Merge remote-tracking branch 'origin/release/v3.8.50' into feat/9544-muse-code-cli-provider

fix(providers): register muse-code canonical provider + golden snapshot
- Add muse-code to APIKEY_PROVIDERS_FRONTIER so check:provider-consistency passes - Regenerate translate-path golden snapshot to include the muse-code entry (20 additive lines, no other providers changed)
2026-08-09 00:32:13 +03:00 · 2026-08-08 08:47:38 -03:00 · 2026-08-08 08:47:18 -03:00 · 2026-08-07 17:01:16 -03:00 · 2026-08-06 21:29:32 -03:00
116 changed files with 1081 additions and 2904 deletions
--- a/.github/workflows/quality.yml
+++ b/.github/workflows/quality.yml
@@ -151,6 +151,63 @@ jobs:
          key: eslint-${{ runner.os }}-${{ hashFiles('eslint.config.mjs', 'eslint.complexity-ratchets.config.mjs', 'config/quality/eslint-suppressions.json', 'package-lock.json') }}
          restore-keys: |
            eslint-${{ runner.os }}-
+      - run: npm run check:provider-consistency
+      - run: npm run check:fetch-targets
+      # docs-all / openapi-routes / docs-symbols live in docs-gates (path-filtered).
+      - run: npm run check:deps
+      # #8522: --base-ref mode for PR events — compare against max(frozen, base) so
+      # inherited drift (base already over frozen cap) doesn't red an innocent PR.
+      # workflow_dispatch (no PR base) falls back to absolute comparison.
+      - name: File-size ratchet (base-relative on PR)
+        env:
+          PR_BASE_SHA: ${{ github.event.pull_request.base.sha }}
+        run: |
+          if [ -n "$PR_BASE_SHA" ]; then
+            npm run check:file-size -- --base-ref "$PR_BASE_SHA"
+          else
+            npm run check:file-size
+          fi
+      - run: npm run check:error-helper
+      - run: npm run check:migration-numbering
+      - run: npm run check:public-creds
+      - run: npm run check:db-rules
+      - run: npm run check:known-symbols
+      - run: npm run check:route-guard-membership
+      - run: npm run check:test-discovery
+      - run: npm run check:test-runner-api
+      # Guards tap.testFiles drift: a covering unit test absent from stryker.conf.json
+      # tap.testFiles makes its module's mutants survive on a cold nightly-mutation run,
+      # false-failing the blocking mutationScore ratchet. See check-mutation-test-coverage.mjs.
+      - run: npm run check:mutation-test-coverage
+      - run: npm run check:any-budget:t11
+      # Build-scope guard: fails if worktrees/cruft leak into the tsconfig include
+      # scope (would OOM `next build`). Instant. See incident 2026-06-25 / #5031.
+      - run: npm run check:build-scope
+      # Pack-policy (unexpected-files allowlist) WITHOUT a build — catches a stray file
+      # leaking into the npm tarball (v3.8.36: 6 ops bin/*.sh) per-PR instead of only on
+      # the release PR's heavy Package Artifact job.
+      - run: npm run check:pack-policy
+      # Complexity + cognitive-complexity: ONE ESLint walk (both baselines still
+      # enforced separately by ruleId). Avoids two cold tree walks on fast-path.
+      - run: npm run check:complexity-ratchets
+      # ── G0 (trilho .50): gates do trilho A que faltavam no trilho B ──────────────
+      # The god-file refactor happens in PRs→release/**; without these, the release
+      # rail never sees a new import cycle, dead code, duplication or a security
+      # regression until the release PR to main. Deliberately NOT brought here:
+      # bundle-size (self-skips without a build — this rail's build job is advisory
+      # and uploads nothing, so it would be dead configuration) and the coverage
+      # run (fast-unit already runs the full suite; the coverage ratchet stays on
+      # the main rail via --allow-missing in lint-guard).
+      - run: npm run check:cycles
+      - run: npm run check:lockfile
+      - name: Duplication ratchet
+        run: npm run check:duplication
+      - name: Dead-code ratchet (knip)
+        run: npm run check:dead-code
+      - name: Type coverage ratchet
+        run: npm run check:type-coverage
+      - name: Compression budget ratchet
+        run: npm run check:compression-budget
      # Security scanners — same hardened install as ci.yml quality-extended
      # (gh release download = authenticated, 5000 req/hr; curl to api.github.com
      # is rate-limited to 60/hr and silently no-ops when throttled). The blocking
@@ -194,63 +251,30 @@ jobs:
          "$HOME/.local/bin/osv-scanner" --version || true
          "$HOME/.local/bin/oasdiff" --version || true
          zizmor --version || true
-      # Quality gates (all, non-fail-fast) — #8542: replaces 17 bare check:* steps,
-      # 6 G0 gates, 4 ratchet gates, and 3 typecheck steps with a single aggregation
-      # step. Each gate runs in a loop with ::group::; failures are collected and
-      # reported at the end. set -uo pipefail (NOT set -e) so one failing gate does
-      # not abort the job and mask every later gate. Release-added gates are folded
-      # in: open-sse typecheck (#8781) and file-size base-relative mode (#8522).
-      - name: Quality gates (all, non-fail-fast)
+      - name: Secret scan (gitleaks, ratchet, blocking)
+        run: npm run check:secrets -- --ratchet
+      - name: Vulnerability ratchet (osv-scanner, ratchet, blocking)
+        run: npm run check:vuln-ratchet -- --ratchet
+      - name: Workflow lint (actionlint+zizmor, ratchet, blocking)
+        run: npm run check:workflows -- --ratchet
+      # BASE_REF is read by the script from the env (never interpolated into a
+      # shell body) — workflow-injection-safe. actions/checkout fetches remote
+      # refs, not a local branch named github.base_ref, so prefix origin/ or this
+      # gate self-skips every PR with reason=base-unresolved.
+      - name: OpenAPI breaking-change (oasdiff, ratchet, blocking)
        env:
-          # #8522: base-relative file-size mode on PR events — inherited drift (base
-          # already over frozen cap) must not red an innocent PR. Unset on
-          # workflow_dispatch (no PR base) → absolute comparison.
-          PR_BASE_SHA: ${{ github.event.pull_request.base.sha }}
          BASE_REF: ${{ github.base_ref && format('origin/{0}', github.base_ref) || '' }}
-        run: |
-          set -uo pipefail
-          gates=(
-            provider-consistency fetch-targets deps file-size error-helper
-            migration-numbering public-creds db-rules known-symbols
-            route-guard-membership test-discovery test-runner-api
-            mutation-test-coverage any-budget:t11 build-scope pack-policy
-            complexity-ratchets
-            cycles lockfile duplication dead-code type-coverage compression-budget
-            # #8781: open-sse workspace typecheck gate — the workspace imports @/ which
-            # escapes to src/ via undeclared path aliases. See check-open-sse-typecheck.mjs.
-            open-sse-typecheck
-          )
-          ratchet_gates=(
-            secrets vuln-ratchet workflows openapi-breaking
-          )
-          failed=()
-          for g in "${gates[@]}"; do
-            echo "::group::check:$g"
-            # #8522: file-size is base-relative on PR events (compare against
-            # max(frozen, base)) so inherited drift doesn't red an innocent PR;
-            # workflow_dispatch (no PR base) falls back to absolute comparison.
-            if [ "$g" = "file-size" ] && [ -n "${PR_BASE_SHA:-}" ]; then
-              npm run "check:$g" -- --base-ref "$PR_BASE_SHA" || failed+=("$g")
-            else
-              npm run "check:$g" || failed+=("$g")
-            fi
-            echo "::endgroup::"
-          done
-          for g in "${ratchet_gates[@]}"; do
-            echo "::group::check:$g (ratchet)"
-            npm run "check:$g" -- --ratchet || failed+=("$g")
-            echo "::endgroup::"
-          done
-          echo "::group::typecheck:core"
-          npm run typecheck:core || failed+=("typecheck:core")
-          echo "::endgroup::"
-          echo "::group::check:dashboard-typecheck"
-          npm run check:dashboard-typecheck || failed+=("check:dashboard-typecheck")
-          echo "::endgroup::"
-          if (( ${#failed[@]} )); then
-            printf '::error::%d gate(s) failed: %s\n' "${#failed[@]}" "${failed[*]}"
-            exit 1
-          fi
+        run: npm run check:openapi-breaking -- --ratchet
+      - name: Typecheck (core)
+        run: npm run typecheck:core
+      # #7033: dashboard-scoped typecheck gate — src/app/(dashboard) TSX is not
+      # covered by typecheck:core's curated allowlist. See check-dashboard-typecheck.mjs.
+      - name: Typecheck (dashboard)
+        run: npm run check:dashboard-typecheck
+      # #8781: open-sse workspace typecheck gate — the workspace imports @/ which
+      # escapes to src/ via undeclared path aliases. See check-open-sse-typecheck.mjs.
+      - name: Typecheck (open-sse)
+        run: npm run check:open-sse-typecheck
      # WS4.2 (v3.8.49 plan): TypeScript 7 native-compiler SHADOW — advisory only.
      # TS7 went GA 2026-07-08 with 8-12x type-check speedups; its Compiler API only
      # arrives in 7.1, so typescript-eslint / type-coverage / Stryker stay on 6.x
--- a/@omniroute/opencode-plugin/src/index.ts
+++ b/@omniroute/opencode-plugin/src/index.ts
@@ -4403,11 +4403,11 @@ export function buildStaticProviderEntry(
      entry.release_date = raw.release_date;
    }

-    // #9175: OC's `getModel` looks the model up by BARE id — the part after
-    // the first `/` in the user's request — so a dict key with an embedded
-    // provider prefix (`<providerId>/<raw-id>`) is unreachable. Keys are the
-    // raw id verbatim; ids that already contain `/` (e.g. `cc/claude-opus-4-7`)
-    // keep it because the slash is part of the upstream model id itself.
+    // OC's static-catalog reader parses each key on `/` and rejects the
+    // entire provider block if ANY key resolves to a parsed providerID that
+    // has no corresponding provider block. So bare keys (no `/`) MUST be
+    // prefixed with the resolved providerId. Already-prefixed keys
+    // (e.g. `cc/claude-opus-4-7`) are left as-is to avoid double-prefixing.
    models[raw.id] = entry;
  }

--- a/@omniroute/opencode-plugin/tests/config-shim.test.ts
+++ b/@omniroute/opencode-plugin/tests/config-shim.test.ts
@@ -227,7 +227,7 @@ test("config: with valid auth.json + apiKey + baseURL → mutates input.provider
  // Stripped per-model shape: name + cap flags + modalities + (optional)
  // cost. OC's SDK static schema accepts only `limit.{context,output}` —
  // `limit.input` is NOT in the SDK shape and gets dropped silently.
-  const claude = entry.models["claude-sonnet-4-6"];
+  const claude = entry.models["opencode-omniroute/claude-sonnet-4-6"];
  assert.ok(claude, "claude model surfaced");
  assert.equal(claude.name, "claude-sonnet-4-6");
  assert.equal(claude.attachment, true);
@@ -248,7 +248,7 @@ test("config: with valid auth.json + apiKey + baseURL → mutates input.provider

  // Combo surfaces under bare key + LCD'd
  // (gemini's reasoning=false → combo reasoning=false).
-  const combo = entry.models["claude-tier"];
+  const combo = entry.models["omniroute/claude-tier"];
  assert.ok(combo, "combo surfaced under bare key");
  assert.equal(combo.name, "Claude Tier");
  assert.equal(combo.reasoning, false, "LCD: any member reasoning=false → combo reasoning=false");
@@ -471,10 +471,10 @@ test("config: combos fetcher throws → emit models-only catalog (no combos in m
  assert.ok(entry);
  const ids = Object.keys(entry.models).sort();
  assert.deepEqual(ids, [
-    "claude-sonnet-4-6",
-    "gemini-3-flash",
+    "opencode-omniroute/claude-sonnet-4-6",
+    "opencode-omniroute/gemini-3-flash",
  ]);
-  assert.equal(entry.models["claude-tier"], undefined, "no combo entry");
+  assert.equal(entry.models["omniroute/claude-tier"], undefined, "no combo entry");
  assert.ok(
    logger.entries.some((e) => String(e[0]).includes("/api/combos fetch failed")),
    "combos-fetch breadcrumb emitted"
@@ -723,7 +723,7 @@ test("buildStaticProviderEntry: stripped per-model shape matches sibling @omniro
  }

  // Sanity: claude entry has all expected stripped fields.
-  const claude = block.models["claude-sonnet-4-6"];
+  const claude = block.models["opencode-omniroute/claude-sonnet-4-6"];
  assert.equal(typeof claude.name, "string");
  assert.equal(typeof claude.attachment, "boolean");
  assert.equal(typeof claude.reasoning, "boolean");
@@ -748,8 +748,8 @@ test("buildStaticProviderEntry: hidden combos are excluded", () => {
    "https://or.example/v1",
    "sk-test"
  );
-  assert.equal(block.models["claude-tier"], undefined);
-  assert.ok(block.models["claude-sonnet-4-6"]);
+  assert.equal(block.models["omniroute/claude-tier"], undefined);
+  assert.ok(block.models["opencode-omniroute/claude-sonnet-4-6"]);
 });

 // ────────────────────────────────────────────────────────────────────────────
@@ -765,7 +765,7 @@ test("buildStaticProviderEntry: emits modalities.input from raw.input_modalities
    "https://or.example/v1",
    "sk-test"
  );
-  const claude = block.models["claude-sonnet-4-6"];
+  const claude = block.models["opencode-omniroute/claude-sonnet-4-6"];
  assert.deepEqual(claude.modalities?.input, ["text", "image"]);
  assert.deepEqual(claude.modalities?.output, ["text"]);
 });
@@ -779,7 +779,7 @@ test("buildStaticProviderEntry: never emits limit.input (OC SDK rejects it)", ()
    "https://or.example/v1",
    "sk-test"
  );
-  const claude = block.models["claude-sonnet-4-6"];
+  const claude = block.models["opencode-omniroute/claude-sonnet-4-6"];
  assert.equal((claude.limit as Record<string, unknown>).input, undefined);
  assert.equal(typeof claude.limit?.context, "number");
  assert.equal(typeof claude.limit?.output, "number");
@@ -807,7 +807,7 @@ test("buildStaticProviderEntry: emits cost when enrichment carries pricing", ()
    "sk-test",
    enrichment
  );
-  const claude = block.models["claude-sonnet-4-6"];
+  const claude = block.models["opencode-omniroute/claude-sonnet-4-6"];
  assert.equal(claude.cost?.input, 3);
  assert.equal(claude.cost?.output, 15);
  assert.equal(claude.cost?.cache_read, 0.3);
@@ -828,8 +828,8 @@ test("buildStaticProviderEntry: emits release_date when raw carries it; omits wh
    "https://or.example/v1",
    "sk-test"
  );
-  assert.equal(block.models["claude-with-date"].release_date, "2026-02-19");
-  assert.equal(block.models["gemini-3-flash"].release_date, undefined);
+  assert.equal(block.models["opencode-omniroute/claude-with-date"].release_date, "2026-02-19");
+  assert.equal(block.models["opencode-omniroute/gemini-3-flash"].release_date, undefined);
 });

 test("buildStaticProviderEntry: combo modalities = intersection of members (LCD)", () => {
@@ -858,7 +858,7 @@ test("buildStaticProviderEntry: combo modalities = intersection of members (LCD)
    "https://or.example/v1",
    "sk-test"
  );
-  const combo = block.models["mixed-tier"];
+  const combo = block.models["omniroute/mixed-tier"];
  assert.ok(combo, "combo emitted under slug key");
  // claude has text+image, text-only has text → intersection drops image.
  assert.deepEqual(combo.modalities?.input, ["text"]);
@@ -967,10 +967,10 @@ test("config: enrichment fetched + name overlaid on raw-model entries", async ()
    "opencode-omniroute"
  ];
  assert.ok(entry);
-  assert.equal(entry.models["claude-sonnet-4-6"].name, "Claude Sonnet 4.6");
-  assert.equal(entry.models["gemini-3-flash"].name, "Gemini 3 Flash");
+  assert.equal(entry.models["opencode-omniroute/claude-sonnet-4-6"].name, "Claude Sonnet 4.6");
+  assert.equal(entry.models["opencode-omniroute/gemini-3-flash"].name, "Gemini 3 Flash");
  // Combo names still come from /api/combos — enrichment overlay does NOT touch combos.
