
-                    className={`inline-flex items-center gap-1.5 px-2.5 py-1.5 rounded-lg text-xs font-medium transition-all border ${
-                      isBlocked
-                        ? "bg-red-500/10 border-red-500/30 text-red-600 dark:text-red-400"
-                        : "bg-black/[0.02] dark:bg-white/[0.02] border-transparent text-text-muted hover:bg-black/[0.05] dark:hover:bg-white/[0.05]"
-                    }`}
-                    title={isBlocked ? `Unblock ${provider.name}` : `Block ${provider.name}`}
-                  >
-                    <span
-                      className="material-symbols-outlined text-[14px]"
-                      style={{ color: isBlocked ? undefined : provider.color }}
-                    >
-                      {isBlocked ? "block" : provider.icon}
-                    </span>
-                    {provider.name}
-                    {isBlocked && (
-                      <span className="material-symbols-outlined text-[12px] text-red-500">
-                        close
-                      </span>
-                    )}
-                  </button>
-                );
-              })}
-            </div>
-            {blockedProviders.length > 0 && (
-              <p className="text-xs text-amber-600 dark:text-amber-400 mt-2 flex items-center gap-1">
-                <span className="material-symbols-outlined text-[14px]">warning</span>
-                {blockedProviders.length} provider{blockedProviders.length !== 1 ? "s" : ""} blocked
-                from /models
-              </p>
-            )}
-          </div>
-        </div>
-      </Card>
-
-      <SessionInfoCard />
       <IPFilterSection />
     </div>
   );

src/app/(dashboard)/dashboard/settings/components/SessionInfoCard.tsx

@@ -1,152 +0,0 @@
-"use client";
-
-/**
- * Session Info Card — P-3
- *
- * Displays current session details and provides session management
- * controls (logout, clear sessions) within the Security settings tab.
- */
-
-import { useState, useEffect } from "react";
-import { Card, Button } from "@/shared/components";
-
-interface SessionInfo {
-  authenticated: boolean;
-  loginTime: string | null;
-  sessionAge: string;
-  ipAddress: string;
-  userAgent: string;
-}
-
-export default function SessionInfoCard() {
-  const [session, setSession] = useState<SessionInfo | null>(null);
-  const [loading, setLoading] = useState(true);
-
-  useEffect(() => {
-    let cancelled = false;
-
-    async function loadSession() {
-      // Build session info from client-side data
-      const loginTime = sessionStorage.getItem("omniroute_login_time");
-      const now = Date.now();
-
-      let sessionAge = "Unknown";
-      if (loginTime) {
-        const elapsed = now - parseInt(loginTime, 10);
-        const hours = Math.floor(elapsed / 3600000);
-        const minutes = Math.floor((elapsed % 3600000) / 60000);
-        sessionAge = hours > 0 ? `${hours}h ${minutes}m` : `${minutes}m`;
-      }
-
-      let authenticated = false;
-      try {
-        const res = await fetch("/api/auth/status", {
-          method: "GET",
-          cache: "no-store",
-        });
-        if (res.ok) {
-          const data = await res.json();
-          authenticated = data.authenticated === true;
-        }
-      } catch {
-        // Keep unauthenticated fallback on network errors.
-      }
-
-      if (cancelled) return;
-
-      setSession({
-        authenticated,
-        loginTime: loginTime ? new Date(parseInt(loginTime, 10)).toLocaleString() : null,
-        sessionAge,
-        ipAddress: "—", // Server-side only
-        userAgent: navigator.userAgent.split(" ").slice(-2).join(" ") || "Unknown",
-      });
-      setLoading(false);
-    }
-
-    loadSession();
-    return () => {
-      cancelled = true;
-    };
-  }, []);
-
-  const handleLogout = async () => {
-    try {
-      await fetch("/api/auth/logout", { method: "POST" });
-      sessionStorage.removeItem("omniroute_login_time");
-      window.location.href = "/";
-    } catch {
-      window.location.href = "/";
-    }
-  };
-
-  const handleClearStorage = () => {
-    if (confirm("Clear all local data? This will reset your preferences.")) {
-      localStorage.clear();
-      sessionStorage.clear();
-      window.location.reload();
-    }
-  };
-
-  if (loading) {
-    return (
-      <Card>
-        <div className="animate-pulse h-32 bg-black/5 dark:bg-white/5 rounded-lg" />
-      </Card>
-    );
-  }
-
-  return (
-    <Card>
-      <div className="flex items-center gap-3 mb-4">
-        <div className="p-2 rounded-lg bg-blue-500/10 text-blue-500">
-          <span className="material-symbols-outlined text-[20px]" aria-hidden="true">
-            person
-          </span>
-        </div>
-        <h3 className="text-lg font-semibold">Session</h3>
-      </div>
-
-      <div className="flex flex-col gap-3" role="list" aria-label="Session details">
-        <div className="flex justify-between items-center text-sm" role="listitem">
-          <span className="text-text-muted">Status</span>
-          <span className="flex items-center gap-1.5">
-            <span
-              className={`w-2 h-2 rounded-full ${session?.authenticated ? "bg-green-500" : "bg-yellow-500"}`}
-              aria-hidden="true"
-            />
-            {session?.authenticated ? "Authenticated" : "Guest"}
-          </span>
-        </div>
-
-        {session?.loginTime && (
-          <div className="flex justify-between items-center text-sm" role="listitem">
-            <span className="text-text-muted">Login Time</span>
-            <span className="font-mono text-xs">{session.loginTime}</span>
-          </div>
-        )}
-
-        <div className="flex justify-between items-center text-sm" role="listitem">
-          <span className="text-text-muted">Session Age</span>
-          <span className="font-mono text-xs">{session?.sessionAge}</span>
-        </div>
-
-        <div className="flex justify-between items-center text-sm" role="listitem">
-          <span className="text-text-muted">Browser</span>
-          <span className="font-mono text-xs truncate max-w-[200px]">{session?.userAgent}</span>
-        </div>
-      </div>
-
-      <div className="flex gap-3 mt-4 pt-4 border-t border-border/50">
-        <Button variant="secondary" onClick={handleClearStorage}>
-          Clear Local Data
-        </Button>
-        {session?.authenticated && (
-          <Button variant="danger" onClick={handleLogout}>
-            Logout
-          </Button>
-        )}
-      </div>
-    </Card>
-  );
-}

src/app/(dashboard)/dashboard/settings/components/SystemStorageTab.tsx

@@ -1,6 +1,6 @@
 "use client";
 
-import { useState, useEffect, useRef } from "react";
+import { useState, useEffect } from "react";
 import { Card, Button, Badge } from "@/shared/components";
 
 export default function SystemStorageTab() {
@@ -12,12 +12,6 @@ export default function SystemStorageTab() {
   const [confirmRestoreId, setConfirmRestoreId] = useState(null);
   const [manualBackupLoading, setManualBackupLoading] = useState(false);
   const [manualBackupStatus, setManualBackupStatus] = useState({ type: "", message: "" });
-  const [exportLoading, setExportLoading] = useState(false);
-  const [importLoading, setImportLoading] = useState(false);
-  const [importStatus, setImportStatus] = useState({ type: "", message: "" });
-  const [confirmImport, setConfirmImport] = useState(false);
-  const [pendingImportFile, setPendingImportFile] = useState<File | null>(null);
-  const fileInputRef = useRef<HTMLInputElement>(null);
   const [storageHealth, setStorageHealth] = useState({
     driver: "sqlite",
     dbPath: "~/.omniroute/storage.sqlite",
@@ -109,91 +103,6 @@ export default function SystemStorageTab() {
     loadStorageHealth();
   }, []);
 
