Merge branch 'release/v3.8.8' into feat/quota-share-redesign

# Conflicts:
#	src/lib/db/apiKeys.ts
#	src/lib/db/migrationRunner.ts
#	src/server/authz/policies/management.ts
#	src/server/authz/routeGuard.ts
#	tests/unit/route-guard-private-lan.test.ts

.env.example

@@ -690,7 +690,15 @@ GITHUB_OAUTH_CLIENT_ID=Iv1.b507a08c87ecfe98
 # Used by: open-sse/executors/base.ts — buildHeaders() dynamic lookup.
 # Update these when providers release new CLI versions to avoid blocks.
 
-CLAUDE_USER_AGENT="claude-cli/2.1.146 (external, cli)"
+CLAUDE_USER_AGENT="claude-cli/2.1.158 (external, cli)"
+
+# Disable the deterministic tool-name cloak applied on both Anthropic-bound paths
+# (executors/base.ts native OAuth + executors/cliproxyapi.ts CLIProxyAPI) —
+# third-party-harness tool names are aliased to
+# Claude Code canonical or PascalCase forms so Anthropic does not refuse the
+# stream with a misleading 400 out-of-extra-usage placeholder. Set to true to
+# forward the original names verbatim (debugging only).
+# CLAUDE_DISABLE_TOOL_NAME_CLOAK=false
 CODEX_USER_AGENT="codex-cli/0.132.0 (Windows 10.0.26200; x64)"
 GITHUB_USER_AGENT="GitHubCopilotChat/0.45.1"
 ANTIGRAVITY_USER_AGENT="antigravity/2.0.1 linux/arm64 google-api-nodejs-client/10.3.0"
@@ -919,10 +927,11 @@ APP_LOG_TO_FILE=true
 # 17. MEMORY OPTIMIZATION (Low-RAM / Docker)
 # ═══════════════════════════════════════════════════════════════════════════════
 
-# Node.js V8 heap limit in MB.
-# Used by: Docker entrypoint — sets --max-old-space-size.
-# Default: 256 (Docker) | system default (npm)
-# OMNIROUTE_MEMORY_MB=256
+# Node.js V8 heap limit in MB, passed to the server via --max-old-space-size.
+# Used by the standalone launcher (Docker CMD) and `omniroute serve`.
+# Default: 512. Clamped to [64, 16384]. Raise it (e.g. 1024) if you see random
+# OOM crashes under load or with a large SQLite DB (#2939).
+# OMNIROUTE_MEMORY_MB=512
 
 # ── CLI helpers (bin/cli/) ──
 # Override UI language for CLI output. Accepts BCP-47 locale (e.g. en, pt-BR).