-  assert.equal(entry.models["claude-tier"].name, "Claude Tier");
+  assert.equal(entry.models["omniroute/claude-tier"].name, "Claude Tier");
  assert.equal(enrichmentFetcher.callCount(), 1);
 });

@@ -1000,7 +1000,7 @@ test("config: features.enrichment=false skips enrichment fetch + keeps raw-id na
  assert.ok(entry);
  assert.equal(enrichmentFetcher.callCount(), 0, "enrichment fetch suppressed by feature flag");
  assert.equal(
-    entry.models["claude-sonnet-4-6"].name,
+    entry.models["opencode-omniroute/claude-sonnet-4-6"].name,
    "claude-sonnet-4-6",
    "raw id retained"
  );
@@ -1027,7 +1027,7 @@ test("config: enrichment fetcher throws → soft-fail (warn + raw-id static cata
  ];
  assert.ok(entry, "static block still published on enrichment failure");
  assert.equal(
-    entry.models["claude-sonnet-4-6"].name,
+    entry.models["opencode-omniroute/claude-sonnet-4-6"].name,
    "claude-sonnet-4-6",
    "raw id retained"
  );
@@ -1229,11 +1229,11 @@ test("config: diskCache hydrates stale snapshot when /v1/models throws", async (
    "opencode-omniroute"
  ];
  assert.ok(
-    entry.models["claude-sonnet-4-6"],
+    entry.models["opencode-omniroute/claude-sonnet-4-6"],
    "stale snapshot hydrated into static block"
  );
  assert.equal(
-    entry.models["claude-sonnet-4-6"].name,
+    entry.models["opencode-omniroute/claude-sonnet-4-6"].name,
    "Claude Sonnet 4.6 (cached)",
    "stale enrichment also reused"
  );
@@ -1281,7 +1281,7 @@ test("config: cached rawEnrichment from earlier provider hook is reused (no refe
  const entry = (input as { provider: Record<string, OmniRouteStaticProviderEntry> }).provider[
    "opencode-omniroute"
  ];
-  assert.equal(entry.models["claude-sonnet-4-6"].name, "Claude Sonnet 4.6");
+  assert.equal(entry.models["opencode-omniroute/claude-sonnet-4-6"].name, "Claude Sonnet 4.6");
 });

 // ─────────────────────────────────────────────────────────────────────
@@ -1332,12 +1332,12 @@ test("config: providerTag (default-on) prepends '<provider> - ' to enriched raw-
  ];
  assert.ok(entry);
  assert.equal(
-    entry.models["claude-sonnet-4-6"].name,
+    entry.models["opencode-omniroute/claude-sonnet-4-6"].name,
    "Claude - Claude Sonnet 4.6"
  );
-  assert.equal(entry.models["gemini-3-flash"].name, "Gemini - Gemini 3 Flash");
+  assert.equal(entry.models["opencode-omniroute/gemini-3-flash"].name, "Gemini - Gemini 3 Flash");
  // Combos stay untouched — `Combo: ` prefix already conveys multi-upstream.
-  assert.equal(entry.models["claude-tier"].name, "Claude Tier");
+  assert.equal(entry.models["omniroute/claude-tier"].name, "Claude Tier");
 });

 test("config: providerTag=false suppresses the suffix", async () => {
@@ -1364,7 +1364,7 @@ test("config: providerTag=false suppresses the suffix", async () => {
    "opencode-omniroute"
  ];
  assert.equal(
-    entry.models["claude-sonnet-4-6"].name,
+    entry.models["opencode-omniroute/claude-sonnet-4-6"].name,
    "Claude Sonnet 4.6",
    "enriched name kept, provider tag suppressed"
  );
@@ -1396,7 +1396,7 @@ test("config: providerTag falls back to UPPER(alias) when providerDisplayName mi
  const entry = (input as { provider: Record<string, OmniRouteStaticProviderEntry> }).provider[
    "opencode-omniroute"
  ];
-  assert.equal(entry.models["claude-sonnet-4-6"].name, "CC - Claude Sonnet 4.6");
+  assert.equal(entry.models["opencode-omniroute/claude-sonnet-4-6"].name, "CC - Claude Sonnet 4.6");
 });

 test("config: providerTag skipped entirely when neither providerDisplayName nor providerAlias set", async () => {
@@ -1423,7 +1423,7 @@ test("config: providerTag skipped entirely when neither providerDisplayName nor
  const entry = (input as { provider: Record<string, OmniRouteStaticProviderEntry> }).provider[
    "opencode-omniroute"
  ];
-  assert.equal(entry.models["claude-sonnet-4-6"].name, "Claude Sonnet 4.6");
+  assert.equal(entry.models["opencode-omniroute/claude-sonnet-4-6"].name, "Claude Sonnet 4.6");
 });

 test("config: providerTag is idempotent — second hook call doesn't double-suffix", async () => {
@@ -1451,7 +1451,7 @@ test("config: providerTag is idempotent — second hook call doesn't double-suff
    "opencode-omniroute"
  ];
  assert.equal(
-    entryA.models["claude-sonnet-4-6"].name,
+    entryA.models["opencode-omniroute/claude-sonnet-4-6"].name,
    "Claude - Claude Sonnet 4.6"
  );

@@ -1462,7 +1462,7 @@ test("config: providerTag is idempotent — second hook call doesn't double-suff
    "opencode-omniroute"
  ];
  assert.equal(
-    entryB.models["claude-sonnet-4-6"].name,
+    entryB.models["opencode-omniroute/claude-sonnet-4-6"].name,
    "Claude - Claude Sonnet 4.6"
  );
 });
@@ -1516,7 +1516,7 @@ test("buildStaticProviderEntry: nested combo-ref context is the bottleneck acros
  );
  // Pre-fix: Parent would advertise 200_000 (only raw-big counted).
  // Post-fix: Parent should advertise 8_000 (TinyCombo bottleneck).
-  const parent = block.models["parent"];
+  const parent = block.models["omniroute/parent"];
  assert.ok(parent, "Parent combo must be in the static catalog");
  assert.equal(parent.limit?.context, 8_000);
 });
--- a/@omniroute/opencode-plugin/tests/provider-id-routing.test.ts
+++ b/@omniroute/opencode-plugin/tests/provider-id-routing.test.ts
@@ -111,9 +111,7 @@ test("#6859: createOmniRouteProviderHook end-to-end — catalog keys/providerID
 // `opencode-omniroute`. Confirmed against the issue's own curl repro
 // (`model: "opencode-omniroute/hermes-smart-stack"` → "No active
 // credentials for provider: opencode-omniroute").
-// #9175 tightened this further: OC's `getModel` looks models up by BARE id,
-// so combo dict keys now carry NO prefix at all (not even `omniroute/`).
-test("#7976/#9175: buildStaticProviderEntry keys combos by bare slug (no prefix at all — never the OC-gate providerId)", () => {
+test("#7976: buildStaticProviderEntry keys bare-slug combo ids with the unprefixed omnirouteProviderId (no double OC-gate prefix)", () => {
  const resolved = resolveOmniRoutePluginOptions({ providerId: "omniroute" });
  assert.equal(resolved.providerId, "opencode-omniroute");
  assert.equal(resolved.omnirouteProviderId, "omniroute");
@@ -133,7 +131,7 @@ test("#7976/#9175: buildStaticProviderEntry keys combos by bare slug (no prefix
    "sk-test"
  );

-  assert.deepEqual(Object.keys(block.models), ["hermes-smart-stack"]);
+  assert.deepEqual(Object.keys(block.models), ["omniroute/hermes-smart-stack"]);
  assert.equal(
    block.models["opencode-omniroute/hermes-smart-stack"],
    undefined,
--- a/changelog.d/features/9544-muse-code-cli-provider.md
+++ b/changelog.d/features/9544-muse-code-cli-provider.md
@@ -0,0 +1 @@
+- feat(providers): add Muse Code CLI provider preset (#9544)
--- a/changelog.d/fixes/8542-fix.plan.md
+++ b/changelog.d/fixes/8542-fix.plan.md
@@ -1 +0,0 @@
- fix(ci): aggregate all fast-gates into non-fail-fast loop so one red gate no longer masks later gates (#8542)
--- a/changelog.d/fixes/8847-bun-prebuilds.md
+++ b/changelog.d/fixes/8847-bun-prebuilds.md
@@ -1 +0,0 @@
- fix(build): include better-sqlite3 prebuilds in standalone bun bundle
--- a/changelog.d/fixes/8906-quota-pool-combo-cleanup.md
+++ b/changelog.d/fixes/8906-quota-pool-combo-cleanup.md
@@ -1 +0,0 @@
- **fix(quota):** Deleting a quota pool now removes its scoped managed combos without racing in-flight pool mutations ([#8906](https://github.com/diegosouzapw/OmniRoute/pull/8906)) — thanks @xiaoyaner0201
--- a/changelog.d/fixes/8951-fix.plan.md
+++ b/changelog.d/fixes/8951-fix.plan.md
@@ -1 +0,0 @@
- fix(github): add targetFormat to GPT-5.6 Sol/Terra/Luna models (#8951)
--- a/changelog.d/fixes/8997-gpt56-max-reasoning.plan.md
+++ b/changelog.d/fixes/8997-gpt56-max-reasoning.plan.md
@@ -1 +0,0 @@
- **fix(translator):** the Responses-to-Chat promotion path called `normalizeResponsesReasoningEffort` without the model argument, so GPT-5.6 Sol/Terra/Luna requests with `reasoning.effort: "max""` were downgraded to `"xhigh"`. The model is now threaded through, preserving `max` for GPT-5.6 while keeping the legacy downgrade for older models ([#8997](https://github.com/diegosouzapw/OmniRoute/pull/8997))
--- a/changelog.d/fixes/9034-fix.plan.md
+++ b/changelog.d/fixes/9034-fix.plan.md
@@ -1 +0,0 @@
- fix(api): use configured prefix instead of raw node UUID for alias-backed model id in /v1/models (#9034)
--- a/changelog.d/fixes/9057-fix.plan.md
+++ b/changelog.d/fixes/9057-fix.plan.md
@@ -1 +0,0 @@
- fix(api): auto/* routing aliases bypass API-key allowedConnections/disableNonPublicModels (#9057)
--- a/changelog.d/fixes/9096-fix-audio-speech-transcriptions-translations-provider-nodes.plan.md
+++ b/changelog.d/fixes/9096-fix-audio-speech-transcriptions-translations-provider-nodes.plan.md
@@ -1 +0,0 @@
- fix(providers): admit audio-speech/audio-transcriptions apiType in audio route provider-node filters (#9096)
--- a/changelog.d/fixes/9134-fix.plan.md
+++ b/changelog.d/fixes/9134-fix.plan.md
@@ -1 +0,0 @@
- fix(providers): resolve combo names in audio transcriptions route so /v1/models stays honest (#9134)
--- a/changelog.d/fixes/9140-fix.plan.md
+++ b/changelog.d/fixes/9140-fix.plan.md
@@ -1 +0,0 @@
- fix(vscode): allow built-in auto-routing models in VS Code model filter (#9140)
--- a/changelog.d/fixes/9142-fix.plan.md
+++ b/changelog.d/fixes/9142-fix.plan.md
@@ -1 +0,0 @@
- fix(background): detect Anthropic top-level system prompts for background task detection (#9142)
--- a/changelog.d/fixes/9160-fix.plan.md
+++ b/changelog.d/fixes/9160-fix.plan.md
@@ -1 +0,0 @@
- fix(model-discovery): ingest capabilities.effort_tiers for synced models (#9160)
--- a/changelog.d/fixes/9168-streamed-responses-tool-null.plan.md
+++ b/changelog.d/fixes/9168-streamed-responses-tool-null.plan.md
@@ -1 +0,0 @@
- fix(translator): buffer and normalize upstream tool-call argument deltas so optional null values are stripped before reaching the client (#9168)
--- a/changelog.d/fixes/9177-fix.plan.md
+++ b/changelog.d/fixes/9177-fix.plan.md
@@ -1 +0,0 @@
- fix(translator): avoid double-normalizing tool names in Gemini-to-Claude response path (#9177)
--- a/changelog.d/fixes/9269-fix.plan.md
+++ b/changelog.d/fixes/9269-fix.plan.md
@@ -1 +0,0 @@
- **fix(classify429):** add missing `have exhausted their quota` pattern so the synthetic 429 from auth.ts is recognized as quota exhaustion, preventing the combo loop from burning retries against the same provider instead of falling back to a healthy one ([#9269](https://github.com/diegosouzapw/OmniRoute/issues/9269))
--- a/changelog.d/fixes/9305-fix.plan.md
+++ b/changelog.d/fixes/9305-fix.plan.md
@@ -1 +0,0 @@
- fix(sse): broaden OMNIROUTE_SSE_COMMENTS to accept 'false','0','no' and gate metadata comment emission (#9305)
--- a/changelog.d/fixes/9306-fix.plan.md
+++ b/changelog.d/fixes/9306-fix.plan.md
@@ -1 +0,0 @@
- fix(lmarena): encode SSE stream chunks as Uint8Array to prevent TextDecoder TypeError (#9306)
--- a/changelog.d/fixes/9615-docker-colocate-partial-trace.md
+++ b/changelog.d/fixes/9615-docker-colocate-partial-trace.md
@@ -1 +0,0 @@
- **fix(docker):** standalone co-location now completes packages Next's file tracing materialized partially (package.json without its `main` payload) — unblocks the Docker Hub publish that failed on every v3.8.50 push with `Cannot find module '@atjsh/llmlingua-2/dist/index.js'` ([#9615](https://github.com/diegosouzapw/OmniRoute/pull/9615))
--- a/changelog.d/fixes/9737-memory-id-route-backend.md
+++ b/changelog.d/fixes/9737-memory-id-route-backend.md
@@ -1 +0,0 @@
- Fixed `GET`/`PUT`/`DELETE /api/memory/[id]` always failing with a 500 (`Primary backend "sqlite" not registered`) when the route was reached before any other memory endpoint in the same process.
--- a/changelog.d/fixes/9737-route-body-validation.md
+++ b/changelog.d/fixes/9737-route-body-validation.md
@@ -1 +0,0 @@
- Replaced hand-rolled body type checks with Zod validation in the plugins marketplace install route and the three Dario admin routes, restoring the `t06:route-validation` gate (Hard Rule #7).
--- a/changelog.d/maintenance/9614-opencode-plugin-bare-key-suite.md
+++ b/changelog.d/maintenance/9614-opencode-plugin-bare-key-suite.md
@@ -1 +0,0 @@
- **test(cli):** OpenCode plugin suite realigned to the bare-key static-catalog contract from #9178/#9175 (21 tests were red on every opencode-plugin CI run; 287/287 after) ([#9614](https://github.com/diegosouzapw/OmniRoute/pull/9614))
--- a/changelog.d/maintenance/9738-deadcode-radar-referrals.md
+++ b/changelog.d/maintenance/9738-deadcode-radar-referrals.md
@@ -1 +0,0 @@
- Removed the unused `RadarReferrals` type export left by the radar referral-links feature (#9697), returning the dead-code ratchet to its 227 baseline.