-  const handleExport = async () => {
-    setExportLoading(true);
-    try {
-      const res = await fetch("/api/db-backups/export");
-      if (!res.ok) {
-        const data = await res.json();
-        throw new Error(data.error || "Export failed");
-      }
-      const blob = await res.blob();
-      const url = URL.createObjectURL(blob);
-      const disposition = res.headers.get("Content-Disposition") || "";
-      const filenameMatch = disposition.match(/filename="(.+)"/);
-      const filename = filenameMatch
-        ? filenameMatch[1]
-        : `omniroute-backup-${new Date().toISOString().replace(/[:.]/g, "-")}.sqlite`;
-      const a = document.createElement("a");
-      a.href = url;
-      a.download = filename;
-      document.body.appendChild(a);
-      a.click();
-      document.body.removeChild(a);
-      URL.revokeObjectURL(url);
-    } catch (err) {
-      console.error("Export failed:", err);
-      setImportStatus({ type: "error", message: `Export failed: ${(err as Error).message}` });
-    } finally {
-      setExportLoading(false);
-    }
-  };
-
-  const handleImportClick = () => {
-    fileInputRef.current?.click();
-  };
-
-  const handleFileSelected = (e: React.ChangeEvent<HTMLInputElement>) => {
-    const file = e.target.files?.[0];
-    if (!file) return;
-    if (!file.name.endsWith(".sqlite")) {
-      setImportStatus({
-        type: "error",
-        message: "Invalid file type. Only .sqlite files are accepted.",
-      });
-      return;
-    }
-    setPendingImportFile(file);
-    setConfirmImport(true);
-    if (fileInputRef.current) fileInputRef.current.value = "";
-  };
-
-  const handleImportConfirm = async () => {
-    if (!pendingImportFile) return;
-    setImportLoading(true);
-    setImportStatus({ type: "", message: "" });
-    setConfirmImport(false);
-    try {
-      const formData = new FormData();
-      formData.append("file", pendingImportFile);
-      const res = await fetch("/api/db-backups/import", {
-        method: "POST",
-        body: formData,
-      });
-      const data = await res.json();
-      if (res.ok) {
-        setImportStatus({
-          type: "success",
-          message: `Database imported! ${data.connectionCount} connections, ${data.nodeCount} nodes, ${data.comboCount} combos, ${data.apiKeyCount} API keys.`,
-        });
-        await loadStorageHealth();
-        if (backupsExpanded) await loadBackups();
-      } else {
-        setImportStatus({ type: "error", message: data.error || "Import failed" });
-      }
-    } catch {
-      setImportStatus({ type: "error", message: "An error occurred during import" });
-    } finally {
-      setImportLoading(false);
-      setPendingImportFile(null);
-    }
-  };
-
-  const handleImportCancel = () => {
-    setConfirmImport(false);
-    setPendingImportFile(null);
-  };
-
   const formatBytes = (bytes) => {
     if (!bytes || bytes === 0) return "0 B";
     if (bytes < 1024) return `${bytes} B`;
@@ -246,118 +155,7 @@ export default function SystemStorageTab() {
         </div>
       </div>
 
-      {/* Export / Import */}
-      <div className="flex items-center gap-2 mb-4">
-        <Button variant="outline" size="sm" onClick={handleExport} loading={exportLoading}>
-          <span className="material-symbols-outlined text-[14px] mr-1" aria-hidden="true">
-            download
-          </span>
-          Export Database
-        </Button>
-        <Button
-          variant="outline"
-          size="sm"
-          onClick={async () => {
-            setExportLoading(true);
-            try {
-              const res = await fetch("/api/db-backups/exportAll");
-              if (!res.ok) throw new Error("Export failed");
-              const blob = await res.blob();
-              const cd = res.headers.get("Content-Disposition") || "";
-              const filenameMatch = cd.match(/filename="?([^"]+)"?/);
-              const filename = filenameMatch?.[1] || `omniroute-full-backup.tar.gz`;
-              const url = URL.createObjectURL(blob);
-              const a = document.createElement("a");
-              a.href = url;
-              a.download = filename;
-              document.body.appendChild(a);
-              a.click();
-              document.body.removeChild(a);
-              URL.revokeObjectURL(url);
-            } catch (err) {
-              setImportStatus({
-                type: "error",
-                message: `Full export failed: ${(err as Error).message}`,
-              });
-            } finally {
-              setExportLoading(false);
-            }
-          }}
-          loading={exportLoading}
-        >
-          <span className="material-symbols-outlined text-[14px] mr-1" aria-hidden="true">
-            folder_zip
-          </span>
-          Export All (.tar.gz)
-        </Button>
-        <Button variant="outline" size="sm" onClick={handleImportClick} loading={importLoading}>
-          <span className="material-symbols-outlined text-[14px] mr-1" aria-hidden="true">
-            upload
-          </span>
-          Import Database
-        </Button>
-        <input
-          ref={fileInputRef}
-          type="file"
-          accept=".sqlite"
-          className="hidden"
-          onChange={handleFileSelected}
-        />
-      </div>
-
-      {/* Import confirmation dialog */}
-      {confirmImport && pendingImportFile && (
-        <div className="p-4 rounded-lg mb-4 bg-amber-500/10 border border-amber-500/30">
-          <div className="flex items-start gap-3">
-            <span
-              className="material-symbols-outlined text-[20px] text-amber-500 mt-0.5"
-              aria-hidden="true"
-            >
-              warning
-            </span>
-            <div className="flex-1">
-              <p className="text-sm font-medium text-amber-500 mb-1">Confirm Database Import</p>
-              <p className="text-xs text-text-muted mb-2">
-                This will replace <strong>all current data</strong> with the content from{" "}
-                <span className="font-mono">{pendingImportFile.name}</span>. A backup will be
-                created automatically before the import.
-              </p>
-              <div className="flex items-center gap-2">
-                <Button
-                  variant="primary"
-                  size="sm"
-                  onClick={handleImportConfirm}
-                  className="!bg-amber-500 hover:!bg-amber-600"
-                >
-                  Yes, Import
-                </Button>
-                <Button variant="outline" size="sm" onClick={handleImportCancel}>
-                  Cancel
-                </Button>
-              </div>
-            </div>
-          </div>
-        </div>
-      )}
-
-      {/* Import status */}
-      {importStatus.message && (
-        <div
-          className={`p-3 rounded-lg mb-4 text-sm ${
-            importStatus.type === "success"
-              ? "bg-green-500/10 text-green-500 border border-green-500/20"
-              : "bg-red-500/10 text-red-500 border border-red-500/20"
-          }`}
-          role="alert"
-        >
-          <div className="flex items-center gap-2">
-            <span className="material-symbols-outlined text-[16px]" aria-hidden="true">
-              {importStatus.type === "success" ? "check_circle" : "error"}
-            </span>
-            {importStatus.message}
-          </div>
-        </div>
-      )}
+      {/* Last backup + Backup Now */}
       <div className="flex items-center justify-between p-3 rounded-lg bg-bg border border-border mb-4">
         <div className="flex items-center gap-2">
           <span className="material-symbols-outlined text-[16px] text-amber-500" aria-hidden="true">

src/app/(dashboard)/dashboard/settings/error.tsx

@@ -1,28 +0,0 @@
-"use client";
-
-export default function SettingsError({
-  error,
-  reset,
-}: {
-  error: Error & { digest?: string };
-  reset: () => void;
-}) {
-  return (
-    <div className="flex flex-col items-center justify-center min-h-[400px] p-6">
-      <div className="text-center space-y-4">
-        <h2 className="text-xl font-semibold text-red-600 dark:text-red-400">
-          Failed to load settings
-        </h2>
-        <p className="text-gray-600 dark:text-gray-400 max-w-md">
-          {error.message || "An unexpected error occurred while loading settings."}
-        </p>
-        <button
-          onClick={reset}
-          className="px-4 py-2 bg-blue-600 text-white rounded-lg hover:bg-blue-700 transition-colors"
-        >
-          Try Again
-        </button>
-      </div>
-    </div>
-  );
-}