--- a/config/quality/dependency-allowlist.json
+++ b/config/quality/dependency-allowlist.json
@@ -96,7 +96,6 @@
    "node-machine-id",
    "omniglyph",
    "open",
-    "opencode-ai",
    "ora",
    "parse5",
    "pino",
--- a/config/quality/file-size-baseline.json
+++ b/config/quality/file-size-baseline.json
@@ -1,4 +1,6 @@
 {
+  "_rebaseline_2026_08_08_migration_135_collision": "fix(db): resolve migration version 135 numbering collision — #9449's 135_connection_runtime_state.sql and #8908's 135_migrate_model_capability_max_token.sql both claimed version 135 (#9449 branched before #8908 merged and never got renumbered before landing on release/v3.8.50), which threw 'Migration version collision detected' the moment ANY code touched the database — a fresh install/deploy from this tip cannot even boot. Renumbered the later-landing file to 140 (next free slot) and added the matching isSchemaAlreadyApplied('140') retroactive guard, matching the established pattern already used for the prior 135/136 -> 137/138 renumber in the same file. Own growth: src/lib/db/migrationRunner.ts 1084->1094 (+10, the new case block) — irreducible, matches the existing per-case guard pattern exactly. Covered by tests/unit/migration-135-numbering-collision.test.ts (2/2), confirmed failing (reproducing the exact live crash) against the pre-fix colliding filenames, passing after.",
+  "_rebaseline_2026_08_02_9259_rolling_rpm": "PR #9259 (issue #8733) own growth: open-sse/services/rateLimitManager.ts baseline 1060->1167 (+107; final source 1153). The existing withRateLimit chokepoint now composes process-local rolling RPM leases with Bottleneck admission, releases pre-dispatch leases on queue timeout/abort/connection disable, preserves caller abort reasons, and wires 429/header state into the extracted rollingRpmGate.ts. The remaining growth is irreducible lifecycle wiring at the dispatch boundary plus the real watchdog test hooks needed to verify queued-wedge recovery; moving it further would obscure lease ownership and Bottleneck cleanup. Covered by the focused rate-limit manager/sliding-window suite (33/33); distributed multi-instance coordination remains explicitly out of scope.",
  "_rebaseline_2026_07_24_8470_hyperagent_sticky_thread": "PR #8470 (artickc, fix/hyperagent-tool-loop-thread-sticky) own growth: open-sse/executors/hyperagent.ts 936->1025 (wc -l; check-file-size.mjs counts via split(\"\\n\").length so the gate sees 937->1026, +89, crosses the 1000 cap). Fixes a real bug where a reverse-conversion proxy (text-Intent/JSON to Claude Code native tool_calls) rewrites assistant messages between agentic tool-loop turns, breaking HyperAgent’s conversation-prefix fingerprint and cold-starting the thread mid tool-loop. Adds Anthropic tool_use/tool_result flattening to extractMessageText() plus a new rootUserFingerprint()/root-key lookup tier in resolveHyperAgentThreadBinding()/storeHyperAgentThreadAfterTurn() so the thread stays sticky across the tool loop. Cohesive additions inside the existing single-file executor; not extractable without splitting the executor mid-request-flow. Covered by tests/unit/executor-hyperagent.test.ts (19/19, +5 new cases for tool_result/tool_use flattening + root-key stickiness). Pre-merge review flagged a cross-conversation root-key collision risk (tracked in the PR’s own mandatory pre-merge checklist, not yet addressed) — unrelated to this file-size ratchet, tracked separately by /fix-prs.",
  "_rebaseline_2026_07_25_8494_capability_filter_fail_closed": "PR #8494 (fix/capability-filters-fail-closed, #8488) own growth: open-sse/services/combo.ts 3640->3693 (+53) adds a fail-closed guard after filterTargetsByRequestCompatibility() — when every eligible target is excluded by request-capability filtering (vision/tools/etc) instead of quota/health, the combo now returns an explicit `capability_mismatch` 400 (describeCapabilityFilterExhaustion, imported from combo/comboStructure.ts) rather than silently falling through to a generic no-targets error, plus a `compatFilterFailOpen` escape hatch (combo config OR settings) mirrored at both the main/auto and round-robin call sites for symmetry. combo/comboStructure.ts (previously under cap, un-frozen) grows 794->918 (+124) — new home for describeCapabilityFilterExhaustion + providerSupportsEmulatedToolCalling (#5240 emulated tool-calling exemption so fail-closed does not regress prompt-emulation-only combos like all-chatgpt-web). Irreducible orchestration wiring at the existing filter chokepoint (same precedent as #7301's universal-cooldown-retry generalization). Companion test tests/unit/combo-routing-engine.test.ts 3409->3449 (+40, fail-closed/fail-open coverage across both call sites) also rebaselined. Covered by tests/unit/8488-capability-filter-fail-closed.test.ts (new) + 95/95 passing across both files. Structural shrink of combo.ts tracked in #3501.",
  "_rebaseline_2026_07_25_8499_ts7_result_union_predicates": "PR #8499 (backryun, chore/ts7-types-executor-scattered) own growth: muse-spark-web.ts 1396->1405 (+9, irreducible). Under this workspace's `strictNullChecks: false`, the boolean-literal discriminant on `GraphqlResult` (`{ ok: true } | { ok: false; error: string }`) narrows the positive `.ok===true` branch but leaves `!result.ok` at the full union under TS7, making `.error` unreachable to the checker at the two call sites (warmup, mode-switch). Fixed by adding a single `isGraphqlFailure()` type-predicate helper (doc comment + 3-line body) reused at both call sites instead of duplicating the predicate inline — not extractable to a shared module without splitting a single-file executor's local narrowing helper out of its own file. Covered by the existing muse-spark-web executor test suite (no behavior change, pure narrowing fix).",
@@ -13,6 +15,7 @@
  "_rebaseline_2026_07_19_7546_ghe_copilot_route": "PR #7546 (GHE Copilot OAuth provider) own growth: oauth/[provider]/[action]/route.ts 960->963 (gate units, +3 = ghe-copilot device-code wiring at the existing multi-provider device-code branch — reading + HTTPS-validating the gheUrl search param (isValidGheUrl guards at both raw entry points, security-review hardening, 963->970), adding ghe-copilot to the no-PKCE provider set, and building the provider config override / threading gheUrl through poll->postExchange extraData). Mirrors the existing kiro/amazon-q startUrl override pattern right above it in the same branch; cohesive with the existing device-code dispatch chokepoint, not separately extractable without splitting a single provider-switch mid-branch. Frozen so can only shrink; structural shrink tracked in #3501.",
  "_rebaseline_2026_07_19_6846_nvidia_concurrency_gate": "Issue #6846 Phase 1 (nvidia NIM local RPM budget + per-model lockout + per-connection concurrency cap) own growth: open-sse/executors/default.ts 877->890 (+13 = the irreducible call-site wiring at DefaultExecutor.execute(), the only place nvidia requests dispatch through — the existing session-pool body was extracted verbatim into a new private executeWithSessionPool() so the outer execute() can wrap it in the nvidia concurrency-gate acquire/finally-release). All actual gating logic (semaphore key + cap resolution) lives in the new leaf open-sse/executors/default/nvidiaConcurrencyGate.ts (not frozen, well under cap). Covered by tests/unit/nvidia-quota-phase1.test.ts.",
  "_rebaseline_2026_07_18_v3849_provider_detail_wiring": "Merge campaign R2/R3 (2026-07-18): three authorized PRs each add irreducible call-site wiring to ProviderDetailPageClient.tsx — #7360 +5 (ProviderQuotaVisibilityToggle render, component extracted), #7419 +4 (NoAuthProviderControls wiring), #7062 +3 (Dahl provider hook) = 786->798. All three follow the extracted-component pattern (AgentrouterConsoleFields precedent); the frozen file only takes the wiring. Structural shrink tracked in #3501.",
+  "_rebaseline_2026_07_25_dario_upstream_proxy_selector": "PR #8523 (Dario embedded service): upstream-proxy mode selector replaces the binary CLIProxyAPI toggle with Native/CLIProxyAPI/Dario/Fallback + a fallback-backend picker. ProviderDetailPageClient.tsx 798->804 (+6, new hook fields threaded through to ConnectionsListPanel), ConnectionRow.tsx 942->958 (+16, the mode <select> + conditional fallback-backend <select> replacing a single pill button), useProviderConnections.ts 954->986 (+32, upstreamProxyMode/upstreamProxyFallbackBackend state + handleSetUpstreamProxyMode, handleToggleCliproxyapiMode kept as a thin backward-compat wrapper for the existing hook-shape test). All additive UI/state for the new modes — no unrelated refactor.",
  "_rebaseline_2026_07_18_pr7653_chat_tracker_import": "PR #7653 merge-interaction growth: release moved chat.ts to its 1796 cap while this PR adds the single side-effect import 'quotaTrackersBatch.ts' (line 130) — chat.ts IS the canonical quota-fetcher registration point (codex/bailian/deepseek/openrouter/opencode/generic all import+register there), so the +1 is irreducible call-site wiring. 1796->1797. Covered by tests/unit/{agentrouter,v0,freemodel}-quota-fetcher.test.ts.",
  "_rebaseline_2026_07_17_pr7653_agentrouter_console_fields": "PR #7653 own growth (missing acceptance criterion: the AgentRouter quota tracker (#6850) read providerSpecificData.consoleApiKey/newApiUserId but neither field had dashboard UI for provider agentrouter — consoleApiKey was gated to bailian-coding-plan only and newApiUserId had zero UI). AddApiKeyModal.tsx 961->967 (+6) and EditConnectionModal.tsx 1278->1286 (+8) = import + a single <AgentrouterConsoleFields .../> render call plus the newApiUserId formData init field. The actual Input rendering (both consoleApiKey reuse + the new newApiUserId field) was EXTRACTED into a new leaf src/app/(dashboard)/dashboard/providers/[id]/components/modals/AgentrouterConsoleFields.tsx (48 LOC, <cap), mirroring the QuotaScrapingFields.tsx / GlmTeamQuotaFields.tsx precedent (#6351) so the frozen modals only carry the irreducible call-site wiring. Persist logic lives in connectionProviderSpecificData.ts (not frozen). Covered by tests/unit/agentrouter-connection-modal-fields.test.ts.",
  "_rebaseline_2026_07_17_v3849_6842_free_window_wiring": "PR #7651 (openrouter :free-window quota tracking) follow-up: the counter shipped built but never wired into the request pipeline, so combos kept spending guaranteed-429 requests on exhausted free-tier targets. Own growth: src/sse/services/auth.ts 2461->2462 (+1, irreducible at the existing model-aware preflight chokepoint — the `provider === \"codex\"` check that forwards requestedModel into the connection arg is extended to also cover `openrouter`, one added boolean + a doc comment, offset to a single net line by dropping the now-redundant inline condition). Enforcement itself lives in open-sse/services/openrouterQuotaFetcher.ts (not frozen) and the dispatch-time record/correct hooks live in open-sse/executors/base.ts (not frozen). Covered by tests/unit/openrouter-free-window-wiring-6842.test.ts.",
@@ -157,8 +160,133 @@
  "_rebaseline_2026_06_20_1409_1294_models": "Re-baseline src/lib/db/models.ts 1184->1221: combined growth of sibling fixes #1409 (cascade-delete orphaned model aliases when a provider is removed) + #1294 (persist max_input_tokens/max_output_tokens on custom models), both adding CRUD at the existing models domain module. Cohesive db module; not extractable.",
  "_rebaseline_2026_06_20_4389_thinking_toolchoice": "Re-baseline base.ts 1387->1399 (#4389): tool_choice-forced thinking guard at the existing Claude wire-image injection chokepoint (effThinking gate avoids the Anthropic 400 when tool_choice forces a tool). Cohesive guard; structural shrink tracked in #3501.",
  "_rebaseline_2026_07_18_6979_codex_test": "PR #6979 own growth: executor-codex.test.ts 1340->1347 (+7 = generalized ensureThinkingBudget assertion added to the existing codex thinking-budget cases). antigravity-test bump 942->977 REVERTED here: #7408's test split dropped that file to 888, so this PR's +35 fits under the original 942 frozen cap.",
-  "_rebaseline_2026_07_24_8354_logs_timeline_sidebar": "PR #8354 (hartmark, feature/scrolling-log) own growth: src/shared/constants/sidebarVisibility/sections.ts 812->820 (+8, the single new logs-timeline SidebarItemDefinition entry added to LOGS_GROUP.items for the new /dashboard/logs/timeline scrolling request-timeline page). Irreducible data-literal wiring at the existing sidebar-sections chokepoint, same shape as every other item in the file; not extractable without an ad-hoc single-item exception to the file's otherwise-uniform multi-line item style.",
  "cap": 1000,
+  "frozen": {
+    "_rebaseline_2026_06_22_4644_deepseek_web_tools": "PR #4644 (BugsBag/robust deepseek-web tool-call parsing): open-sse/executors/deepseek-web.ts 1117->1125 (+8). The new agentic tool-call path emits surrounding text + reasoning before tool_calls and swaps to the dedicated deepseekWebTools.ts parser; the +8 lines are cohesive wiring at the existing transformSSE chokepoint (the parser itself lives in the new deepseekWebTools.ts file, already under cap). The PR's own fast-gate (PR->release) does not run check:file-size, so this surfaced only at release reconcile. Covered by tests/unit/deepseek-web-tools-variants.test.ts + deepseek-web-tools-execute.test.ts.",
+    "_rebaseline_2026_06_23_4712_deepseek_web_tool_results": "PR for #4712 (deepseek-web drops role:tool): open-sse/executors/deepseek-web.ts 1125->1148 (+23). messagesToPrompt() now folds role:\"tool\" results into the single-prompt transcript (recovering the tool name from the preceding assistant tool_calls by tool_call_id) instead of silently dropping them; the lines are cohesive wiring inside the existing function. Covered by tests/unit/deepseek-web-tool-result-prompt-4712.test.ts.",
+    "_rebaseline_2026_06_24_headroom_strategy": "Headroom-aware connection selection (dario technique): combo.ts 3168->3180 (+12 = a new `else if (strategy === \"headroom\")` dispatch branch in handleComboChat that delegates to orderTargetsByHeadroom + its log line, plus the import). The actual logic lives OUT of the god-file: the pure ranker rankByHeadroom/computeHeadroom is the new leaf open-sse/services/combo/headroomRanking.ts (91 LOC, <cap) and the async orderer orderTargetsByHeadroom is appended to the existing open-sse/services/combo/quotaStrategies.ts (<cap) next to its sibling reset-aware/reset-window orderers (reuses their connection-expansion machinery). headroom = 1 - max(util_5h, util_7d) from getSaturation (src/lib/quota/saturationSignals.ts), prefers the connection with the most free capacity. Only the dispatch wiring is irreducible at the existing combo strategy chokepoint (mirrors the reset-aware/reset-window/context-optimized branches); not extractable without hiding the call site. fill-first stays default; all existing strategies untouched. Covered by tests/unit/combo-headroom-ranking.test.ts (pure helper) + tests/unit/combo-headroom-strategy.test.ts (orderer, saturation injected). Structural shrink of combo.ts tracked in #3501.",
+    "_rebaseline_2026_06_24_quota_share_strategy": "Dedicated quota-share strategy (Phase 3 #9): combo.ts 3180->3190 (+10 = one new `else if (strategy === \"quota-share\")` dispatch branch in handleComboChat that delegates 100% to selectQuotaShareTarget + its log line, plus the import). All the new logic lives OUT of the god-file in two new leaves under open-sse/services/combo/: quotaShareInflight.ts (in-flight counter with TTL/lease, ~150 LOC <cap) and quotaShareStrategy.ts (per-model bucket gating via isBucketSaturated + DRR proportional to weight + P2C over in-flight, ~240 LOC <cap). Only the dispatch wiring is irreducible at the existing combo strategy chokepoint (mirrors the headroom/reset-aware/reset-window/context-optimized branches); not extractable without hiding the call site. ZERO existing strategy cases were modified — only this branch was added, and the qtSd/ combos switched from fill-first to quota-share in src/lib/quota/quotaCombos.ts. Covered by tests/unit/quota-share-strategy.test.ts (gating, DRR fairness, P2C in-flight, fail-open, activation). Structural shrink of combo.ts tracked in #3501.",
+    "_rebaseline_2026_06_24_task_aware_routing": "Task-aware routing strategy (port PR #2045, OmniRoute #4945): combo.ts 3190->3225 (+35) = one new `else if (strategy === \"task-aware\")` dispatch branch delegating 100% to selectTaskAwareTarget + its imports/log lines. All scoring/classification logic lives OUT of the god-file in the new leaf open-sse/services/taskAwareRouting.ts (553 LOC <cap). Only the dispatch wiring is irreducible at the existing combo strategy chokepoint (mirrors quota-share/headroom/reset-aware branches). ZERO existing strategy cases modified. Covered by tests/unit/combo-task-aware.test.ts (35 tests). Structural shrink of combo.ts tracked in #3501.",
+    "_rebaseline_2026_06_26_fidelity_gate_extraction": "Milestone-B fidelity-gate wiring residual: bodyToText+gateAdvance extracted to fidelityGateStep.ts (889->854, -35), but the StackOptions.fidelityGate field, the `const fidelityGate` reads at the two stacked-loop dispatch chokepoints, and the import of FidelityGateConfig are irreducible wiring that cannot leave strategySelector without an architectural refactor of the pre-existing stacked pipeline. Net: 889->854 (+6 vs the pre-Milestone-B frozen 848). Covered by tests/unit/compression/*.test.ts (940 pass).",
+    "_rebaseline_2026_06_27_5193_5203_antigravity_oauthmodal": "Antigravity remote-login own growth: OAuthModal.tsx 960->969 (gate units). #5193 (+~4: remote paste instruction shown for all remote incl. Google + its rationale comment) and #5203 (+~5: handleManualSubmit credential-blob branch + button guard; submit logic extracted to oauthBlobSubmit.ts to minimize). Frozen set to the SUM so either merge order passes. Cohesive at the existing manual-submit chokepoint.",
+    "_rebaseline_2026_06_27_5193_antigravity_basered": "Base-red (pre-existing release drift, fast-gate PR->release skips check:file-size): accountFallback.ts 1773->1777 and src/app/api/providers/[id]/test/route.ts 924->940 were already over their frozen caps on release/v3.8.39 independent of any antigravity change. Owner chose to rebaseline (keep the documented issue-reference comments #1846/#1449/#347 etc.) rather than accept the contributor comment-stripping in #5200/#5198. Reverted #5200 to restore the comments; bumped these two frozen caps to the actual base sizes. No logic change.",
+    "_rebaseline_2026_06_28_5237_impersonation_ua_refresh": "PR #5237 (refresh impersonation UAs): grok-web.ts 1871->1873 (+2), muse-spark-web.ts 1284->1302 (+18), perplexity-web.ts 1013->1032 (+19). Net semantic change in each file is a single User-Agent constant (Chrome 147->149 for grok/muse; perplexity kept at Firefox 148 to stay matched with the firefox_148 TLS profile — the contributor's 152 bump was reverted to avoid a UA-vs-JA3 mismatch, #2459). The growth is Prettier reflow that lint-staged unavoidably applies to these grandfathered long-line files the moment they are touched; not extractable. src/sse/services/auth.ts 2336->2401 in the same reconcile is #5222's antigravity-LRU-retry growth that merged via --admin without a baseline bump.",
+    "_rebaseline_2026_06_28_5243_risk_gate_prepass": "PR #5243 (compression risk-gate pre-pass) own growth: open-sse/services/compression/strategySelector.ts 854->899 (+45). The three exported entry points (applyCompression/applyStackedCompression/applyStackedCompressionAsync) become thin wrappers over pure-extracted private bodies (runCompression/runStackedCompression/runStackedCompressionAsync) so the risk-gate mask->run->restore wrapper sits strictly OUTSIDE the per-step loop — a single universal integration point. The wrapper logic itself (resolveRiskGate/withRiskGate) lives in the new riskGate/strategyWrap.ts (<cap); the residual growth is the duplicated thin-wrapper signatures + the extracted bodies' dispatch boundary, guarded by a byte-identical parity test (riskGateIntegration). Default off (DEFAULT_COMPRESSION_CONFIG unchanged). Not extractable without hiding the dispatch boundary, mirroring prior compression rebaselines. Structural shrink tracked in #3501.",
+    "_rebaseline_2026_06_28_5275_correlation_id_extract": "Extraction of the safe CorrelationId subset of #5275 (hartmark) — request correlation id stored in call_logs (migration 109) and returned via the X-Correlation-Id response header, WITHOUT the combo/resilience or build/lazy-loading changes (those stay in #5275). Own growth: callLogs.ts 975->985 (correlation_id column on CallLogSummaryRow + read/map), usageHistory.ts 983->988 (correlationId metadata normalize), chat.ts 1575->1632 (withCorrelationId response wiring + combo-failure log carrying correlationId), chatHelpers.ts new 811 (withCorrelationId helper + reqId threading; was 791<cap pre-feature). Cohesive request/logging chokepoint wiring; structural shrink of chat.ts tracked in #3501.",
+    "_rebaseline_2026_06_29_4038_cas_guard": "PR (#4038) own growth: tokenRefresh.ts 2103->2181 (+78 = the compare-and-swap guard on the refresh persist — runWithCasGuard/getActiveCasGuard AsyncLocalStorage pair mirroring runWithOnPersist, casGuardShouldSkipPersist that rereads the row right before persisting and skips the write when a concurrent writer already rotated the refresh_token past the one presented, plus getCasGuardStats counters). Fixes the sibling-rotation-revert → token-family-revocation storm. Gated behind an active guard (opt-in; no guard => byte-identical). Wiring lives at the two persist chokepoints inside getAccessToken; the comparison reuses wasRefreshTokenRotated from refreshSerializer. Not extractable without splitting the refresh hot path.",
+    "_rebaseline_2026_06_29_5286_memoization": "PR #5286 own growth: strategySelector.ts 899->960 (+61 = the opt-in result-memoization branches in applyCompression/applyCompressionAsync — principal+determinism gate, makeMemoKey lookup/store with model+supportsVision folded into the key, recompute-with-memo-off). Default off (memoizeCompressionResults), so zero behavior change. The memo helpers live in the leaf resultMemo.ts (<cap); the chokepoint wiring here is not extractable. Structural shrink of this hot-path file tracked in #3501.",
+    "_rebaseline_2026_07_01_v3843_release_5609": "Rebaseline v3.8.43 (PR #5609 release reconciliation). DRIFT dos 109 commits do ciclo: 8 god-files existentes cresceram (ApiManagerPageClient 2983->3017, combos/page 4594->4608, AddApiKeyModal 868->869, providerPageHelpers 974->996, chat.ts 1635->1647, auth.ts 2401->2403, batchProcessor 828->915, combo.ts 3368->3387) + 2 novos acima do cap (huggingchat.ts 813, tests web-cookie-providers-new 827) + 4 test files cresceram. Modularizacao deferida (blast-radius mid-release); congelado no estado atual p/ o proximo ciclo ratchetar daqui.",
+    "_rebaseline_2026_07_02_5816_qoder": "PR #5816 (@AgentKiller45, qoder PAT via qodercli): qoderCli.ts 666->989, new-above-cap frozen (owner-approved baseline freeze). The growth is the legitimate PAT job-token exchange + quota parsing CLI transport (the pure-JS Cosy path 500'd on every PAT request); extracting the spawn/parse helpers now would just add indirection to a contributor PR mid-merge. Test frozen also raised for this PR's coverage growth: providers-page-utils.test.ts 1052->1092. Additionally clears an inherited base-red from the already-merged #5933 (codex json_schema->text.format): translator-openai-responses-req.test.ts 1097->1172 (+75 regression tests, no offending branch left). All remain frozen (cannot grow further); release captain's rebaseline-at-release supersedes.",
+    "_rebaseline_2026_07_09_6126_clinepass_dual_auth": "PR #6126 (@hajilok, dual-auth ClinePass) own growth: tokenRefresh.ts 2181->2182 (+1 = a single `case \"clinepass\":` fallthrough label added to the existing `case \"cline\":` in _getAccessTokenInternal's provider switch, so clinepass token refresh dispatches to the already-shared refreshClineToken() instead of silently falling through to the generic OAuth refresh). Irreducible 1-line switch-case wiring at the existing chokepoint; the header-building logic for the same feature was extracted to a new leaf src/shared/utils/clineAuth.ts::buildClinepassHeaders() (well under cap) to avoid growing open-sse/executors/default.ts. Covered by tests/unit/clinepass-provider.test.ts.",
+    "_rebaseline_2026_07_09_6363_kiro_external_idp": "PR #6363 (@artickc, Kiro external IdP) own growth: tokenRefresh.ts 2182->2249 (+67 = the external_idp refresh branch inside refreshKiroToken — standard public-client OAuth2 refresh_token grant against the org IdP tokenEndpoint via buildExternalIdpRefreshParams/isExternalIdpAuthMethod from the new leaf open-sse/services/kiroExternalIdp.ts, with invalid_grant/invalid_client -> unrecoverable_refresh_error mapping). Cohesive addition at the existing refreshKiroToken chokepoint. Covered by tests/unit/kiro-external-idp.test.ts.",
+    "_rebaseline_2026_07_09_6587_kiro_api_key_auth": "PR #6587 (@strangersp) own growth for Kiro long-lived API-key auth, merged onto v3.8.47 tip: openai-to-kiro.ts 890->912 (+22, auth-header selection for API-key-vs-OAuth-token connections), providerLimits.ts 998->1000 (+2, API-key auth-type branch), translator-openai-to-kiro.test.ts 1234->1257 (+23), providers-page-utils.test.ts 1109->1107 (net -2 after merging with parallel release drift; connectionMatchesProviderCard api_key coverage added), provider-validation-specialty.test.ts 2856->2980 (+124 net after merge with parallel release drift; this PR also removed the file's `@typescript-eslint/no-explicit-any` eslint-suppression entry by fixing all `any` usages, adding typed replacements). Cohesive additive feature growth, well tested; not extractable without splitting the existing chokepoints mid-merge.",
+    "_rebaseline_2026_07_09_6678_routing_strategy_9router": "#6678 (SeaXen) — 9router-parity Routing Strategy settings card + per-provider/combo sticky-round-robin override. Own growth: ProviderDetailPageClient.tsx 784->786 (single ProviderAccountRoutingCard mount + import), auth.ts 2448->2458 (providerStrategies override resolution: fallbackStrategy/stickyRoundRobinLimit per-provider cascade in getProviderCredentials). Both additive, zero unrelated refactor; new UI/logic lives in new files (ProviderAccountRoutingCard.tsx, RoutingStrategyCard.tsx, rrState.ts::resolveComboStickyRoundRobinLimit). chat.ts value below reflects the current release tip (grown by other concurrent PRs, e.g. #6640), not this PR own change.",
+    "_rebaseline_2026_07_10_6318_omp_letta": "PR #6318 (@hamsa0x7, omp+letta CLI integrations) own growth: cliTools.ts (+53 = 2 registry entries incl. omp docsUrl) and cliRuntime.ts (+18 = runtime-detection wiring for the 2 new tools). Cohesive registry/wiring growth at the existing chokepoints; scope reduced from the original 5 tools (pi/codewhale/jcode shipped separately).",
+    "_rebaseline_2026_07_10_gcf_v3_2_decode": "PR #6838 own growth: new vendored file open-sse/services/compression/engines/headroom/gcf/decode_generic.ts frozen at 880 (> 800 cap). It is the vendored GCF generic-profile decoder (spec v3.2 nested flattening plus the prototype-pollution / hasOwnProperty hardening added in this PR's Gemini review). Kept as one file faithful to upstream gcf-typescript so re-vendoring stays a clean copy rather than a re-split each cycle (sibling generic.ts/scalar.ts stay < cap; extraction would also fragment the file's frozen eslint no-explicit-any suppressions). Round-trip + prototype-pollution regression coverage in tests/unit/compression/headroom-smartcrusher.test.ts. Frozen: only shrinks from here.",
+    "_rebaseline_2026_07_12_v3847_mergeprs_tail": "v3.8.47 /merge-prs tail (owner-approved): src/lib/localDb.ts NEW>800 (799->805, +6 re-exports countFreeProxies + recordFreeProxySyncErrors/clearFreeProxySyncErrors/getFreeProxySyncErrors + FreeProxySyncErrors type for #6909 free-pool relay-repair; re-export-only per Hard Rule #2, not extractable).",
+    "_rebaseline_2026_07_15_7070_combos_memo": "PR #7070 (perf/p1-memo) own growth: src/app/(dashboard)/dashboard/combos/page.tsx 4655->4656 (+1 = React.memo wrapping of ComboCard). Covered by tests/unit/ui/combos-page-smoke.test.tsx.",
+    "_rebaseline_2026_07_18_7399_xai_oauth_modal": "PR #7399 (xAI OAuth PKCE) own growth: OAuthModal.tsx 993->998 (+5 = provider entry + PKCE flow branch wiring at the existing provider-switch chokepoint; the provider logic itself lives in src/lib/oauth/providers/xai-oauth.ts, new leaf). Third irreducible wiring bump on this modal (969->989->993->998); structural shrink tracked in #3501.",
+    "_rebaseline_2026_07_19_6636_codex_session_json": "#6636 own growth: OAuthModal.tsx 998->1030 (gate units, split(\"\\n\").length incl. trailing newline; +32 = session-JSON paste branch for handleManualSubmit plus a shared submitCodexAccessToken() helper extracted from the pre-existing bare-JWT branch, mirroring the #5203 oauthBlobSubmit.ts extraction precedent; the normalizer logic itself lives in the new src/lib/oauth/utils/codexSessionImport.ts leaf module, not here). Fourth irreducible wiring bump on this modal (969->989->993->998->1030); structural shrink tracked in #3501.",
+    "_rebaseline_2026_07_19_7546_ghe_copilot_modal": "PR #7546 (GHE Copilot OAuth provider) own growth: OAuthModal.tsx 1030->1056 (gate units). Adds a gheUrl input state, routes ghe-copilot through the existing device-code branch, and threads gheUrl into the device-code request/poll extraData at the existing provider-switch chokepoints (+~24 lines, cohesive with the same pattern as #7399/#6636). The standalone GHE enterprise-URL config step JSX (originally +31 lines inline) was extracted to the new src/shared/components/oauthModal/GheConfigStep.tsx leaf component to minimize the bump; what remains is the irreducible provider-branch wiring. Fifth bump on this modal (969->989->993->998->1030->1056); structural shrink tracked in #3501.",
+    "_rebaseline_2026_07_19_7787_ic2_localdb_reexports": "PR #7787 (IC2 raw connections cache + lazy-decrypt) own growth: localDb.ts 805->807 (gate units, +2). localDb.ts is the re-export-only layer (hard rule #2 — no logic); the PR adds 4 new db/readCache re-exports (touchConnectionLastUsed, getCachedRawProviderConnections, getCachedProviderConnectionById, getCachedProviderNodes) required by existing barrel importers. Irreducible for a re-export list; frozen so it can only shrink.",
+    "_rebaseline_2026_07_20_7779_routingcombo_thread": "PR #7779 own growth: chatHelpers.ts 876->877 (+1, thread routingComboId into executeChatWithBreaker for compression-combo assignment). Frozen so it can only shrink.",
+    "_rebaseline_2026_07_20_7819_autocandidateoverrides_reexport": "PR for #7819 (Level 1+2: read-only auto/* candidate transparency + per-API-key exclusions) own growth: localDb.ts 807->808 (+1). Adds a single `export * from \"./db/autoCandidateOverrides\"` barrel re-export (hard rule #2 — no logic) for the new DB module backing per-apiKey candidate exclusions. Irreducible for a re-export list; frozen so it can only shrink.",
+    "_rebaseline_2026_07_21_8027_grok_cli_auth_json_paste": "PR #8027 (RaviTharuma, fix(grok-cli) #7610) own growth: OAuthModal.tsx 1080->1100 (gate units). Requires the full ~/.grok/auth.json (with refresh_token) on the paste-import path instead of a bare JWT, at the existing paste-token chokepoint (renamed tab label, updated instructions/placeholder, textarea for the auth.json blob, inline error surface). The validation logic itself (parseGrokCliPasteToken, previously an inline ~75-line function) was extracted to the new src/lib/oauth/utils/grokCliAuthJson.ts leaf module — mirroring the #6636/#7546 extraction precedent — so only the irreducible UI wiring remains here. Sixth bump on this modal (969->989->993->998->1030->1056->1100); structural shrink tracked in #3501.",
+    "_rebaseline_2026_07_21_8034_compression_exclusions_sidebar": "#8034 (compression exclusions dashboard tab) own growth: sections.ts 796->806 (+10, one new COMPRESSION_CONTEXT_GROUP sidebar item linking /dashboard/compression/exclusions). The file was already 796/800 before this PR (organic growth from prior sidebar entries), so a single new nav item pushed it 6 lines over cap. Freezing at 806 (cannot grow further); the sidebar item array is data, not extractable logic.",
+    "_rebaseline_2026_07_22_7936_namespace_roundtrip": "#7936 (@RCrushMe, Responses-Chat namespace round-trip identity seam) own growth: open-sse/translator/response/openai-responses.ts 1092->1125 (+33) and open-sse/utils/stream.ts 2814->2869 (+55) — threading the namespace-identity seam through the Responses↔Chat translation + stream paths so tool-call namespaces survive the round-trip. Cohesive translation/stream wiring at existing chokepoints, frozen at new size.",
+    "_rebaseline_2026_07_22_8010_codex_responses_engine": "PR #8010 (@JxnLexn) own growth: open-sse/mcp-server/schemas/tools.ts 1497->1505 (+8 = threading the new \"codex-responses\" literal into the compressionConfigureInput strategy/autoTriggerMode Zod enums and setCompressionEngineInput engine enum, mirroring the existing rtk/omniglyph enum entries; no new tool). open-sse/services/compression/strategySelector.ts 1043->1054 (+11 = one new `if (mode === \"codex-responses\")` dispatch branch in runCompression that delegates 100% to the new codexResponsesEngine.apply, mirroring the existing rtk single-mode dispatch, plus threading config.codexResponsesConfig.preserveToolNames into the shared adaptBodyForCompression call at the 3 existing call sites). src/lib/db/compression.ts (untracked, new-file cap 800) 794->845 (+51 = normalizeCodexResponsesConfig, mirroring the existing normalizeRtkConfig normalizer, plus registering \"codex-responses\" in the COMPRESSION_MODES/STACKED_PIPELINE_ENGINE_IDS/SINGLE_MODE_ENGINE sets and the getCompressionSettings load/save switch) — added to the baseline at its current size. All three are cohesive dispatch/normalizer wiring at existing chokepoints (mirroring the prior compression-mode rebaselines #6534/#6556), not extractable without hiding the mode-dispatch boundary. Covered by tests/unit/compression/codex-responses.test.ts (6) + omniglyph-registries.test.ts/types.test.ts (22, updated for the new mode).",