src/app/(dashboard)/dashboard/settings/loading.tsx

@@ -1,17 +0,0 @@
-"use client";
-
-export default function SettingsLoading() {
-  return (
-    <div className="space-y-6 animate-pulse p-6">
-      <div className="h-8 bg-gray-200 dark:bg-gray-700 rounded w-36" />
-      <div className="space-y-4">
-        {[1, 2, 3, 4].map((i) => (
-          <div key={i} className="space-y-2">
-            <div className="h-4 bg-gray-200 dark:bg-gray-700 rounded w-24" />
-            <div className="h-10 bg-gray-200 dark:bg-gray-700 rounded" />
-          </div>
-        ))}
-      </div>
-    </div>
-  );
-}

src/app/(dashboard)/dashboard/settings/page.tsx

@@ -1,7 +1,6 @@
 "use client";
 
 import { useState } from "react";
-import { useSearchParams } from "next/navigation";
 import { cn } from "@/shared/utils/cn";
 import { APP_CONFIG } from "@/shared/constants/config";
 import SystemStorageTab from "./components/SystemStorageTab";
@@ -26,10 +25,7 @@ const tabs = [
 ];
 
 export default function SettingsPage() {
-  const searchParams = useSearchParams();
-  const tabParam = searchParams.get("tab");
-  const [userSelectedTab, setUserSelectedTab] = useState(null);
-  const activeTab = userSelectedTab || tabs.find((t) => t.id === tabParam)?.id || "general";
+  const [activeTab, setActiveTab] = useState("general");
 
   return (
     <div className="max-w-2xl mx-auto">
@@ -46,7 +42,7 @@ export default function SettingsPage() {
               role="tab"
               aria-selected={activeTab === tab.id}
               tabIndex={activeTab === tab.id ? 0 : -1}
-              onClick={() => setUserSelectedTab(tab.id)}
+              onClick={() => setActiveTab(tab.id)}
               className={cn(
                 "flex items-center gap-2 px-4 py-2 rounded-md font-medium transition-all text-sm",
                 activeTab === tab.id

src/app/(dashboard)/dashboard/translator/TranslatorPageClient.tsx

@@ -14,17 +14,6 @@ const MODES = [
   { value: "live-monitor", label: "Live Monitor", icon: "monitoring" },
 ];
 
-const MODE_DESCRIPTIONS: Record<string, string> = {
-  playground:
-    "Paste any API request body and see how OmniRoute translates it between provider formats (OpenAI ↔ Claude ↔ Gemini ↔ Responses API)",
-  "chat-tester":
-    "Send real chat requests through OmniRoute and see the full round-trip: your input, the translated request, the provider response, and the translated output",
-  "test-bench":
-    "Define multiple test cases with different inputs and expected outputs, run them all at once, and compare results across providers and models",
-  "live-monitor":
-    "Watch incoming requests in real-time as they flow through OmniRoute — see format translations happening live and identify issues instantly",
-};
-
 export default function TranslatorPageClient() {
   const [mode, setMode] = useState("playground");
 
@@ -38,8 +27,7 @@ export default function TranslatorPageClient() {
             Translator Playground
           </h1>
           <p className="text-sm text-text-muted mt-1">
-            {MODE_DESCRIPTIONS[mode] ||
-              "Debug, test, and visualize how OmniRoute translates API requests between providers"}
+            Debug, test, and visualize how OmniRoute translates API requests between providers
           </p>
         </div>
         <SegmentedControl options={MODES} value={mode} onChange={setMode} size="md" />

src/app/(dashboard)/dashboard/usage/components/EvalsTab.tsx

@@ -184,10 +184,8 @@ export default function EvalsTab() {
 
   // Count total cases and unique models across all suites
   const totalCases = suites.reduce((sum, s) => sum + (s.cases?.length || s.caseCount || 0), 0);
-  const uniqueModels: string[] = [
-    ...new Set(
-      suites.flatMap((s: any) => (s.cases || []).map((c: any) => c.model)).filter(Boolean)
-    ),
+  const uniqueModels = [
+    ...new Set(suites.flatMap((s) => (s.cases || []).map((c) => c.model).filter(Boolean))),
   ];
 
   if (loading) {
@@ -395,8 +393,8 @@ export default function EvalsTab() {
             const caseCount = suite.cases?.length || suite.caseCount || 0;
 
             // Count unique models in this suite
-            const suiteModels: string[] = [
-              ...new Set<string>((suite.cases || []).map((c: any) => c.model).filter(Boolean)),
+            const suiteModels = [
+              ...new Set((suite.cases || []).map((c) => c.model).filter(Boolean)),
             ];
 
             return (

src/app/api/auth/login/route.ts

@@ -5,22 +5,12 @@ import { SignJWT } from "jose";
 import { cookies } from "next/headers";
 import { loginSchema, validateBody } from "@/shared/validation/schemas";
 
-// SECURITY: No hardcoded fallback — JWT_SECRET must be configured.
-if (!process.env.JWT_SECRET) {
-  console.error("[SECURITY] FATAL: JWT_SECRET is not set. Login authentication is disabled.");
-}
-const SECRET = new TextEncoder().encode(process.env.JWT_SECRET || "");
+const SECRET = new TextEncoder().encode(
+  process.env.JWT_SECRET || "omniroute-default-secret-change-me"
+);
 
 export async function POST(request) {
   try {
-    // Fail-fast if JWT_SECRET is not configured
-    if (!process.env.JWT_SECRET) {
-      return NextResponse.json(
-        { error: "Server misconfigured: JWT_SECRET not set. Contact administrator." },
-        { status: 500 }
-      );
-    }
-
     const rawBody = await request.json();
 
     // Zod validation
@@ -31,20 +21,15 @@ export async function POST(request) {
     const { password } = validation.data;
     const settings = await getSettings();
 
+    // Default password is '123456' if not set
     const storedHash = settings.password;
 
     let isValid = false;
     if (storedHash) {
       isValid = await bcrypt.compare(password, storedHash);
     } else {
-      // SECURITY: No default password — must be set via env or onboarding
-      if (!process.env.INITIAL_PASSWORD) {
-        return NextResponse.json(
-          { error: "No password configured. Complete onboarding first.", needsSetup: true },
-          { status: 403 }
-        );
-      }
-      const initialPassword = process.env.INITIAL_PASSWORD;
+      // Use env var or default
+      const initialPassword = process.env.INITIAL_PASSWORD || "123456";
       isValid = password === initialPassword;
     }
 
@@ -57,7 +42,7 @@ export async function POST(request) {
 
       const token = await new SignJWT({ authenticated: true })
         .setProtectedHeader({ alg: "HS256" })
-        .setExpirationTime("30d")
+        .setExpirationTime("24h")
         .sign(SECRET);
 
       const cookieStore = await cookies();

src/app/api/auth/status/route.ts

@@ -1,23 +0,0 @@
-import { NextResponse } from "next/server";
-import { cookies } from "next/headers";
-import { jwtVerify } from "jose";
-
-const SECRET = process.env.JWT_SECRET
-  ? new TextEncoder().encode(process.env.JWT_SECRET)
-  : null;
-
-export async function GET() {
-  try {
-    const cookieStore = await cookies();
-    const token = cookieStore.get("auth_token")?.value;
-
-    if (!token || !SECRET) {
-      return NextResponse.json({ authenticated: false });
-    }
-
-    await jwtVerify(token, SECRET);
-    return NextResponse.json({ authenticated: true });
-  } catch {
-    return NextResponse.json({ authenticated: false });
-  }
-}

src/app/api/cloud/auth/route.ts

@@ -20,21 +20,13 @@ export async function POST(request) {
     // Get active provider connections
     const connections = await getProviderConnections({ isActive: true });
 
-    // Helper to mask sensitive values
-    function maskSecret(value: string | null | undefined): string | null {
-      if (!value) return null;
-      if (value.length <= 8) return "****";
-      return value.slice(0, 4) + "****" + value.slice(-4);
-    }
-
-    // Map connections — NEVER expose raw credentials
+    // Map connections
     const mappedConnections = connections.map((conn) => ({
       provider: conn.provider,
       authType: conn.authType,
-      hasApiKey: !!conn.apiKey,
-      hasAccessToken: !!conn.accessToken,
-      hasRefreshToken: !!conn.refreshToken,
-      maskedApiKey: maskSecret(conn.apiKey),
+      apiKey: conn.apiKey || null,
+      accessToken: conn.accessToken || null,
+      refreshToken: conn.refreshToken || null,
       projectId: conn.projectId || null,
       expiresAt: conn.expiresAt,
       priority: conn.priority,

src/app/api/db-backups/export/route.ts

@@ -1,50 +0,0 @@
-import { NextResponse } from "next/server";
-import path from "node:path";
-import fs from "node:fs";
-import os from "node:os";
-import { getDbInstance, SQLITE_FILE } from "@/lib/db/core";
-
-/**
- * GET /api/db-backups/export — Download the current database as a .sqlite file.
- *
- * Uses SQLite's native backup API to create a consistent snapshot,
- * then streams it as a downloadable attachment.
- */
-export async function GET() {
-  try {
-    if (!SQLITE_FILE || !fs.existsSync(SQLITE_FILE)) {
-      return NextResponse.json({ error: "Database file not found" }, { status: 404 });
-    }
-
-    const timestamp = new Date().toISOString().replace(/[:.]/g, "-");
-    const exportFilename = `omniroute-backup-${timestamp}.sqlite`;
-    const tmpDir = os.tmpdir();
-    const tmpPath = path.join(tmpDir, exportFilename);
-
-    // Use native SQLite backup API for a consistent snapshot
-    const db = getDbInstance();
-    await db.backup(tmpPath);
-
-    const fileBuffer = fs.readFileSync(tmpPath);
-
-    // Cleanup temp file
-    try {
-      fs.unlinkSync(tmpPath);
-    } catch {
-      /* best effort */
-    }
-
-    return new Response(fileBuffer, {
-      status: 200,
-      headers: {
-        "Content-Type": "application/octet-stream",
-        "Content-Disposition": `attachment; filename="${exportFilename}"`,
-        "Content-Length": String(fileBuffer.length),
-        "Cache-Control": "no-cache, no-store",
-      },
-    });
-  } catch (error) {
-    console.error("[API] Error exporting database:", error);
-    return NextResponse.json({ error: error.message }, { status: 500 });
-  }
-}

src/app/api/db-backups/exportAll/route.ts

@@ -1,144 +0,0 @@
-import { NextResponse } from "next/server";
-import { getDbInstance, SQLITE_FILE } from "@/lib/db/core";
-import fs from "node:fs";
-import path from "node:path";
-import os from "node:os";
-
-/**
- * GET /api/db-backups/exportAll
- * Exports the entire database + settings as a ZIP archive
- */
-export async function GET() {
-  try {
-    if (!SQLITE_FILE) {
-      return NextResponse.json(
-        { error: "Export is only available in local (non-cloud) mode" },
-        { status: 400 }
-      );
-    }
-
-    const db = getDbInstance();
-    const timestamp = new Date().toISOString().replace(/[:.]/g, "-").slice(0, 19);
-    const tempDir = path.join(os.tmpdir(), `omniroute-export-${timestamp}`);
-    const zipPath = path.join(os.tmpdir(), `omniroute-full-backup-${timestamp}.zip`);
-
-    try {
-      // Create temp directory
-      fs.mkdirSync(tempDir, { recursive: true });
-
-      // 1. Export database using native backup API
-      const dbBackupPath = path.join(tempDir, "storage.sqlite");
-      db.backup(dbBackupPath);
-
-      // 2. Export settings as JSON
-      const settings: Record<string, string> = {};
-      try {
-        const rows = db.prepare("SELECT key, value FROM key_value").all() as {
-          key: string;
-          value: string;
-        }[];
-        for (const row of rows) {
-          settings[row.key] = row.value;
-        }
-      } catch {
-        // key_value table might not exist
-      }
-      fs.writeFileSync(path.join(tempDir, "settings.json"), JSON.stringify(settings, null, 2));
-
-      // 3. Export combos summary
-      const combos: unknown[] = [];
-      try {
-        const rows = db.prepare("SELECT * FROM combos").all();
-        combos.push(...rows);
-      } catch {
-        // combos table might not exist
-      }
-      fs.writeFileSync(path.join(tempDir, "combos.json"), JSON.stringify(combos, null, 2));
-
-      // 4. Export provider connections (without sensitive credentials)
-      const providers: unknown[] = [];
-      try {
-        const rows = db
-          .prepare(
-            "SELECT id, provider, name, auth_type, is_active, email, created_at FROM provider_connections"
-          )
-          .all();
-        providers.push(...rows);
-      } catch {
-        // provider_connections table might not exist
-      }
-      fs.writeFileSync(path.join(tempDir, "providers.json"), JSON.stringify(providers, null, 2));
-
-      // 5. Export API keys summary (masked)
-      const apiKeys: unknown[] = [];
-      try {
-        const rows = db
-          .prepare(
-            "SELECT id, name, substr(key, 1, 8) as prefix, machine_id, created_at FROM api_keys"
-          )
-          .all();
-        apiKeys.push(...rows);
-      } catch {
-        // api_keys table might not exist
-      }
-      fs.writeFileSync(path.join(tempDir, "api-keys.json"), JSON.stringify(apiKeys, null, 2));
-
-      // 6. Export metadata
-      const metadata = {
-        exportedAt: new Date().toISOString(),
-        version: process.env.npm_package_version || "unknown",
-        format: "omniroute-full-backup-v1",
-        contents: [
-          "storage.sqlite - Full database",
-          "settings.json - Key-value settings",
-          "combos.json - Combo configurations",
-          "providers.json - Provider connections (no credentials)",
-          "api-keys.json - API key metadata (masked)",
-        ],
-      };
-      fs.writeFileSync(path.join(tempDir, "metadata.json"), JSON.stringify(metadata, null, 2));
-
-      // Create ZIP using tar (available on all Linux/macOS, and the archiver npm package is not installed)
-      // We'll use Node.js built-in zlib to create a simple tar.gz instead
-      const { execSync } = require("node:child_process");
-      const tarPath = zipPath.replace(".zip", ".tar.gz");
-      execSync(`tar -czf "${tarPath}" -C "${path.dirname(tempDir)}" "${path.basename(tempDir)}"`, {
-        timeout: 30000,
-      });
-
-      // Read the archive
-      const archiveBuffer = fs.readFileSync(tarPath);
-
-      // Cleanup
-      fs.rmSync(tempDir, { recursive: true, force: true });
-      fs.unlinkSync(tarPath);
-
-      return new NextResponse(archiveBuffer, {
-        status: 200,
-        headers: {
-          "Content-Type": "application/gzip",
-          "Content-Disposition": `attachment; filename="omniroute-full-backup-${timestamp}.tar.gz"`,
-          "Content-Length": archiveBuffer.length.toString(),
-        },
-      });
-    } catch (innerError) {
-      // Cleanup on error
-      try {
-        if (fs.existsSync(tempDir)) fs.rmSync(tempDir, { recursive: true, force: true });
-        if (fs.existsSync(zipPath)) fs.unlinkSync(zipPath);
-      } catch {
-        /* ignore cleanup errors */
-      }
-      throw innerError;
-    }
-  } catch (error: unknown) {
-    console.error("[ExportAll] Error:", error);
-    return NextResponse.json(
-      {
-        error: "Failed to create full export",
-        details: error instanceof Error ? error.message : String(error),
-      },
-      { status: 500 }
-    );
-  }
-}