+    "_rebaseline_2026_07_22_8034_compression_exclusions_persistence": "#8034 (compression exclusions) own growth: src/lib/db/compression.ts 845->850 (+5 = threading the new compressionExclusions field through the existing getCompressionSettings/saveCompressionSettings load/save switch over the shared key_value compression namespace — no new table, no raw SQL). Mirrors the prior compression-field rebaselines (#8010 codex-responses normalizer at the same chokepoint); the load/save switch is a single dispatch boundary, not extractable without hiding it. Covered by the PR's 8 node:test + 3 vitest cases.",
+    "_rebaseline_2026_07_22_8050_model_lockout_exact_family": "#8050 (@AndrianBalanescu) own growth: accountFallback.ts 1864->1892 (+28) — exact-vs-family model-lockout scoping (getModelLockKey/isModelLocked/clearModelLock/getModelLockoutInfo) so an Antigravity 404 for one bare model no longer hijacks the whole family cooldown. Cohesive lockout logic; frozen at new size.",
+    "_rebaseline_2026_07_22_8056_headroom_minrows": "#8056 (@RaviTharuma, persist Headroom minRows) own growth: src/lib/db/compression.ts 850->866 (+16 HeadroomConfig+DEFAULT_HEADROOM_CONFIG+normalize/store in get/updateCompressionSettings) and open-sse/services/compression/strategySelector.ts 1054->1060 (+6 merge settings.headroom into stacked stepConfig). Cohesive settings-persistence + stacked-merge wiring at existing chokepoints, frozen at new size.",
+    "_rebaseline_2026_07_22_8081_reasoning_placeholder_guard": "#8081 (@Dingding-leo) own growth: openai-responses.ts 1125->1137 (+12) restructuring the reasoning-placeholder guard so it skips only the empty content block and still emits finish_reason/tool_calls in the same chunk. Cohesive translator wiring; frozen at new size.",
+    "_rebaseline_2026_07_22_8210_openrouter_midstream_error": "PR #8210 (hartmark, fix/openrouter-midstream-error-surfacing) own growth: open-sse/translator/response/openai-responses.ts 1137->1163 (+26) measured on the merged tip (release 1137 + this PR own growth). Adds a single new branch inside openaiToOpenAIResponsesResponse() that detects an OpenRouter-style mid-stream aggregator error (HTTP 200 SSE chunk with empty choices + a top-level error object) and surfaces it as state.upstreamError instead of silently falling through to the no-op/awaitingTrailingUsage path, which previously masked the failure as a false empty-success completion and skipped combo fallback. Irreducible call-site addition at the existing chunk-dispatch chokepoint (mirrors the Gemini-to-OpenAI translator's #4177 precedent for the same class of upstream error surfacing). Note: this baseline entry does NOT cover the separate pre-existing +11 drift already on the release tip from #8081/#8162 (1125->1136, unrelated reasoning-placeholder-stripping fix merged after this PR branched) — that drift belongs to the maintainer's rebaseline, not this PR.",
+    "_rebaseline_2026_07_22_8211_gemini_malformed_tool_choice": "PR #8211 (hartmark, fix/gemini-malformed-function-call-tool-choice) own growth: open-sse/translator/response/gemini-to-openai.ts 771->821 (+50, entirely this PR's diff — no other commit touched this file between the PR's merge-base and the release tip). Adds MALFORMED_FUNCTION_CALL/UNEXPECTED_TOOL_CALL handling inside geminiToOpenAIResponse(): synthesizes a `malformed_tool_call` tool_calls entry so finish_reason normalizes to the standard \"tool_calls\" instead of an unrecognized raw enum value that OpenAI-compatible clients (e.g. OpenClaw) silently ignore, and always synthesizes (rather than skipping when a real tool call already exists) so a malformed attempt alongside a real one in the same turn is not silently discarded. Irreducible cohesive addition at the existing candidate/finishReason translation chokepoint (mirrors the 9router#2462 raw-finish-reason precedent immediately below it in the same function). Covered by the PR's own tests/unit test additions for both the malformed-only and malformed-plus-real-call cases.",
+    "_rebaseline_2026_07_22_8213_chat_abandoned_target_abort": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: src/sse/handlers/chat.ts 1794->1860 (+66, measured against the PR's own merge-base — the release tip separately carries an unrelated -5 net shrink from #8013's antigravity callable-catalog alignment, which this PR's branch does not include and this entry does not cover). Adds resolveDispatchClientRawRequest(): merges a per-target modelAbortSignal into clientRawRequest.signal (via mergeAbortSignals) so a combo target abandoned by comboTargetTimeoutMs actually observes its own abort and reaches its cleanup path, instead of hanging forever inside withRateLimit/acquireAccountSemaphore and leaking a permanent 'pending' dashboard entry (live incident, log id 1784418258231-14961a). Also wires combo-exhausted rejection logging to capture request body + attempted models via the new rejectedRequestUsage helper. Irreducible additions at the existing chat dispatch chokepoint. Covered by the PR's own combo-config + integration test additions.",
+    "_rebaseline_2026_07_22_8213_combo_cooldown_wait_recording": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: open-sse/services/combo.ts 3548->3604 (+56, entirely this PR's diff — no other commit touched this file between the PR's merge-base and the release tip). Fixes combo cooldown-wait state recording so a bogus 503 is no longer crystallized when the cooldown-wait vars reset every setTry, adds an OpenAI-format SSE error frame path for combo-exhausted rejections (capturing request body + attempted models), and gives an abandoned per-target dispatch its own timeout instead of leaking a permanent 'pending' dashboard entry. Irreducible additions at the existing handleComboChat dispatch/retry chokepoint (mirrors the prior quota-share/headroom/task-aware strategy-branch precedents already frozen in this file). Covered by the PR's own combo-config + Gemini TPM-ceiling benchmark test additions.",
+    "_rebaseline_2026_07_22_8213_gemini_tpm_quota_cooldown_wait": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: open-sse/services/accountFallback.ts 1857->1932 on the merged tip (release 1892 incl #8050 +35, plus this PR own growth +40); measured against the PR own merge-base was 1857->1898 (+41 — the release tip separately carries an unrelated +34 from #8050's antigravity 404 model-not-found lockout scoping, which this PR's branch does not include and this entry does not cover). Own growth is the Gemini TPM-ceiling classification + cooldown-wait wiring feeding into the combo cooldown-wait state machine (rate-limit wedge recovery) introduced by this PR's commit series. Irreducible additions at the existing account-fallback/model-lockout chokepoint. Covered by the PR's own gemini-rate-limit-tracker and TPM-ceiling benchmark test additions.",
+    "_rebaseline_2026_07_22_8213_health_unblock_model_cooldowns": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: src/app/(dashboard)/dashboard/health/page.tsx 1094->1165 (+71, entirely this PR's diff — no other commit touched this file between the PR's merge-base and the release tip). Adds handleUnblockAll/handleUnblockOne dashboard actions (DELETE /api/resilience/model-cooldowns) so an operator can manually clear a Gemini TPM-wedge model lockout surfaced by this PR's cooldown-wait fixes, instead of waiting out the ceiling. Irreducible UI wiring at the existing health-page action chokepoint. Covered by the PR's own dashboard/resilience test additions.",
+    "_rebaseline_2026_07_22_8213_requestloggerdetail_unblock_ui": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: src/shared/components/RequestLoggerDetail.tsx 799->941 (+142, entirely this PR's diff — no other commit touched this file between the PR's merge-base and the release tip; crosses the general 800-line new-file cap so is frozen here for the first time). Adds a collapsible section header (open/expand-less toggle) plus per-log-entry unblock (`unblocking`/`cleared` state, isCombo503 detection) so the request-logger detail panel surfaces the same Gemini TPM cooldown-wait / model-lockout unblock action introduced by this PR at the individual-request level (mirrors the health-page bulk unblock action added in the same PR). Covered by the PR's own dashboard/resilience test additions.",
+    "_rebaseline_2026_07_22_fusion_8013_8098_antigravity": "Fusion of #8013 (backryun, catalog/IDE-CLI-split rewrite) + #8098 (nguyenha935, protocol-fidelity/fail-closed/credits/tool-cloaking): open-sse/services/usage/antigravity.ts NEW 802 (>cap 800, +2 — #8098 credits/tier usage service on #8013's profile-aware headers). Test growth (models-catalog-route 1605->1608, provider-models-route 1752->1757 from #8013 Gemini 3.6 catalog) tracked in testFrozen.",
+    "_rebaseline_2026_07_23_8127_grok_weekly_quota": "#8127 (@apoapostolov) own growth: src/sse/handlers/chat.ts 1861->1865 (+4) — weekly quota tracking for grok-web wires a quota-fetch hook at the existing dispatch chokepoint. Thin wiring mirroring adjacent provider-quota branches; not extractable. Covered by tests/unit/grok-quota-fetcher.test.ts.",
+    "_rebaseline_2026_07_23_8143_empty_catch_logging": "#8143 (@chirag127) own growth: open-sse/utils/stream.ts 2869->2887 (+18) — replacing empty catch blocks in the SSE stream subsystem with console.debug logging (Rule #6 silent-swallow fix, issues #8138-#8142). Cohesive logging additions at the existing catch chokepoints, not extractable; frozen at new size. Covered by tests/unit/stream-handler-catch-logging-8143.test.ts.",
+    "_rebaseline_2026_07_23_8219_cache_ttl_settings_sidebar": "#8219 (@oyi77) own growth: sections.ts 806->813 (+7) — configurable model-catalog cache-TTL settings adds a new sidebar nav entry + its visibility wiring. Sidebar item array is data, not extractable logic; frozen at new size.",
+    "_rebaseline_2026_07_23_8247_8248_model_unhealthy": "#8247+#8248 own growth: accountFallback.ts 1940->1941 (+1, irreducible import statement only — the substantive #8248 DEGRADED-pattern classifier was extracted into open-sse/config/errorConfig.ts, which has ample headroom, instead of growing this frozen file; #8247's fix is a single existing-line condition change, net zero lines). Scoping the credits-exhausted 403/429 branch to isCompatibleProvider() (per-model-quota openai/anthropic-compatible-* nicknames) so it stays model-scoped instead of terminalling the whole connection, and classifying NVIDIA NIM 'Function ... DEGRADED' 400 bodies as model-access-denied instead of a raw passthrough 400. Covered by tests/unit/8247-accountfallback-model-unhealthy.test.ts and tests/unit/8248-accountfallback-nvidia-degraded.test.ts.",
+    "_rebaseline_2026_07_23_8252_combo_400_advance": "#8252 (@RaviTharuma) own growth: accountFallback.ts 1932->1940 (+8) + combo.ts 3604->3630 (+26) — advance combo on model-scoped 400s wrapped as invalid/Bad-Request. Irreducible wiring at existing account-fallback + combo dispatch chokepoints. Covered by combo-model-scoped-400-advance.test.ts.",
+    "_rebaseline_2026_07_23_8266_alibaba_media": "#8266 (@backryun) own growth: imageRegistry.ts 821->979 (+158) — Alibaba-family media models (Qwen image/video, Bailian, Wan) added to the image/video registry. Registry model data, not extractable logic; frozen at new size.",
+    "_rebaseline_2026_07_24_8388_compression_detail_persist": "#8388 (compression engine DETAIL settings — Headroom/session-dedup/CCR — dropped on save) own growth: src/lib/db/compression.ts 866->872 (+6 = irreducible call-site wiring at the existing getCompressionSettings/updateCompressionSettings chokepoint: one import line, one `...buildDetailConfigDefaults()` spread in the seed config, and one `case \"sessionDedup\": case \"ccr\": applyDetailConfigUpdate(config, key, parsed); break;` load-switch case, mirroring the existing headroom/#8056 case immediately above it). The actual normalizer logic (normalizeSessionDedupConfig/normalizeCcrConfig, matching SESSION_DEDUP_SCHEMA/CCR_SCHEMA bounds) was EXTRACTED into a new leaf src/lib/db/compressionDetailNormalizers.ts (well under cap) so this frozen file only carries the minimal dispatch wiring. Covered by tests/unit/8388-compression-detail-persist.test.ts (schema-accept + full DB save->reload round-trip for both new sub-objects, plus a no-regression assertion on the existing headroom round-trip).",
+    "_rebaseline_2026_07_24_responses_toolcalls_log_summary": "hartmark, fix/responses-tool-calls-log-summary own growth: open-sse/translator/response/openai-responses.ts 1163->1174 (+11). closeToolCall() now also writes the completed tool call into the shared state.toolCalls Map (already populated by the openai-to-claude / claude-to-openai / gemini-to-openai response translators) so stream.ts's completion-log summary builder (which reads state.toolCalls, not this translator's own funcCallIds/funcNames/funcArgsBuf bookkeeping) reports finish_reason \"tool_calls\" and message.tool_calls for openai->openai-responses translated streams instead of always logging \"stop\" with no tool_calls — the actual client-facing SSE events were already correct; only the persisted call-log summary was wrong. Irreducible call-site addition at the existing tool-call-close chokepoint. Covered by the new regression test in tests/unit/translator-resp-openai-responses.test.ts.",
+    "_rebaseline_2026_07_25_8476_combo_input_bound_homogeneous_scope": "PR #8476 (herjarsa, fix/8375-8459-combo-image-fixes, #8375) own growth: open-sse/services/combo.ts 3642->3679 (+37 net: +29 the PR's own isInputBoundFailure short-circuit for deterministic context_length_exceeded/context_window_exceeded failures, +8 a /green-prs pre-merge fix scoping that short-circuit to homogeneous remainders only — the shipped code fired unconditionally on ANY target, regressing the intentional heterogeneous-combo fallback #6637/isContextOverflow400 protects, exactly as flagged by this PR's own review evidence but never actually implemented in the branch). The fix compares orderedTargets[i+1..] modelStr against the failing target's modelStr at the existing executeTarget dispatch chokepoint (mirrors the sameProviderNext precedent a few lines below) — irreducible call-site wiring, not extractable without hiding the dispatch boundary. Covered by tests/unit/combo-input-bound-failure-8375.test.ts (homogeneous pool still short-circuits) and the new tests/unit/combo-input-bound-heterogeneous-8375.test.ts (heterogeneous combo now correctly falls through to the larger-context target).",
+    "_rebaseline_2026_07_25_adobe_firefly_reference_images": "Follow-up to #8006: storage upload + referenceBlobs for image/video and /v1/images/edits dispatch. adobeFireflyClient.ts 1958->2317 (+upload helpers, extract sources, resolve blob ids). Note: 2317 not 2316 — check-file-size.mjs counts LOC via split(\"\\n\").length (counts the trailing-newline empty element), which is 1 higher than `wc -l` on a file ending in \\n; the PR's original entry (2316) was measured with wc -l and undercounted by 1 against the actual gate.",
+    "_rebaseline_pr1043_minimax_tts": "Upstream port decolua/9router#1043 (toanalien) own growth: audioSpeech.ts 965->1061 (+96). Adds MiniMax T2A v2 TTS dispatch (handleMinimaxSpeech + hexToBytes helper) — provider entry was already in audioRegistry (format: minimax-tts) but no handler existed, falling through to the OpenAI-compatible default that fails (T2A has custom shape + hex-encoded audio + base_resp envelope). New branch sits next to the other inline provider branches (xiaomi-mimo, coqui, tortoise, aws-polly) — extracting would just create indirection. Covered by tests/unit/minimax-tts-1043.test.ts (3 tests, GREEN: success, base_resp error, invalid-hex).",
+    "_rebaseline_pr4592_exclude_exhausted_auto": "Reconcile #4592 already-merged growth: combo.ts 2991->3036 (+45, terminal-status quota-cutoff exclusion in buildAutoCandidates + opt-in gate). Fast-gate PR->release does not run check:file-size.",
+    "open-sse/executors/antigravity.ts": 1528,
+    "open-sse/executors/base.ts": 1640,
+    "open-sse/executors/chatgpt-web.ts": 3241,
+    "open-sse/executors/codex.ts": 1562,
+    "open-sse/executors/cursor.ts": 1563,
+    "open-sse/executors/deepseek-web.ts": 1148,
+    "open-sse/executors/grok-web.ts": 1044,
+    "open-sse/executors/muse-spark-web.ts": 1405,
+    "open-sse/handlers/chatCore.ts": 5034,
+    "open-sse/handlers/imageGeneration.ts": 3101,
+    "open-sse/handlers/responseSanitizer.ts": 1128,
+    "open-sse/handlers/search.ts": 1536,
+    "open-sse/handlers/videoGeneration.ts": 1063,
+    "open-sse/mcp-server/schemas/tools.ts": 1505,
+    "open-sse/mcp-server/server.ts": 1411,
+    "open-sse/mcp-server/tools/advancedTools.ts": 1120,
+    "open-sse/services/accountFallback.ts": 1972,
+    "open-sse/services/adobeFireflyClient.ts": 2385,
+    "open-sse/services/claudeCodeCompatible.ts": 1202,
+    "open-sse/services/combo.ts": 3648,
+    "open-sse/services/compression/strategySelector.ts": 1060,
+    "open-sse/services/rateLimitManager.ts": 1167,
+    "open-sse/translator/response/openai-responses.ts": 1204,