src/app/api/db-backups/import/route.ts

@@ -1,155 +0,0 @@
-import { NextResponse } from "next/server";
-import Database from "better-sqlite3";
-import path from "node:path";
-import fs from "node:fs";
-import os from "node:os";
-import { getDbInstance, resetDbInstance, SQLITE_FILE } from "@/lib/db/core";
-import { backupDbFile } from "@/lib/db/backup";
-
-const MAX_UPLOAD_SIZE = 100 * 1024 * 1024; // 100 MB
-
-// Required tables that must exist in a valid OmniRoute database
-const REQUIRED_TABLES = ["provider_connections", "provider_nodes", "combos", "api_keys"];
-
-/**
- * POST /api/db-backups/import — Upload a .sqlite file to replace the current database.
- *
- * Accepts multipart/form-data with a single "file" field containing the .sqlite backup.
- * Validates integrity, schema, and required tables before replacing the active database.
- */
-export async function POST(request: Request) {
-  let tmpPath: string | null = null;
-
-  try {
-    const formData = await request.formData();
-    const file = formData.get("file") as File | null;
-
-    if (!file) {
-      return NextResponse.json(
-        { error: "No file provided. Upload a .sqlite file." },
-        { status: 400 }
-      );
-    }
-
-    // Validate filename extension
-    if (!file.name.endsWith(".sqlite")) {
-      return NextResponse.json(
-        { error: "Invalid file type. Only .sqlite files are accepted." },
-        { status: 400 }
-      );
-    }
-
-    // Validate file size
-    if (file.size > MAX_UPLOAD_SIZE) {
-      return NextResponse.json(
-        { error: `File too large. Maximum allowed size is ${MAX_UPLOAD_SIZE / (1024 * 1024)} MB.` },
-        { status: 400 }
-      );
-    }
-
-    if (file.size < 4096) {
-      return NextResponse.json(
-        { error: "File too small to be a valid SQLite database." },
-        { status: 400 }
-      );
-    }
-
-    // Write uploaded file to temp location
-    const arrayBuffer = await file.arrayBuffer();
-    const buffer = Buffer.from(arrayBuffer);
-    tmpPath = path.join(os.tmpdir(), `omniroute-import-${Date.now()}.sqlite`);
-    fs.writeFileSync(tmpPath, buffer);
-
-    // Validate SQLite integrity
-    let testDb: InstanceType<typeof Database> | null = null;
-    try {
-      testDb = new Database(tmpPath, { readonly: true });
-      const result = testDb.pragma("integrity_check") as any[];
-      if (result[0]?.integrity_check !== "ok") {
-        return NextResponse.json(
-          { error: "Database integrity check failed. The file may be corrupted." },
-          { status: 400 }
-        );
-      }
-
-      // Validate required tables exist
-      const tables = testDb
-        .prepare("SELECT name FROM sqlite_master WHERE type='table'")
-        .all()
-        .map((row: any) => row.name);
-
-      const missingTables = REQUIRED_TABLES.filter((t) => !tables.includes(t));
-      if (missingTables.length > 0) {
-        return NextResponse.json(
-          {
-            error: `Invalid OmniRoute database. Missing tables: ${missingTables.join(", ")}`,
-          },
-          { status: 400 }
-        );
-      }
-
-      testDb.close();
-      testDb = null;
-    } catch (e) {
-      if (testDb) testDb.close();
-      return NextResponse.json({ error: `Invalid database file: ${e.message}` }, { status: 400 });
-    }
-
-    // Create pre-import backup
-    backupDbFile("pre-import");
-
-    // Close and reset current DB connection
-    resetDbInstance();
-
-    // Remove main file and WAL sidecars
-    const sqliteFilesToReplace = [
-      SQLITE_FILE,
-      `${SQLITE_FILE}-wal`,
-      `${SQLITE_FILE}-shm`,
-      `${SQLITE_FILE}-journal`,
-    ];
-    for (const filePath of sqliteFilesToReplace) {
-      if (!filePath) continue;
-      if (fs.existsSync(filePath)) {
-        fs.unlinkSync(filePath);
-      }
-    }
-
-    // Copy imported file over current DB
-    fs.copyFileSync(tmpPath, SQLITE_FILE!);
-
-    // Reopen and verify
-    const db = getDbInstance();
-    const connCount =
-      (db.prepare("SELECT COUNT(*) as cnt FROM provider_connections").get() as any)?.cnt || 0;
-    const nodeCount =
-      (db.prepare("SELECT COUNT(*) as cnt FROM provider_nodes").get() as any)?.cnt || 0;
-    const comboCount = (db.prepare("SELECT COUNT(*) as cnt FROM combos").get() as any)?.cnt || 0;
-    const keyCount = (db.prepare("SELECT COUNT(*) as cnt FROM api_keys").get() as any)?.cnt || 0;
-
-    console.log(
-      `[DB] Imported database from upload: ${connCount} connections, ${nodeCount} nodes, ${comboCount} combos, ${keyCount} API keys`
-    );
-
-    return NextResponse.json({
-      imported: true,
-      filename: file.name,
-      connectionCount: connCount,
-      nodeCount,
-      comboCount,
-      apiKeyCount: keyCount,
-    });
-  } catch (error) {
-    console.error("[API] Error importing database:", error);
-    return NextResponse.json({ error: error.message }, { status: 500 });
-  } finally {
-    // Cleanup temp file
-    if (tmpPath && fs.existsSync(tmpPath)) {
-      try {
-        fs.unlinkSync(tmpPath);
-      } catch {
-        /* best effort */
-      }
-    }
-  }
-}

src/app/api/keys/route.ts

@@ -8,12 +8,7 @@ import { createKeySchema, validateBody } from "@/shared/validation/schemas";
 export async function GET() {
   try {
     const keys = await getApiKeys();
-    // Mask key values — users should never see full keys after creation
-    const maskedKeys = keys.map((k) => ({
-      ...k,
-      key: k.key ? k.key.slice(0, 8) + "****" + k.key.slice(-4) : null,
-    }));
-    return NextResponse.json({ keys: maskedKeys });
+    return NextResponse.json({ keys });
   } catch (error) {
     console.log("Error fetching keys:", error);
     return NextResponse.json({ error: "Failed to fetch keys" }, { status: 500 });

src/app/api/logs/console/route.ts

@@ -1,115 +0,0 @@
-/**
- * Console Log API — GET /api/logs/console
- *
- * Reads the application log file and returns entries from the last 1 hour.
- * Supports filtering by level and limiting the number of entries.
- *
- * Query params:
- *   - level: minimum log level (debug|info|warn|error) — default: all
- *   - limit: max entries to return — default: 500
- *   - component: filter by component/module name
- */
-
-import { NextRequest, NextResponse } from "next/server";
-import { readFileSync, existsSync } from "fs";
-import { join } from "path";
-
-const LEVEL_ORDER: Record<string, number> = {
-  trace: 5,
-  debug: 10,
-  info: 20,
-  warn: 30,
-  error: 40,
-  fatal: 50,
-};
-
-// Map pino numeric levels to string levels
-const NUMERIC_LEVEL_MAP: Record<number, string> = {
-  10: "trace",
-  20: "info",
-  30: "warn",
-  40: "error",
-  50: "fatal",
-  60: "fatal",
-};
-
-function getLogFilePath(): string {
-  return process.env.LOG_FILE_PATH || join(process.cwd(), "logs", "application", "app.log");
-}
-
-function parseLevel(raw: string | number): string {
-  if (typeof raw === "number") {
-    return NUMERIC_LEVEL_MAP[raw] || "info";
-  }
-  return String(raw).toLowerCase();
-}
-
-export async function GET(req: NextRequest) {
-  try {
-    const { searchParams } = new URL(req.url);
-    const levelFilter = searchParams.get("level") || "all";
-    const limit = Math.min(parseInt(searchParams.get("limit") || "500", 10), 2000);
-    const componentFilter = searchParams.get("component") || "";
-
-    const logPath = getLogFilePath();
-
-    if (!existsSync(logPath)) {
-      return NextResponse.json([], { status: 200 });
-    }
-
-    const raw = readFileSync(logPath, "utf-8");
-    const lines = raw.trim().split("\n").filter(Boolean);
-
-    const oneHourAgo = Date.now() - 60 * 60 * 1000;
-    const minLevel = LEVEL_ORDER[levelFilter] || 0;
-
-    const entries: any[] = [];
-
-    for (const line of lines) {
-      try {
-        const entry = JSON.parse(line);
-
-        // Filter by time (last 1 hour)
-        const ts = entry.time || entry.timestamp;
-        if (ts) {
-          const entryTime = new Date(ts).getTime();
-          if (entryTime < oneHourAgo) continue;
-        }
-
-        // Normalize level
-        entry.level = parseLevel(entry.level);
-
-        // Filter by level
-        const entryLevelNum = LEVEL_ORDER[entry.level] || 0;
-        if (minLevel > 0 && entryLevelNum < minLevel) continue;
-
-        // Filter by component
-        if (componentFilter) {
-          const comp = entry.component || entry.module || "";
-          if (!comp.toLowerCase().includes(componentFilter.toLowerCase())) continue;
-        }
-
-        // Normalize timestamp field
-        if (entry.time && !entry.timestamp) {
-          entry.timestamp = entry.time;
-        }
-
-        entries.push(entry);
-      } catch {
-        // Skip unparseable lines
-      }
-    }
-
-    // Return last N entries (most recent)
-    const result = entries.slice(-limit);
-
-    return NextResponse.json(result, {
-      status: 200,
-      headers: {
-        "Cache-Control": "no-store, no-cache, must-revalidate",
-      },
-    });
-  } catch (err: any) {
-    return NextResponse.json({ error: err.message || "Failed to read logs" }, { status: 500 });
-  }
-}

src/app/api/models/route.ts

@@ -1,37 +1,20 @@
 import { NextResponse } from "next/server";
-import { getModelAliases, setModelAlias, getProviderConnections } from "@/models";
+import { getModelAliases, setModelAlias } from "@/models";
 import { AI_MODELS } from "@/shared/constants/config";
 
-// GET /api/models - Get models with aliases (only from active providers by default)
-export async function GET(request: Request) {
+// GET /api/models - Get models with aliases
+export async function GET() {
   try {
-    const { searchParams } = new URL(request.url);
-    const showAll = searchParams.get("all") === "true";
-
     const modelAliases = await getModelAliases();
 
-    // Get active provider connections to filter available models
-    let activeProviders: Set<string> | null = null;
-    if (!showAll) {
-      try {
-        const connections = await getProviderConnections();
-        const active = connections.filter((c: any) => c.isActive !== false);
-        activeProviders = new Set(active.map((c: any) => c.provider));
-      } catch {
-        // If DB unavailable, show all models
-      }
-    }
-
-    const models = AI_MODELS.map((m: any) => {
+    const models = AI_MODELS.map((m) => {
       const fullModel = `${m.provider}/${m.model}`;
-      const available = !activeProviders || activeProviders.has(m.provider);
       return {
         ...m,
         fullModel,
         alias: modelAliases[fullModel] || m.model,
-        available,
       };
-    }).filter((m: any) => showAll || m.available);
+    });
 
     return NextResponse.json({ models });
   } catch (error) {

src/app/api/settings/require-login/route.ts

@@ -1,6 +1,5 @@
 import { NextResponse } from "next/server";
-import { getSettings, updateSettings } from "@/lib/localDb";
-import bcrypt from "bcryptjs";
+import { getSettings } from "@/lib/localDb";
 
 export async function GET() {
   try {
@@ -11,43 +10,3 @@ export async function GET() {
     return NextResponse.json({ requireLogin: true }, { status: 200 });
   }
 }
-
-/**
- * POST /api/settings/require-login — Set password and/or toggle requireLogin.
- * Used by the onboarding wizard security step.
- */
-export async function POST(request: Request) {
-  try {
-    const body = await request.json();
-    const { requireLogin, password } = body;
-
-    const updates: Record<string, any> = {};
-
-    if (typeof requireLogin === "boolean") {
-      updates.requireLogin = requireLogin;
-    }
-
-    if (password && typeof password === "string" && password.length >= 4) {
-      const hashedPassword = await bcrypt.hash(password, 12);
-      updates.password = hashedPassword;
-    } else if (password) {
-      return NextResponse.json(
-        { error: "Password must be at least 4 characters" },
-        { status: 400 }
-      );
-    }
-
-    if (Object.keys(updates).length === 0) {
-      return NextResponse.json({ error: "No valid fields to update" }, { status: 400 });
-    }
-
-    await updateSettings(updates);
-    return NextResponse.json({ success: true });
-  } catch (error) {
-    console.error("[API] Error updating require-login settings:", error);
-    return NextResponse.json(
-      { error: error instanceof Error ? error.message : "Failed to update settings" },
-      { status: 500 }
-    );
-  }
-}

src/app/api/tags/route.ts

@@ -1,6 +1,11 @@
-import { CORS_HEADERS } from "@/shared/utils/cors";
 import { ollamaModels } from "@omniroute/open-sse/config/ollamaModels.ts";
 
+const CORS_HEADERS = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Methods": "GET, OPTIONS",
+  "Access-Control-Allow-Headers": "*",
+};
+
 export async function OPTIONS() {
   return new Response(null, { headers: CORS_HEADERS });
 }

src/app/api/v1/api/chat/route.ts

@@ -1,4 +1,3 @@
-import { CORS_ORIGIN } from "@/shared/utils/cors";
 import { handleChat } from "@/sse/handlers/chat";
 import { initTranslators } from "@omniroute/open-sse/translator/index.ts";
 import { transformToOllama } from "@omniroute/open-sse/utils/ollamaTransform.ts";
@@ -16,7 +15,7 @@ async function ensureInitialized() {
 export async function OPTIONS() {
   return new Response(null, {
     headers: {
-      "Access-Control-Allow-Origin": CORS_ORIGIN,
+      "Access-Control-Allow-Origin": "*",
       "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
       "Access-Control-Allow-Headers": "*",
     },

src/app/api/v1/audio/speech/route.ts

@@ -1,4 +1,3 @@
-import { CORS_ORIGIN } from "@/shared/utils/cors";
 import { handleAudioSpeech } from "@omniroute/open-sse/handlers/audioSpeech.ts";
 import { getProviderCredentials, extractApiKey, isValidApiKey } from "@/sse/services/auth";
 import { parseSpeechModel } from "@omniroute/open-sse/config/audioRegistry.ts";
@@ -11,7 +10,7 @@ import { HTTP_STATUS } from "@omniroute/open-sse/config/constants.ts";
 export async function OPTIONS() {
   return new Response(null, {
     headers: {
-      "Access-Control-Allow-Origin": CORS_ORIGIN,
+      "Access-Control-Allow-Origin": "*",
       "Access-Control-Allow-Methods": "POST, OPTIONS",
       "Access-Control-Allow-Headers": "*",
     },