+    "open-sse/utils/cursorAgentProtobuf.ts": 1505,
+    "open-sse/utils/stream.ts": 2889,
+    "src/app/(dashboard)/dashboard/HomePageClient.tsx": 1388,
+    "src/app/(dashboard)/dashboard/analytics/ComboHealthTab.tsx": 1031,
+    "src/app/(dashboard)/dashboard/api-manager/ApiManagerPageClient.tsx": 3117,
+    "src/app/(dashboard)/dashboard/cache/media/MediaPageClient.tsx": 1067,
+    "src/app/(dashboard)/dashboard/combos/page.tsx": 4647,
+    "src/app/(dashboard)/dashboard/costs/CostOverviewTab.tsx": 1283,
+    "src/app/(dashboard)/dashboard/costs/quota-share/components/PoolWizard.tsx": 1022,
+    "src/app/(dashboard)/dashboard/endpoint/EndpointPageClient.tsx": 2615,
+    "src/app/(dashboard)/dashboard/health/page.tsx": 1165,
+    "src/app/(dashboard)/dashboard/providers/[id]/components/modals/EditConnectionModal.tsx": 1316,
+    "src/app/(dashboard)/dashboard/providers/page.tsx": 1944,
+    "src/app/(dashboard)/dashboard/runtime/RuntimePageClient.tsx": 1201,
+    "src/app/(dashboard)/dashboard/settings/components/PricingTab.tsx": 1019,
+    "src/app/(dashboard)/dashboard/settings/components/ProxyRegistryManager.tsx": 1464,
+    "src/app/(dashboard)/dashboard/settings/components/ResilienceTab.tsx": 1123,
+    "src/app/(dashboard)/dashboard/settings/components/RoutingTab.tsx": 1629,
+    "src/app/(dashboard)/dashboard/settings/components/SystemStorageTab.tsx": 1573,
+    "src/app/(dashboard)/dashboard/usage/components/BudgetTab.tsx": 1028,
+    "src/app/(dashboard)/dashboard/usage/components/EvalsTab.tsx": 2148,
+    "src/app/(dashboard)/dashboard/usage/components/ProviderLimits/index.tsx": 1119,
+    "src/app/api/providers/[id]/models/route.ts": 2250,
+    "src/app/api/v1/models/catalog.ts": 1549,
+    "src/lib/tokenHealthCheck.ts": 1021,
+    "src/lib/db/apiKeys.ts": 1529,
+    "src/lib/db/core.ts": 1637,
+    "src/lib/db/migrationRunner.ts": 1094,
+    "src/lib/db/models.ts": 1097,
+    "src/lib/db/providers.ts": 1034,
+    "src/lib/memory/retrieval.ts": 1073,
+    "src/lib/tailscaleTunnel.ts": 1202,
+    "src/lib/usage/providerLimits.ts": 1013,
+    "src/shared/components/OAuthModal.tsx": 1134,
+    "src/shared/components/RequestLoggerV2.tsx": 1629,
+    "src/shared/components/analytics/charts.tsx": 1035,
+    "src/shared/services/cliRuntime.ts": 1122,
+    "src/sse/handlers/chat.ts": 1877,
+    "src/sse/services/auth.ts": 2508,
+    "tests/unit/account-fallback-service.test.ts": 1572,
+    "tests/unit/provider-validation-specialty.test.ts": 2985,
+    "open-sse/executors/hyperagent.ts": 1026,
+    "open-sse/executors/default.ts": 1042,
+    "open-sse/executors/kiro.ts": 1069
+  },
  "testCap": 1000,
  "testFrozen": {
    "_rebaseline_2026_06_27_5193_antigravity_test": "#5193 own test growth: oauth-providers-config.test.ts 870->873 (+3: antigravity projectId assertion + 50ms tick for the now fire-and-forget onboarding, matching the no-PKCE/no-openid flow).",
@@ -283,134 +411,7 @@
  "_rebaseline_2026_07_27_3850_relax_filesize_cap_v2_20pct": "OWNER-APPROVED TEMPORARY relax for v3.8.50-3.8.54 PREPARE phase (docs/ROADMAP.md). v1 was cap 800->900 / testCap 800->900 on 2026-07-27; v2 = v1 +20% buffer = cap 900->1000 (+100), testCap 900->1000 (+100). Justification: same as complexity v2 — the v3.8.50 release cut coincides with high-merge activity; owner accepted enlarging the headroom to cover the entire PREPARE phase (5 minor cycles .50-.54) without per-PR rebaseline noise. Targets: decompose-existing-frozen unchanged (frozen still only-shrink — see frozen[] entries and the 105 files >900 that still need structural decomposition regardless of cap); this only relaxes the cap for NEW files in the decompose/extract-while-PREPARE phase (.51='executor registry in-place' and .52='combo.ts decomposition' create new leaf modules above 800). RE-TIGHTENING MANDATORY in v3.8.51: cap target 850 = 850 once decomposition wave stabilizes (gives 150 units of post-tighten headroom vs the new 1000 ceiling). Tracked via same roadmap issue as complexity v2. Window: v3.8.50 (release cut) → v3.8.54 close (RE-TIGHTEN at v3.8.51 prep merge per ROADMAP.md). Last entry unless measured regression. v1 entry retained below for audit trail.",
  "_rebaseline_2026_07_27_3850_relax_filesize_cap": "OWNER-APPROVED TEMPORARY relax for v3.8.50-3.8.54 PREPARE phase (docs/ROADMAP.md). cap 800->900 (+100), testCap 800->900 (+100). Targets: decompose-existing-frozen unchanged (frozen still only-shrink); this only relaxes the cap for NEW files in the decompose/extract-while-PREPARE phase (.51='executor registry in-place' and .52='combo.ts decomposition' create new leaf modules above 800). RE-TIGHTENING MANDATORY in v3.8.51: cap target 850 = 850 once decomposition wave stabilizes. SUPERSEDED by _rebaseline_2026_07_27_3850_relax_filesize_cap_v2_20pct (v1 +20% buffer) — retained for audit. Tracked via same roadmap issue.",
  "_rebaseline_2026_07_27_v3849_train1h": "Merge-train 1H (31 PRs) — owner-approved 2026-07-27. Two distinct causes, kept separate on purpose: (1) GENUINE irreducible growth at existing chokepoints — providerLimits/auth (#8632 Kimi quota-reset recovery), rateLimitManager (#8616 idle wedged limiters), models-catalog-route.test (#8610 OpenCode Go effort aliases); (2) COLLISION with #8585, which banked shrinks measured on the pre-train release tip while 30 sibling PRs in the SAME train grew those files again — chat/accountFallback (#8628), chatCore (#8613), videoGeneration (#8581), imageGeneration. The zero-headroom frozen entries cannot absorb either. Ceilings re-pinned to the post-merge tip; #8612 (also in this train) automates shrink-banking so this self-inflicted drift stops recurring. Detail: src/lib/usage/providerLimits.ts 1006->1013 (#8632); src/sse/services/auth.ts 2492->2508 (#8632); open-sse/services/rateLimitManager.ts 1014->1060 (#8616); src/sse/handlers/chat.ts 1842->1845 (#8628); open-sse/handlers/chatCore.ts 4939->4955 (#8613); open-sse/handlers/imageGeneration.ts 3100->3101 ((sem PR — teto do #8585)); open-sse/handlers/videoGeneration.ts 1038->1063 (#8581); open-sse/services/accountFallback.ts 1965->1966 (#8628); tests/unit/models-catalog-route.test.ts 1608->1636 (#8610)",
-  "frozen": {
-    "_rebaseline_2026_06_22_4644_deepseek_web_tools": "PR #4644 (BugsBag/robust deepseek-web tool-call parsing): open-sse/executors/deepseek-web.ts 1117->1125 (+8). The new agentic tool-call path emits surrounding text + reasoning before tool_calls and swaps to the dedicated deepseekWebTools.ts parser; the +8 lines are cohesive wiring at the existing transformSSE chokepoint (the parser itself lives in the new deepseekWebTools.ts file, already under cap). The PR's own fast-gate (PR->release) does not run check:file-size, so this surfaced only at release reconcile. Covered by tests/unit/deepseek-web-tools-variants.test.ts + deepseek-web-tools-execute.test.ts.",
-    "_rebaseline_2026_06_23_4712_deepseek_web_tool_results": "PR for #4712 (deepseek-web drops role:tool): open-sse/executors/deepseek-web.ts 1125->1148 (+23). messagesToPrompt() now folds role:\"tool\" results into the single-prompt transcript (recovering the tool name from the preceding assistant tool_calls by tool_call_id) instead of silently dropping them; the lines are cohesive wiring inside the existing function. Covered by tests/unit/deepseek-web-tool-result-prompt-4712.test.ts.",
-    "_rebaseline_2026_06_24_headroom_strategy": "Headroom-aware connection selection (dario technique): combo.ts 3168->3180 (+12 = a new `else if (strategy === \"headroom\")` dispatch branch in handleComboChat that delegates to orderTargetsByHeadroom + its log line, plus the import). The actual logic lives OUT of the god-file: the pure ranker rankByHeadroom/computeHeadroom is the new leaf open-sse/services/combo/headroomRanking.ts (91 LOC, <cap) and the async orderer orderTargetsByHeadroom is appended to the existing open-sse/services/combo/quotaStrategies.ts (<cap) next to its sibling reset-aware/reset-window orderers (reuses their connection-expansion machinery). headroom = 1 - max(util_5h, util_7d) from getSaturation (src/lib/quota/saturationSignals.ts), prefers the connection with the most free capacity. Only the dispatch wiring is irreducible at the existing combo strategy chokepoint (mirrors the reset-aware/reset-window/context-optimized branches); not extractable without hiding the call site. fill-first stays default; all existing strategies untouched. Covered by tests/unit/combo-headroom-ranking.test.ts (pure helper) + tests/unit/combo-headroom-strategy.test.ts (orderer, saturation injected). Structural shrink of combo.ts tracked in #3501.",
-    "_rebaseline_2026_06_24_quota_share_strategy": "Dedicated quota-share strategy (Phase 3 #9): combo.ts 3180->3190 (+10 = one new `else if (strategy === \"quota-share\")` dispatch branch in handleComboChat that delegates 100% to selectQuotaShareTarget + its log line, plus the import). All the new logic lives OUT of the god-file in two new leaves under open-sse/services/combo/: quotaShareInflight.ts (in-flight counter with TTL/lease, ~150 LOC <cap) and quotaShareStrategy.ts (per-model bucket gating via isBucketSaturated + DRR proportional to weight + P2C over in-flight, ~240 LOC <cap). Only the dispatch wiring is irreducible at the existing combo strategy chokepoint (mirrors the headroom/reset-aware/reset-window/context-optimized branches); not extractable without hiding the call site. ZERO existing strategy cases were modified — only this branch was added, and the qtSd/ combos switched from fill-first to quota-share in src/lib/quota/quotaCombos.ts. Covered by tests/unit/quota-share-strategy.test.ts (gating, DRR fairness, P2C in-flight, fail-open, activation). Structural shrink of combo.ts tracked in #3501.",
-    "_rebaseline_2026_06_24_task_aware_routing": "Task-aware routing strategy (port PR #2045, OmniRoute #4945): combo.ts 3190->3225 (+35) = one new `else if (strategy === \"task-aware\")` dispatch branch delegating 100% to selectTaskAwareTarget + its imports/log lines. All scoring/classification logic lives OUT of the god-file in the new leaf open-sse/services/taskAwareRouting.ts (553 LOC <cap). Only the dispatch wiring is irreducible at the existing combo strategy chokepoint (mirrors quota-share/headroom/reset-aware branches). ZERO existing strategy cases modified. Covered by tests/unit/combo-task-aware.test.ts (35 tests). Structural shrink of combo.ts tracked in #3501.",
-    "_rebaseline_2026_06_26_fidelity_gate_extraction": "Milestone-B fidelity-gate wiring residual: bodyToText+gateAdvance extracted to fidelityGateStep.ts (889->854, -35), but the StackOptions.fidelityGate field, the `const fidelityGate` reads at the two stacked-loop dispatch chokepoints, and the import of FidelityGateConfig are irreducible wiring that cannot leave strategySelector without an architectural refactor of the pre-existing stacked pipeline. Net: 889->854 (+6 vs the pre-Milestone-B frozen 848). Covered by tests/unit/compression/*.test.ts (940 pass).",
-    "_rebaseline_2026_06_27_5193_5203_antigravity_oauthmodal": "Antigravity remote-login own growth: OAuthModal.tsx 960->969 (gate units). #5193 (+~4: remote paste instruction shown for all remote incl. Google + its rationale comment) and #5203 (+~5: handleManualSubmit credential-blob branch + button guard; submit logic extracted to oauthBlobSubmit.ts to minimize). Frozen set to the SUM so either merge order passes. Cohesive at the existing manual-submit chokepoint.",
-    "_rebaseline_2026_06_27_5193_antigravity_basered": "Base-red (pre-existing release drift, fast-gate PR->release skips check:file-size): accountFallback.ts 1773->1777 and src/app/api/providers/[id]/test/route.ts 924->940 were already over their frozen caps on release/v3.8.39 independent of any antigravity change. Owner chose to rebaseline (keep the documented issue-reference comments #1846/#1449/#347 etc.) rather than accept the contributor comment-stripping in #5200/#5198. Reverted #5200 to restore the comments; bumped these two frozen caps to the actual base sizes. No logic change.",
-    "_rebaseline_2026_06_28_5237_impersonation_ua_refresh": "PR #5237 (refresh impersonation UAs): grok-web.ts 1871->1873 (+2), muse-spark-web.ts 1284->1302 (+18), perplexity-web.ts 1013->1032 (+19). Net semantic change in each file is a single User-Agent constant (Chrome 147->149 for grok/muse; perplexity kept at Firefox 148 to stay matched with the firefox_148 TLS profile — the contributor's 152 bump was reverted to avoid a UA-vs-JA3 mismatch, #2459). The growth is Prettier reflow that lint-staged unavoidably applies to these grandfathered long-line files the moment they are touched; not extractable. src/sse/services/auth.ts 2336->2401 in the same reconcile is #5222's antigravity-LRU-retry growth that merged via --admin without a baseline bump.",
-    "_rebaseline_2026_06_28_5243_risk_gate_prepass": "PR #5243 (compression risk-gate pre-pass) own growth: open-sse/services/compression/strategySelector.ts 854->899 (+45). The three exported entry points (applyCompression/applyStackedCompression/applyStackedCompressionAsync) become thin wrappers over pure-extracted private bodies (runCompression/runStackedCompression/runStackedCompressionAsync) so the risk-gate mask->run->restore wrapper sits strictly OUTSIDE the per-step loop — a single universal integration point. The wrapper logic itself (resolveRiskGate/withRiskGate) lives in the new riskGate/strategyWrap.ts (<cap); the residual growth is the duplicated thin-wrapper signatures + the extracted bodies' dispatch boundary, guarded by a byte-identical parity test (riskGateIntegration). Default off (DEFAULT_COMPRESSION_CONFIG unchanged). Not extractable without hiding the dispatch boundary, mirroring prior compression rebaselines. Structural shrink tracked in #3501.",
-    "_rebaseline_2026_06_28_5275_correlation_id_extract": "Extraction of the safe CorrelationId subset of #5275 (hartmark) — request correlation id stored in call_logs (migration 109) and returned via the X-Correlation-Id response header, WITHOUT the combo/resilience or build/lazy-loading changes (those stay in #5275). Own growth: callLogs.ts 975->985 (correlation_id column on CallLogSummaryRow + read/map), usageHistory.ts 983->988 (correlationId metadata normalize), chat.ts 1575->1632 (withCorrelationId response wiring + combo-failure log carrying correlationId), chatHelpers.ts new 811 (withCorrelationId helper + reqId threading; was 791<cap pre-feature). Cohesive request/logging chokepoint wiring; structural shrink of chat.ts tracked in #3501.",
-    "_rebaseline_2026_06_29_4038_cas_guard": "PR (#4038) own growth: tokenRefresh.ts 2103->2181 (+78 = the compare-and-swap guard on the refresh persist — runWithCasGuard/getActiveCasGuard AsyncLocalStorage pair mirroring runWithOnPersist, casGuardShouldSkipPersist that rereads the row right before persisting and skips the write when a concurrent writer already rotated the refresh_token past the one presented, plus getCasGuardStats counters). Fixes the sibling-rotation-revert → token-family-revocation storm. Gated behind an active guard (opt-in; no guard => byte-identical). Wiring lives at the two persist chokepoints inside getAccessToken; the comparison reuses wasRefreshTokenRotated from refreshSerializer. Not extractable without splitting the refresh hot path.",
-    "_rebaseline_2026_06_29_5286_memoization": "PR #5286 own growth: strategySelector.ts 899->960 (+61 = the opt-in result-memoization branches in applyCompression/applyCompressionAsync — principal+determinism gate, makeMemoKey lookup/store with model+supportsVision folded into the key, recompute-with-memo-off). Default off (memoizeCompressionResults), so zero behavior change. The memo helpers live in the leaf resultMemo.ts (<cap); the chokepoint wiring here is not extractable. Structural shrink of this hot-path file tracked in #3501.",
-    "_rebaseline_2026_07_01_v3843_release_5609": "Rebaseline v3.8.43 (PR #5609 release reconciliation). DRIFT dos 109 commits do ciclo: 8 god-files existentes cresceram (ApiManagerPageClient 2983->3017, combos/page 4594->4608, AddApiKeyModal 868->869, providerPageHelpers 974->996, chat.ts 1635->1647, auth.ts 2401->2403, batchProcessor 828->915, combo.ts 3368->3387) + 2 novos acima do cap (huggingchat.ts 813, tests web-cookie-providers-new 827) + 4 test files cresceram. Modularizacao deferida (blast-radius mid-release); congelado no estado atual p/ o proximo ciclo ratchetar daqui.",
-    "_rebaseline_2026_07_02_5816_qoder": "PR #5816 (@AgentKiller45, qoder PAT via qodercli): qoderCli.ts 666->989, new-above-cap frozen (owner-approved baseline freeze). The growth is the legitimate PAT job-token exchange + quota parsing CLI transport (the pure-JS Cosy path 500'd on every PAT request); extracting the spawn/parse helpers now would just add indirection to a contributor PR mid-merge. Test frozen also raised for this PR's coverage growth: providers-page-utils.test.ts 1052->1092. Additionally clears an inherited base-red from the already-merged #5933 (codex json_schema->text.format): translator-openai-responses-req.test.ts 1097->1172 (+75 regression tests, no offending branch left). All remain frozen (cannot grow further); release captain's rebaseline-at-release supersedes.",
-    "_rebaseline_2026_07_09_6126_clinepass_dual_auth": "PR #6126 (@hajilok, dual-auth ClinePass) own growth: tokenRefresh.ts 2181->2182 (+1 = a single `case \"clinepass\":` fallthrough label added to the existing `case \"cline\":` in _getAccessTokenInternal's provider switch, so clinepass token refresh dispatches to the already-shared refreshClineToken() instead of silently falling through to the generic OAuth refresh). Irreducible 1-line switch-case wiring at the existing chokepoint; the header-building logic for the same feature was extracted to a new leaf src/shared/utils/clineAuth.ts::buildClinepassHeaders() (well under cap) to avoid growing open-sse/executors/default.ts. Covered by tests/unit/clinepass-provider.test.ts.",
-    "_rebaseline_2026_07_09_6363_kiro_external_idp": "PR #6363 (@artickc, Kiro external IdP) own growth: tokenRefresh.ts 2182->2249 (+67 = the external_idp refresh branch inside refreshKiroToken — standard public-client OAuth2 refresh_token grant against the org IdP tokenEndpoint via buildExternalIdpRefreshParams/isExternalIdpAuthMethod from the new leaf open-sse/services/kiroExternalIdp.ts, with invalid_grant/invalid_client -> unrecoverable_refresh_error mapping). Cohesive addition at the existing refreshKiroToken chokepoint. Covered by tests/unit/kiro-external-idp.test.ts.",
-    "_rebaseline_2026_07_09_6587_kiro_api_key_auth": "PR #6587 (@strangersp) own growth for Kiro long-lived API-key auth, merged onto v3.8.47 tip: openai-to-kiro.ts 890->912 (+22, auth-header selection for API-key-vs-OAuth-token connections), providerLimits.ts 998->1000 (+2, API-key auth-type branch), translator-openai-to-kiro.test.ts 1234->1257 (+23), providers-page-utils.test.ts 1109->1107 (net -2 after merging with parallel release drift; connectionMatchesProviderCard api_key coverage added), provider-validation-specialty.test.ts 2856->2980 (+124 net after merge with parallel release drift; this PR also removed the file's `@typescript-eslint/no-explicit-any` eslint-suppression entry by fixing all `any` usages, adding typed replacements). Cohesive additive feature growth, well tested; not extractable without splitting the existing chokepoints mid-merge.",
-    "_rebaseline_2026_07_09_6678_routing_strategy_9router": "#6678 (SeaXen) — 9router-parity Routing Strategy settings card + per-provider/combo sticky-round-robin override. Own growth: ProviderDetailPageClient.tsx 784->786 (single ProviderAccountRoutingCard mount + import), auth.ts 2448->2458 (providerStrategies override resolution: fallbackStrategy/stickyRoundRobinLimit per-provider cascade in getProviderCredentials). Both additive, zero unrelated refactor; new UI/logic lives in new files (ProviderAccountRoutingCard.tsx, RoutingStrategyCard.tsx, rrState.ts::resolveComboStickyRoundRobinLimit). chat.ts value below reflects the current release tip (grown by other concurrent PRs, e.g. #6640), not this PR own change.",
-    "_rebaseline_2026_07_10_6318_omp_letta": "PR #6318 (@hamsa0x7, omp+letta CLI integrations) own growth: cliTools.ts (+53 = 2 registry entries incl. omp docsUrl) and cliRuntime.ts (+18 = runtime-detection wiring for the 2 new tools). Cohesive registry/wiring growth at the existing chokepoints; scope reduced from the original 5 tools (pi/codewhale/jcode shipped separately).",
-    "_rebaseline_2026_07_10_gcf_v3_2_decode": "PR #6838 own growth: new vendored file open-sse/services/compression/engines/headroom/gcf/decode_generic.ts frozen at 880 (> 800 cap). It is the vendored GCF generic-profile decoder (spec v3.2 nested flattening plus the prototype-pollution / hasOwnProperty hardening added in this PR's Gemini review). Kept as one file faithful to upstream gcf-typescript so re-vendoring stays a clean copy rather than a re-split each cycle (sibling generic.ts/scalar.ts stay < cap; extraction would also fragment the file's frozen eslint no-explicit-any suppressions). Round-trip + prototype-pollution regression coverage in tests/unit/compression/headroom-smartcrusher.test.ts. Frozen: only shrinks from here.",
-    "_rebaseline_2026_07_12_v3847_mergeprs_tail": "v3.8.47 /merge-prs tail (owner-approved): src/lib/localDb.ts NEW>800 (799->805, +6 re-exports countFreeProxies + recordFreeProxySyncErrors/clearFreeProxySyncErrors/getFreeProxySyncErrors + FreeProxySyncErrors type for #6909 free-pool relay-repair; re-export-only per Hard Rule #2, not extractable).",
-    "_rebaseline_2026_07_15_7070_combos_memo": "PR #7070 (perf/p1-memo) own growth: src/app/(dashboard)/dashboard/combos/page.tsx 4655->4656 (+1 = React.memo wrapping of ComboCard). Covered by tests/unit/ui/combos-page-smoke.test.tsx.",
-    "_rebaseline_2026_07_18_7399_xai_oauth_modal": "PR #7399 (xAI OAuth PKCE) own growth: OAuthModal.tsx 993->998 (+5 = provider entry + PKCE flow branch wiring at the existing provider-switch chokepoint; the provider logic itself lives in src/lib/oauth/providers/xai-oauth.ts, new leaf). Third irreducible wiring bump on this modal (969->989->993->998); structural shrink tracked in #3501.",
-    "_rebaseline_2026_07_19_6636_codex_session_json": "#6636 own growth: OAuthModal.tsx 998->1030 (gate units, split(\"\\n\").length incl. trailing newline; +32 = session-JSON paste branch for handleManualSubmit plus a shared submitCodexAccessToken() helper extracted from the pre-existing bare-JWT branch, mirroring the #5203 oauthBlobSubmit.ts extraction precedent; the normalizer logic itself lives in the new src/lib/oauth/utils/codexSessionImport.ts leaf module, not here). Fourth irreducible wiring bump on this modal (969->989->993->998->1030); structural shrink tracked in #3501.",
-    "_rebaseline_2026_07_19_7546_ghe_copilot_modal": "PR #7546 (GHE Copilot OAuth provider) own growth: OAuthModal.tsx 1030->1056 (gate units). Adds a gheUrl input state, routes ghe-copilot through the existing device-code branch, and threads gheUrl into the device-code request/poll extraData at the existing provider-switch chokepoints (+~24 lines, cohesive with the same pattern as #7399/#6636). The standalone GHE enterprise-URL config step JSX (originally +31 lines inline) was extracted to the new src/shared/components/oauthModal/GheConfigStep.tsx leaf component to minimize the bump; what remains is the irreducible provider-branch wiring. Fifth bump on this modal (969->989->993->998->1030->1056); structural shrink tracked in #3501.",
-    "_rebaseline_2026_07_19_7787_ic2_localdb_reexports": "PR #7787 (IC2 raw connections cache + lazy-decrypt) own growth: localDb.ts 805->807 (gate units, +2). localDb.ts is the re-export-only layer (hard rule #2 — no logic); the PR adds 4 new db/readCache re-exports (touchConnectionLastUsed, getCachedRawProviderConnections, getCachedProviderConnectionById, getCachedProviderNodes) required by existing barrel importers. Irreducible for a re-export list; frozen so it can only shrink.",
-    "_rebaseline_2026_07_20_7779_routingcombo_thread": "PR #7779 own growth: chatHelpers.ts 876->877 (+1, thread routingComboId into executeChatWithBreaker for compression-combo assignment). Frozen so it can only shrink.",
-    "_rebaseline_2026_07_20_7819_autocandidateoverrides_reexport": "PR for #7819 (Level 1+2: read-only auto/* candidate transparency + per-API-key exclusions) own growth: localDb.ts 807->808 (+1). Adds a single `export * from \"./db/autoCandidateOverrides\"` barrel re-export (hard rule #2 — no logic) for the new DB module backing per-apiKey candidate exclusions. Irreducible for a re-export list; frozen so it can only shrink.",
-    "_rebaseline_2026_07_21_8027_grok_cli_auth_json_paste": "PR #8027 (RaviTharuma, fix(grok-cli) #7610) own growth: OAuthModal.tsx 1080->1100 (gate units). Requires the full ~/.grok/auth.json (with refresh_token) on the paste-import path instead of a bare JWT, at the existing paste-token chokepoint (renamed tab label, updated instructions/placeholder, textarea for the auth.json blob, inline error surface). The validation logic itself (parseGrokCliPasteToken, previously an inline ~75-line function) was extracted to the new src/lib/oauth/utils/grokCliAuthJson.ts leaf module — mirroring the #6636/#7546 extraction precedent — so only the irreducible UI wiring remains here. Sixth bump on this modal (969->989->993->998->1030->1056->1100); structural shrink tracked in #3501.",
-    "_rebaseline_2026_07_21_8034_compression_exclusions_sidebar": "#8034 (compression exclusions dashboard tab) own growth: sections.ts 796->806 (+10, one new COMPRESSION_CONTEXT_GROUP sidebar item linking /dashboard/compression/exclusions). The file was already 796/800 before this PR (organic growth from prior sidebar entries), so a single new nav item pushed it 6 lines over cap. Freezing at 806 (cannot grow further); the sidebar item array is data, not extractable logic.",
-    "_rebaseline_2026_07_22_7936_namespace_roundtrip": "#7936 (@RCrushMe, Responses-Chat namespace round-trip identity seam) own growth: open-sse/translator/response/openai-responses.ts 1092->1125 (+33) and open-sse/utils/stream.ts 2814->2869 (+55) — threading the namespace-identity seam through the Responses↔Chat translation + stream paths so tool-call namespaces survive the round-trip. Cohesive translation/stream wiring at existing chokepoints, frozen at new size.",
-    "_rebaseline_2026_07_22_8010_codex_responses_engine": "PR #8010 (@JxnLexn) own growth: open-sse/mcp-server/schemas/tools.ts 1497->1505 (+8 = threading the new \"codex-responses\" literal into the compressionConfigureInput strategy/autoTriggerMode Zod enums and setCompressionEngineInput engine enum, mirroring the existing rtk/omniglyph enum entries; no new tool). open-sse/services/compression/strategySelector.ts 1043->1054 (+11 = one new `if (mode === \"codex-responses\")` dispatch branch in runCompression that delegates 100% to the new codexResponsesEngine.apply, mirroring the existing rtk single-mode dispatch, plus threading config.codexResponsesConfig.preserveToolNames into the shared adaptBodyForCompression call at the 3 existing call sites). src/lib/db/compression.ts (untracked, new-file cap 800) 794->845 (+51 = normalizeCodexResponsesConfig, mirroring the existing normalizeRtkConfig normalizer, plus registering \"codex-responses\" in the COMPRESSION_MODES/STACKED_PIPELINE_ENGINE_IDS/SINGLE_MODE_ENGINE sets and the getCompressionSettings load/save switch) — added to the baseline at its current size. All three are cohesive dispatch/normalizer wiring at existing chokepoints (mirroring the prior compression-mode rebaselines #6534/#6556), not extractable without hiding the mode-dispatch boundary. Covered by tests/unit/compression/codex-responses.test.ts (6) + omniglyph-registries.test.ts/types.test.ts (22, updated for the new mode).",
-    "_rebaseline_2026_07_22_8034_compression_exclusions_persistence": "#8034 (compression exclusions) own growth: src/lib/db/compression.ts 845->850 (+5 = threading the new compressionExclusions field through the existing getCompressionSettings/saveCompressionSettings load/save switch over the shared key_value compression namespace — no new table, no raw SQL). Mirrors the prior compression-field rebaselines (#8010 codex-responses normalizer at the same chokepoint); the load/save switch is a single dispatch boundary, not extractable without hiding it. Covered by the PR's 8 node:test + 3 vitest cases.",
-    "_rebaseline_2026_07_22_8050_model_lockout_exact_family": "#8050 (@AndrianBalanescu) own growth: accountFallback.ts 1864->1892 (+28) — exact-vs-family model-lockout scoping (getModelLockKey/isModelLocked/clearModelLock/getModelLockoutInfo) so an Antigravity 404 for one bare model no longer hijacks the whole family cooldown. Cohesive lockout logic; frozen at new size.",
-    "_rebaseline_2026_07_22_8056_headroom_minrows": "#8056 (@RaviTharuma, persist Headroom minRows) own growth: src/lib/db/compression.ts 850->866 (+16 HeadroomConfig+DEFAULT_HEADROOM_CONFIG+normalize/store in get/updateCompressionSettings) and open-sse/services/compression/strategySelector.ts 1054->1060 (+6 merge settings.headroom into stacked stepConfig). Cohesive settings-persistence + stacked-merge wiring at existing chokepoints, frozen at new size.",
-    "_rebaseline_2026_07_22_8081_reasoning_placeholder_guard": "#8081 (@Dingding-leo) own growth: openai-responses.ts 1125->1137 (+12) restructuring the reasoning-placeholder guard so it skips only the empty content block and still emits finish_reason/tool_calls in the same chunk. Cohesive translator wiring; frozen at new size.",
-    "_rebaseline_2026_07_22_8210_openrouter_midstream_error": "PR #8210 (hartmark, fix/openrouter-midstream-error-surfacing) own growth: open-sse/translator/response/openai-responses.ts 1137->1163 (+26) measured on the merged tip (release 1137 + this PR own growth). Adds a single new branch inside openaiToOpenAIResponsesResponse() that detects an OpenRouter-style mid-stream aggregator error (HTTP 200 SSE chunk with empty choices + a top-level error object) and surfaces it as state.upstreamError instead of silently falling through to the no-op/awaitingTrailingUsage path, which previously masked the failure as a false empty-success completion and skipped combo fallback. Irreducible call-site addition at the existing chunk-dispatch chokepoint (mirrors the Gemini-to-OpenAI translator's #4177 precedent for the same class of upstream error surfacing). Note: this baseline entry does NOT cover the separate pre-existing +11 drift already on the release tip from #8081/#8162 (1125->1136, unrelated reasoning-placeholder-stripping fix merged after this PR branched) — that drift belongs to the maintainer's rebaseline, not this PR.",
-    "_rebaseline_2026_07_22_8211_gemini_malformed_tool_choice": "PR #8211 (hartmark, fix/gemini-malformed-function-call-tool-choice) own growth: open-sse/translator/response/gemini-to-openai.ts 771->821 (+50, entirely this PR's diff — no other commit touched this file between the PR's merge-base and the release tip). Adds MALFORMED_FUNCTION_CALL/UNEXPECTED_TOOL_CALL handling inside geminiToOpenAIResponse(): synthesizes a `malformed_tool_call` tool_calls entry so finish_reason normalizes to the standard \"tool_calls\" instead of an unrecognized raw enum value that OpenAI-compatible clients (e.g. OpenClaw) silently ignore, and always synthesizes (rather than skipping when a real tool call already exists) so a malformed attempt alongside a real one in the same turn is not silently discarded. Irreducible cohesive addition at the existing candidate/finishReason translation chokepoint (mirrors the 9router#2462 raw-finish-reason precedent immediately below it in the same function). Covered by the PR's own tests/unit test additions for both the malformed-only and malformed-plus-real-call cases.",
-    "_rebaseline_2026_07_22_8213_chat_abandoned_target_abort": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: src/sse/handlers/chat.ts 1794->1860 (+66, measured against the PR's own merge-base — the release tip separately carries an unrelated -5 net shrink from #8013's antigravity callable-catalog alignment, which this PR's branch does not include and this entry does not cover). Adds resolveDispatchClientRawRequest(): merges a per-target modelAbortSignal into clientRawRequest.signal (via mergeAbortSignals) so a combo target abandoned by comboTargetTimeoutMs actually observes its own abort and reaches its cleanup path, instead of hanging forever inside withRateLimit/acquireAccountSemaphore and leaking a permanent 'pending' dashboard entry (live incident, log id 1784418258231-14961a). Also wires combo-exhausted rejection logging to capture request body + attempted models via the new rejectedRequestUsage helper. Irreducible additions at the existing chat dispatch chokepoint. Covered by the PR's own combo-config + integration test additions.",
-    "_rebaseline_2026_07_22_8213_combo_cooldown_wait_recording": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: open-sse/services/combo.ts 3548->3604 (+56, entirely this PR's diff — no other commit touched this file between the PR's merge-base and the release tip). Fixes combo cooldown-wait state recording so a bogus 503 is no longer crystallized when the cooldown-wait vars reset every setTry, adds an OpenAI-format SSE error frame path for combo-exhausted rejections (capturing request body + attempted models), and gives an abandoned per-target dispatch its own timeout instead of leaking a permanent 'pending' dashboard entry. Irreducible additions at the existing handleComboChat dispatch/retry chokepoint (mirrors the prior quota-share/headroom/task-aware strategy-branch precedents already frozen in this file). Covered by the PR's own combo-config + Gemini TPM-ceiling benchmark test additions.",