src/app/api/v1/audio/transcriptions/route.ts

@@ -1,4 +1,3 @@
-import { CORS_ORIGIN } from "@/shared/utils/cors";
 import { handleAudioTranscription } from "@omniroute/open-sse/handlers/audioTranscription.ts";
 import { getProviderCredentials, extractApiKey, isValidApiKey } from "@/sse/services/auth";
 import { parseTranscriptionModel } from "@omniroute/open-sse/config/audioRegistry.ts";
@@ -11,7 +10,7 @@ import { HTTP_STATUS } from "@omniroute/open-sse/config/constants.ts";
 export async function OPTIONS() {
   return new Response(null, {
     headers: {
-      "Access-Control-Allow-Origin": CORS_ORIGIN,
+      "Access-Control-Allow-Origin": "*",
       "Access-Control-Allow-Methods": "POST, OPTIONS",
       "Access-Control-Allow-Headers": "*",
     },

src/app/api/v1/chat/completions/route.ts

@@ -1,14 +1,9 @@
-import { CORS_ORIGIN } from "@/shared/utils/cors";
 import { callCloudWithMachineId } from "@/shared/utils/cloud";
 import { handleChat } from "@/sse/handlers/chat";
 import { initTranslators } from "@omniroute/open-sse/translator/index.ts";
-import { createInjectionGuard } from "@/middleware/promptInjectionGuard";
 
 let initPromise = null;
 
-// Singleton injection guard instance
-const injectionGuard = createInjectionGuard();
-
 /**
  * Initialize translators once (Promise-based singleton — no race condition)
  */
@@ -27,7 +22,7 @@ function ensureInitialized() {
 export async function OPTIONS() {
   return new Response(null, {
     headers: {
-      "Access-Control-Allow-Origin": CORS_ORIGIN,
+      "Access-Control-Allow-Origin": "*",
       "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
       "Access-Control-Allow-Headers": "*",
     },
@@ -35,31 +30,8 @@ export async function OPTIONS() {
 }
 
 export async function POST(request) {
+  // Fallback to local handling
   await ensureInitialized();
 
-  // Prompt injection guard — inspect body before forwarding
-  try {
-    const cloned = request.clone();
-    const body = await cloned.json().catch(() => null);
-    if (body) {
-      const { blocked, result } = injectionGuard(body);
-      if (blocked) {
-        return new Response(
-          JSON.stringify({
-            error: {
-              message: "Request blocked: potential prompt injection detected",
-              type: "injection_detected",
-              code: "SECURITY_001",
-              detections: result.detections.length,
-            },
-          }),
-          { status: 400, headers: { "Content-Type": "application/json" } }
-        );
-      }
-    }
-  } catch {
-    // Don't block on guard errors — fail open
-  }
-
   return await handleChat(request);
 }

src/app/api/v1/embeddings/route.ts

@@ -1,4 +1,3 @@
-import { CORS_ORIGIN } from "@/shared/utils/cors";
 import { handleEmbedding } from "@omniroute/open-sse/handlers/embeddings.ts";
 import { getProviderCredentials, extractApiKey, isValidApiKey } from "@/sse/services/auth";
 import {
@@ -16,7 +15,7 @@ import { toJsonErrorPayload } from "@/shared/utils/upstreamError";
 export async function OPTIONS() {
   return new Response(null, {
     headers: {
-      "Access-Control-Allow-Origin": CORS_ORIGIN,
+      "Access-Control-Allow-Origin": "*",
       "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
       "Access-Control-Allow-Headers": "*",
     },

src/app/api/v1/images/generations/route.ts

@@ -1,4 +1,3 @@
-import { CORS_ORIGIN } from "@/shared/utils/cors";
 import { handleImageGeneration } from "@omniroute/open-sse/handlers/imageGeneration.ts";
 import { getProviderCredentials, extractApiKey, isValidApiKey } from "@/sse/services/auth";
 import { parseImageModel, getAllImageModels } from "@omniroute/open-sse/config/imageRegistry.ts";
@@ -13,7 +12,7 @@ import { toJsonErrorPayload } from "@/shared/utils/upstreamError";
 export async function OPTIONS() {
   return new Response(null, {
     headers: {
-      "Access-Control-Allow-Origin": CORS_ORIGIN,
+      "Access-Control-Allow-Origin": "*",
       "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
       "Access-Control-Allow-Headers": "*",
     },
@@ -93,15 +92,15 @@ export async function POST(request) {
   const result = await handleImageGeneration({ body, credentials, log });
 
   if (result.success) {
-    return new Response(JSON.stringify((result as any).data), {
+    return new Response(JSON.stringify(result.data), {
       status: 200,
       headers: { "Content-Type": "application/json" },
     });
   }
 
-  const errorPayload = toJsonErrorPayload((result as any).error, "Image generation provider error");
+  const errorPayload = toJsonErrorPayload(result.error, "Image generation provider error");
   return new Response(JSON.stringify(errorPayload), {
-    status: (result as any).status,
+    status: result.status,
     headers: { "Content-Type": "application/json" },
   });
 }

src/app/api/v1/messages/count_tokens/route.ts

@@ -1,4 +1,8 @@
-import { CORS_HEADERS } from "@/shared/utils/cors";
+const CORS_HEADERS = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Methods": "POST, OPTIONS",
+  "Access-Control-Allow-Headers": "*",
+};
 
 /**
  * Handle CORS preflight

src/app/api/v1/messages/route.ts

@@ -1,4 +1,3 @@
-import { CORS_ORIGIN } from "@/shared/utils/cors";
 import { handleChat } from "@/sse/handlers/chat";
 import { initTranslators } from "@omniroute/open-sse/translator/index.ts";
 
@@ -21,7 +20,7 @@ async function ensureInitialized() {
 export async function OPTIONS() {
   return new Response(null, {
     headers: {
-      "Access-Control-Allow-Origin": CORS_ORIGIN,
+      "Access-Control-Allow-Origin": "*",
       "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
       "Access-Control-Allow-Headers": "*",
     },

src/app/api/v1/models/route.ts

@@ -1,8 +1,6 @@
-import { CORS_ORIGIN } from "@/shared/utils/cors";
 import { PROVIDER_MODELS, PROVIDER_ID_TO_ALIAS } from "@/shared/constants/models";
 import { AI_PROVIDERS } from "@/shared/constants/providers";
-import { getProviderConnections, getCombos, getAllCustomModels, getSettings } from "@/lib/localDb";
-import { extractApiKey, isValidApiKey } from "@/sse/services/auth";
+import { getProviderConnections, getCombos, getAllCustomModels } from "@/lib/localDb";
 import { getAllEmbeddingModels } from "@omniroute/open-sse/config/embeddingRegistry.ts";
 import { getAllImageModels } from "@omniroute/open-sse/config/imageRegistry.ts";
 import { getAllRerankModels } from "@omniroute/open-sse/config/rerankRegistry.ts";
@@ -84,7 +82,7 @@ function buildAliasMaps() {
 export async function OPTIONS() {
   return new Response(null, {
     headers: {
-      "Access-Control-Allow-Origin": CORS_ORIGIN,
+      "Access-Control-Allow-Origin": "*",
       "Access-Control-Allow-Methods": "GET, OPTIONS",
       "Access-Control-Allow-Headers": "*",
     },
@@ -95,39 +93,19 @@ export async function OPTIONS() {
  * GET /v1/models - OpenAI compatible models list
  * Returns models from all active providers, combos, embeddings, and image models in OpenAI format
  */
-export async function GET(request: Request) {
+export async function GET() {
   try {
-    // Issue #100: Optionally require API key for /models (security hardening)
-    // When enabled, unauthenticated requests get 404 to hide endpoint existence
-    let settings: Record<string, any> = {};
-    try {
-      settings = await getSettings();
-    } catch {}
-    if (settings.requireAuthForModels === true) {
-      const apiKey = extractApiKey(request);
-      if (!apiKey || !(await isValidApiKey(apiKey))) {
-        return new Response("Not Found", { status: 404 });
-      }
-    }
-
     const { aliasToProviderId, providerIdToAlias } = buildAliasMaps();
 
-    // Issue #96: Allow blocking specific providers from the models list
-    const blockedProviders: Set<string> = new Set(
-      Array.isArray(settings.blockedProviders) ? settings.blockedProviders : []
-    );
-
     // Get active provider connections
     let connections = [];
-    let totalConnectionCount = 0; // Track if DB has ANY connections (even disabled)
     try {
       connections = await getProviderConnections();
-      totalConnectionCount = connections.length;
       // Filter to only active connections
       connections = connections.filter((c) => c.isActive !== false);
     } catch (e) {
-      // If database not available, show no provider models (safe default)
-      console.log("Could not fetch providers, showing only combos/custom models");
+      // If database not available, return all models
+      console.log("Could not fetch providers, returning all models");
     }
 
     // Get combos
@@ -150,9 +128,8 @@ export async function GET(request: Request) {
     const models = [];
     const timestamp = Math.floor(Date.now() / 1000);
 
-    // Add combos first (they appear at the top) — only active ones
+    // Add combos first (they appear at the top)
     for (const combo of combos) {
-      if (combo.isActive === false) continue;
       models.push({
         id: combo.name,
         object: "model",
@@ -169,11 +146,12 @@ export async function GET(request: Request) {
       const providerId = aliasToProviderId[alias] || alias;
       const canonicalProviderId = FALLBACK_ALIAS_TO_PROVIDER[alias] || providerId;
 
-      // Skip blocked providers (Issue #96)
-      if (blockedProviders.has(alias) || blockedProviders.has(canonicalProviderId)) continue;
-
-      // Only include models from providers with active connections
-      if (!activeAliases.has(alias) && !activeAliases.has(canonicalProviderId)) {
+      // If we have active providers, only include those; otherwise include all
+      if (
+        connections.length > 0 &&
+        !activeAliases.has(alias) &&
+        !activeAliases.has(canonicalProviderId)
+      ) {
         continue;
       }
 
@@ -205,16 +183,8 @@ export async function GET(request: Request) {
       }
     }
 
-    // Helper: check if a provider is active (by provider id or alias)
-    const isProviderActive = (provider: string) => {
-      if (activeAliases.size === 0) return false; // No active connections = show nothing
-      const alias = providerIdToAlias[provider] || provider;
-      return activeAliases.has(alias) || activeAliases.has(provider);
-    };
-
-    // Add embedding models (filtered by active providers)
+    // Add embedding models
     for (const embModel of getAllEmbeddingModels()) {
-      if (!isProviderActive(embModel.provider)) continue;
       models.push({
         id: embModel.id,
         object: "model",
@@ -225,9 +195,8 @@ export async function GET(request: Request) {
       });
     }
 
-    // Add image models (filtered by active providers)
+    // Add image models
     for (const imgModel of getAllImageModels()) {
-      if (!isProviderActive(imgModel.provider)) continue;
       models.push({
         id: imgModel.id,
         object: "model",
@@ -238,9 +207,8 @@ export async function GET(request: Request) {
       });
     }
 
-    // Add rerank models (filtered by active providers)
+    // Add rerank models
     for (const rerankModel of getAllRerankModels()) {
-      if (!isProviderActive(rerankModel.provider)) continue;
       models.push({
         id: rerankModel.id,
         object: "model",
@@ -250,9 +218,8 @@ export async function GET(request: Request) {
       });
     }
 
-    // Add audio models (filtered by active providers)
+    // Add audio models (transcription + speech)
     for (const audioModel of getAllAudioModels()) {
-      if (!isProviderActive(audioModel.provider)) continue;
       models.push({
         id: audioModel.id,
         object: "model",
@@ -263,9 +230,8 @@ export async function GET(request: Request) {
       });
     }
 
-    // Add moderation models (filtered by active providers)
+    // Add moderation models
     for (const modModel of getAllModerationModels()) {
-      if (!isProviderActive(modModel.provider)) continue;
       models.push({
         id: modModel.id,
         object: "model",
@@ -281,12 +247,11 @@ export async function GET(request: Request) {
       for (const [providerId, providerCustomModels] of Object.entries(customModelsMap)) {
         const alias = providerIdToAlias[providerId] || providerId;
         const canonicalProviderId = FALLBACK_ALIAS_TO_PROVIDER[alias] || providerId;
-        // Only include if provider is active — check alias, canonical ID, or raw providerId
-        // (raw check needed for OpenAI-compatible providers whose ID isn't in the alias map)
+        // Only include if provider is active (or no connections configured)
         if (
+          connections.length > 0 &&
           !activeAliases.has(alias) &&
-          !activeAliases.has(canonicalProviderId) &&
-          !activeAliases.has(providerId)
+          !activeAliases.has(canonicalProviderId)
         )
           continue;
 
@@ -333,7 +298,7 @@ export async function GET(request: Request) {
       },
       {
         headers: {
-          "Access-Control-Allow-Origin": CORS_ORIGIN,
+          "Access-Control-Allow-Origin": "*",
         },
       }
     );

src/app/api/v1/moderations/route.ts

@@ -1,4 +1,3 @@
-import { CORS_ORIGIN } from "@/shared/utils/cors";
 import { handleModeration } from "@omniroute/open-sse/handlers/moderations.ts";
 import { getProviderCredentials, extractApiKey, isValidApiKey } from "@/sse/services/auth";
 import { parseModerationModel } from "@omniroute/open-sse/config/moderationRegistry.ts";
@@ -11,7 +10,7 @@ import { HTTP_STATUS } from "@omniroute/open-sse/config/constants.ts";
 export async function OPTIONS() {
   return new Response(null, {
     headers: {
-      "Access-Control-Allow-Origin": CORS_ORIGIN,
+      "Access-Control-Allow-Origin": "*",
       "Access-Control-Allow-Methods": "POST, OPTIONS",
       "Access-Control-Allow-Headers": "*",
     },

src/app/api/v1/providers/[provider]/chat/completions/route.ts

@@ -1,4 +1,3 @@
-import { CORS_ORIGIN } from "@/shared/utils/cors";
 import { handleChat } from "@/sse/handlers/chat";
 import { initTranslators } from "@omniroute/open-sse/translator/index.ts";
 import { errorResponse } from "@omniroute/open-sse/utils/error.ts";
@@ -20,7 +19,7 @@ async function ensureInitialized() {
 export async function OPTIONS() {
   return new Response(null, {
     headers: {
-      "Access-Control-Allow-Origin": CORS_ORIGIN,
+      "Access-Control-Allow-Origin": "*",
       "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
       "Access-Control-Allow-Headers": "*",
     },

src/app/api/v1/providers/[provider]/embeddings/route.ts

@@ -1,4 +1,3 @@
-import { CORS_ORIGIN } from "@/shared/utils/cors";
 import { errorResponse } from "@omniroute/open-sse/utils/error.ts";
 import { HTTP_STATUS } from "@omniroute/open-sse/config/constants.ts";
 import { getRegistryEntry } from "@omniroute/open-sse/config/providerRegistry.ts";
@@ -12,7 +11,7 @@ import * as log from "@/sse/utils/logger";
 export async function OPTIONS() {
   return new Response(null, {
     headers: {
-      "Access-Control-Allow-Origin": CORS_ORIGIN,
+      "Access-Control-Allow-Origin": "*",
       "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
       "Access-Control-Allow-Headers": "*",
     },