-    "_rebaseline_2026_07_22_8213_gemini_tpm_quota_cooldown_wait": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: open-sse/services/accountFallback.ts 1857->1932 on the merged tip (release 1892 incl #8050 +35, plus this PR own growth +40); measured against the PR own merge-base was 1857->1898 (+41 — the release tip separately carries an unrelated +34 from #8050's antigravity 404 model-not-found lockout scoping, which this PR's branch does not include and this entry does not cover). Own growth is the Gemini TPM-ceiling classification + cooldown-wait wiring feeding into the combo cooldown-wait state machine (rate-limit wedge recovery) introduced by this PR's commit series. Irreducible additions at the existing account-fallback/model-lockout chokepoint. Covered by the PR's own gemini-rate-limit-tracker and TPM-ceiling benchmark test additions.",
-    "_rebaseline_2026_07_22_8213_health_unblock_model_cooldowns": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: src/app/(dashboard)/dashboard/health/page.tsx 1094->1165 (+71, entirely this PR's diff — no other commit touched this file between the PR's merge-base and the release tip). Adds handleUnblockAll/handleUnblockOne dashboard actions (DELETE /api/resilience/model-cooldowns) so an operator can manually clear a Gemini TPM-wedge model lockout surfaced by this PR's cooldown-wait fixes, instead of waiting out the ceiling. Irreducible UI wiring at the existing health-page action chokepoint. Covered by the PR's own dashboard/resilience test additions.",
-    "_rebaseline_2026_07_22_8213_requestloggerdetail_unblock_ui": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: src/shared/components/RequestLoggerDetail.tsx 799->941 (+142, entirely this PR's diff — no other commit touched this file between the PR's merge-base and the release tip; crosses the general 800-line new-file cap so is frozen here for the first time). Adds a collapsible section header (open/expand-less toggle) plus per-log-entry unblock (`unblocking`/`cleared` state, isCombo503 detection) so the request-logger detail panel surfaces the same Gemini TPM cooldown-wait / model-lockout unblock action introduced by this PR at the individual-request level (mirrors the health-page bulk unblock action added in the same PR). Covered by the PR's own dashboard/resilience test additions.",
-    "_rebaseline_2026_07_22_fusion_8013_8098_antigravity": "Fusion of #8013 (backryun, catalog/IDE-CLI-split rewrite) + #8098 (nguyenha935, protocol-fidelity/fail-closed/credits/tool-cloaking): open-sse/services/usage/antigravity.ts NEW 802 (>cap 800, +2 — #8098 credits/tier usage service on #8013's profile-aware headers). Test growth (models-catalog-route 1605->1608, provider-models-route 1752->1757 from #8013 Gemini 3.6 catalog) tracked in testFrozen.",
-    "_rebaseline_2026_07_23_8127_grok_weekly_quota": "#8127 (@apoapostolov) own growth: src/sse/handlers/chat.ts 1861->1865 (+4) — weekly quota tracking for grok-web wires a quota-fetch hook at the existing dispatch chokepoint. Thin wiring mirroring adjacent provider-quota branches; not extractable. Covered by tests/unit/grok-quota-fetcher.test.ts.",
-    "_rebaseline_2026_07_23_8143_empty_catch_logging": "#8143 (@chirag127) own growth: open-sse/utils/stream.ts 2869->2887 (+18) — replacing empty catch blocks in the SSE stream subsystem with console.debug logging (Rule #6 silent-swallow fix, issues #8138-#8142). Cohesive logging additions at the existing catch chokepoints, not extractable; frozen at new size. Covered by tests/unit/stream-handler-catch-logging-8143.test.ts.",
-    "_rebaseline_2026_07_23_8219_cache_ttl_settings_sidebar": "#8219 (@oyi77) own growth: sections.ts 806->813 (+7) — configurable model-catalog cache-TTL settings adds a new sidebar nav entry + its visibility wiring. Sidebar item array is data, not extractable logic; frozen at new size.",
-    "_rebaseline_2026_07_23_8247_8248_model_unhealthy": "#8247+#8248 own growth: accountFallback.ts 1940->1941 (+1, irreducible import statement only — the substantive #8248 DEGRADED-pattern classifier was extracted into open-sse/config/errorConfig.ts, which has ample headroom, instead of growing this frozen file; #8247's fix is a single existing-line condition change, net zero lines). Scoping the credits-exhausted 403/429 branch to isCompatibleProvider() (per-model-quota openai/anthropic-compatible-* nicknames) so it stays model-scoped instead of terminalling the whole connection, and classifying NVIDIA NIM 'Function ... DEGRADED' 400 bodies as model-access-denied instead of a raw passthrough 400. Covered by tests/unit/8247-accountfallback-model-unhealthy.test.ts and tests/unit/8248-accountfallback-nvidia-degraded.test.ts.",
-    "_rebaseline_2026_07_23_8252_combo_400_advance": "#8252 (@RaviTharuma) own growth: accountFallback.ts 1932->1940 (+8) + combo.ts 3604->3630 (+26) — advance combo on model-scoped 400s wrapped as invalid/Bad-Request. Irreducible wiring at existing account-fallback + combo dispatch chokepoints. Covered by combo-model-scoped-400-advance.test.ts.",
-    "_rebaseline_2026_07_23_8266_alibaba_media": "#8266 (@backryun) own growth: imageRegistry.ts 821->979 (+158) — Alibaba-family media models (Qwen image/video, Bailian, Wan) added to the image/video registry. Registry model data, not extractable logic; frozen at new size.",
-    "_rebaseline_2026_07_24_8388_compression_detail_persist": "#8388 (compression engine DETAIL settings — Headroom/session-dedup/CCR — dropped on save) own growth: src/lib/db/compression.ts 866->872 (+6 = irreducible call-site wiring at the existing getCompressionSettings/updateCompressionSettings chokepoint: one import line, one `...buildDetailConfigDefaults()` spread in the seed config, and one `case \"sessionDedup\": case \"ccr\": applyDetailConfigUpdate(config, key, parsed); break;` load-switch case, mirroring the existing headroom/#8056 case immediately above it). The actual normalizer logic (normalizeSessionDedupConfig/normalizeCcrConfig, matching SESSION_DEDUP_SCHEMA/CCR_SCHEMA bounds) was EXTRACTED into a new leaf src/lib/db/compressionDetailNormalizers.ts (well under cap) so this frozen file only carries the minimal dispatch wiring. Covered by tests/unit/8388-compression-detail-persist.test.ts (schema-accept + full DB save->reload round-trip for both new sub-objects, plus a no-regression assertion on the existing headroom round-trip).",
-    "_rebaseline_2026_07_24_responses_toolcalls_log_summary": "hartmark, fix/responses-tool-calls-log-summary own growth: open-sse/translator/response/openai-responses.ts 1163->1174 (+11). closeToolCall() now also writes the completed tool call into the shared state.toolCalls Map (already populated by the openai-to-claude / claude-to-openai / gemini-to-openai response translators) so stream.ts's completion-log summary builder (which reads state.toolCalls, not this translator's own funcCallIds/funcNames/funcArgsBuf bookkeeping) reports finish_reason \"tool_calls\" and message.tool_calls for openai->openai-responses translated streams instead of always logging \"stop\" with no tool_calls — the actual client-facing SSE events were already correct; only the persisted call-log summary was wrong. Irreducible call-site addition at the existing tool-call-close chokepoint. Covered by the new regression test in tests/unit/translator-resp-openai-responses.test.ts.",
-    "_rebaseline_2026_07_25_8476_combo_input_bound_homogeneous_scope": "PR #8476 (herjarsa, fix/8375-8459-combo-image-fixes, #8375) own growth: open-sse/services/combo.ts 3642->3679 (+37 net: +29 the PR's own isInputBoundFailure short-circuit for deterministic context_length_exceeded/context_window_exceeded failures, +8 a /green-prs pre-merge fix scoping that short-circuit to homogeneous remainders only — the shipped code fired unconditionally on ANY target, regressing the intentional heterogeneous-combo fallback #6637/isContextOverflow400 protects, exactly as flagged by this PR's own review evidence but never actually implemented in the branch). The fix compares orderedTargets[i+1..] modelStr against the failing target's modelStr at the existing executeTarget dispatch chokepoint (mirrors the sameProviderNext precedent a few lines below) — irreducible call-site wiring, not extractable without hiding the dispatch boundary. Covered by tests/unit/combo-input-bound-failure-8375.test.ts (homogeneous pool still short-circuits) and the new tests/unit/combo-input-bound-heterogeneous-8375.test.ts (heterogeneous combo now correctly falls through to the larger-context target).",
-    "_rebaseline_2026_07_25_adobe_firefly_reference_images": "Follow-up to #8006: storage upload + referenceBlobs for image/video and /v1/images/edits dispatch. adobeFireflyClient.ts 1958->2317 (+upload helpers, extract sources, resolve blob ids). Note: 2317 not 2316 — check-file-size.mjs counts LOC via split(\"\\n\").length (counts the trailing-newline empty element), which is 1 higher than `wc -l` on a file ending in \\n; the PR's original entry (2316) was measured with wc -l and undercounted by 1 against the actual gate.",
-    "_rebaseline_pr1043_minimax_tts": "Upstream port decolua/9router#1043 (toanalien) own growth: audioSpeech.ts 965->1061 (+96). Adds MiniMax T2A v2 TTS dispatch (handleMinimaxSpeech + hexToBytes helper) — provider entry was already in audioRegistry (format: minimax-tts) but no handler existed, falling through to the OpenAI-compatible default that fails (T2A has custom shape + hex-encoded audio + base_resp envelope). New branch sits next to the other inline provider branches (xiaomi-mimo, coqui, tortoise, aws-polly) — extracting would just create indirection. Covered by tests/unit/minimax-tts-1043.test.ts (3 tests, GREEN: success, base_resp error, invalid-hex).",
-    "_rebaseline_pr4592_exclude_exhausted_auto": "Reconcile #4592 already-merged growth: combo.ts 2991->3036 (+45, terminal-status quota-cutoff exclusion in buildAutoCandidates + opt-in gate). Fast-gate PR->release does not run check:file-size.",
-    "open-sse/executors/antigravity.ts": 1528,
-    "open-sse/executors/base.ts": 1640,
-    "open-sse/executors/chatgpt-web.ts": 3241,
-    "open-sse/executors/codex.ts": 1562,
-    "open-sse/executors/cursor.ts": 1563,
-    "open-sse/executors/deepseek-web.ts": 1148,
-    "open-sse/executors/grok-web.ts": 1044,
-    "open-sse/executors/muse-spark-web.ts": 1405,
-    "open-sse/handlers/chatCore.ts": 5034,
-    "open-sse/handlers/imageGeneration.ts": 3101,
-    "open-sse/handlers/responseSanitizer.ts": 1128,
-    "open-sse/handlers/search.ts": 1536,
-    "open-sse/handlers/videoGeneration.ts": 1063,
-    "open-sse/mcp-server/schemas/tools.ts": 1553,
-    "open-sse/mcp-server/server.ts": 1448,
-    "open-sse/mcp-server/tools/advancedTools.ts": 1120,
-    "open-sse/services/accountFallback.ts": 1978,
-    "open-sse/services/adobeFireflyClient.ts": 2385,
-    "open-sse/services/claudeCodeCompatible.ts": 1202,
-    "open-sse/services/combo.ts": 3648,
-    "open-sse/services/compression/strategySelector.ts": 1060,
-    "open-sse/services/rateLimitManager.ts": 1167,
-    "open-sse/translator/response/openai-responses.ts": 1204,
-    "open-sse/utils/cursorAgentProtobuf.ts": 1505,
-    "open-sse/utils/stream.ts": 2889,
-    "src/app/(dashboard)/dashboard/HomePageClient.tsx": 1388,
-    "src/app/(dashboard)/dashboard/analytics/ComboHealthTab.tsx": 1031,
-    "src/app/(dashboard)/dashboard/api-manager/ApiManagerPageClient.tsx": 3117,
-    "src/app/(dashboard)/dashboard/cache/media/MediaPageClient.tsx": 1067,
-    "src/app/(dashboard)/dashboard/combos/page.tsx": 4703,
-    "src/app/(dashboard)/dashboard/costs/CostOverviewTab.tsx": 1283,
-    "src/app/(dashboard)/dashboard/costs/quota-share/components/PoolWizard.tsx": 1022,
-    "src/app/(dashboard)/dashboard/endpoint/EndpointPageClient.tsx": 2615,
-    "src/app/(dashboard)/dashboard/health/page.tsx": 1165,
-    "src/app/(dashboard)/dashboard/providers/[id]/components/modals/EditConnectionModal.tsx": 1324,
-    "src/app/(dashboard)/dashboard/providers/page.tsx": 1944,
-    "src/app/(dashboard)/dashboard/runtime/RuntimePageClient.tsx": 1201,
-    "src/app/(dashboard)/dashboard/settings/components/PricingTab.tsx": 1019,
-    "src/app/(dashboard)/dashboard/settings/components/ProxyRegistryManager.tsx": 1470,
-    "src/app/(dashboard)/dashboard/settings/components/ResilienceTab.tsx": 1123,
-    "src/app/(dashboard)/dashboard/settings/components/RoutingTab.tsx": 1629,
-    "src/app/(dashboard)/dashboard/settings/components/SystemStorageTab.tsx": 1573,
-    "src/app/(dashboard)/dashboard/usage/components/BudgetTab.tsx": 1028,
-    "src/app/(dashboard)/dashboard/usage/components/EvalsTab.tsx": 2148,
-    "src/app/(dashboard)/dashboard/usage/components/ProviderLimits/index.tsx": 1119,
-    "src/app/api/providers/[id]/models/route.ts": 2361,
-    "src/app/api/v1/models/catalog.ts": 1590,
-    "src/lib/db/apiKeys.ts": 1529,
-    "src/lib/db/core.ts": 1639,
-    "src/lib/db/migrationRunner.ts": 1094,
-    "src/lib/db/models.ts": 1097,
-    "src/lib/db/providers.ts": 1034,
-    "src/lib/memory/retrieval.ts": 1073,
-    "src/lib/tailscaleTunnel.ts": 1202,
-    "src/lib/usage/providerLimits.ts": 1013,
-    "src/shared/components/OAuthModal.tsx": 1134,
-    "src/shared/components/RequestLoggerV2.tsx": 1629,
-    "src/shared/components/analytics/charts.tsx": 1035,
-    "src/shared/services/cliRuntime.ts": 1122,
-    "src/sse/handlers/chat.ts": 1904,
-    "src/sse/services/auth.ts": 2520,
-    "tests/unit/account-fallback-service.test.ts": 1572,
-    "tests/unit/provider-validation-specialty.test.ts": 2985,
-    "open-sse/executors/hyperagent.ts": 1026,
-    "src/lib/tokenHealthCheck.ts": 1053,
-    "open-sse/executors/default.ts": 1042,
-    "open-sse/executors/kiro.ts": 1069,
-    "open-sse/translator/request/openai-to-kiro.ts": 1057,
-    "open-sse/utils/sseHeartbeat.ts": 149
-  },
+  "_rebaseline_2026_08_02_9242_token_health_transient": "PR #9242 (fix/refresh-circuit-transient): src/lib/tokenHealthCheck.ts 1021 (new file, above cap 1000). The file consolidates token-refresh health checking logic that was previously scattered across auth.ts and tokenRefresh.ts. Cohesive single-responsibility module for refresh circuit state management; not extractable without splitting the refresh state machine. Covered by tests/unit/tokenHealthCheck-transient.test.ts.",
  "_rebaseline_2026_07_27_v3849_train2": "Merge-train 2 (7 PRs) — owner-approved 2026-07-27. Single entry: chatCore.ts 4955->5006 (#8595, Responses multi-turn image compaction before the context hard-reject). Genuine irreducible growth at the existing compaction chokepoint in handleChatCore — the PR adds a last-resort retry against the concrete budget plus the estimateFinalInputTokens helper, both wired at the pre-existing call site rather than a new branch. Covered by tests/unit/8560-responses-image-compaction.test.ts (4 tests).",
  "_rebaseline_2026_07_27_v3849_train3": "Merge-train 3 (13 PRs) — owner-approved 2026-07-27. Both entries are genuine irreducible growth at existing chokepoints, not new branches: src/lib/db/apiKeys.ts 1518->1529 (#8805 cx/* ≡ codex/* API-key model permissions); open-sse/handlers/chatCore.ts 5006->5020 (#8806 real response payload into plugin onResponse hooks). Covered by tests/unit/db-apiKeys-crud.test.ts (4 new cases) and the two plugin-hook test files updated in #8806 respectively.",
  "_rebaseline_2026_07_28_8842_antigravity_projectid_refresh": "PR #8842 (fix/antigravity-projectid-refresh) own growth: open-sse/executors/antigravity.ts 1493->1528 (+35 = projectId discovery in refreshCredentials: import ensureAntigravityProjectAssigned + trim projectId + call ensureAntigravityProjectAssigned with 8s timeout + persistDiscoveredAntigravityProjectId + log success/failure). Irreducible wiring at the existing credential-refresh chokepoint. Covered by tests/unit/executor-antigravity.test.ts (4 new test cases).",
@@ -418,146 +419,15 @@
  "_rebaseline_2026_07_28_8860_tokenrefresh_projectid": "PR #8860 (fix/antigravity-projectid-centralized) own test growth: tests/unit/token-refresh-service.test.ts 1311->1378 (+67 = 4 cases covering projectId discovery on the tokenRefresh.ts path — the Dashboard/health-check refresh route, which #8842 did not reach since that fixed the executor path). Covered by the same file.",
  "_rebaseline_2026_07_28_8861_xiaomi_token_plan": "PR #8861 (feat/xiaomi-token-plan-protocol-selector) own growth: EditConnectionModal.tsx 1283->1316 (+33 = the per-connection API-protocol selector field) and open-sse/executors/base.ts 1540->1562 (+22 = alternate-format resolution at the existing buildUrl/headers chokepoint). Both are irreducible wiring at existing call sites.",
  "_rebaseline_2026_07_28_8863_firefly_detail_level": "PR #8863 (fix/adobe-firefly-gpt-detail-level-max) own growth: adobeFireflyClient.ts 2317->2322 (+5 = gpt-image detailLevel defaulting to maximal at the existing payload-build site). Covered by tests/unit/adobe-firefly.test.ts.",
-  "_rebaseline_2026_07_29_8281_home_quickstart_prefetch": "Release v3.8.49 base-red fix (no PR — captain sweep): src/app/(dashboard)/dashboard/HomePageClient.tsx 1377->1381 (+4). #8292 added prefetch={false} to the sidebar but left /home's five quick-start Links prefetching, so first paint still fired 12 speculative RSC requests — caught by navigation.spec.ts only after the e2e helper bug (APP_ROUTE_PATTERN missing /home) was repaired in the same cycle. Growth is the five prefetch attributes; it was offset first by extracting the repeated className literals (INLINE_LINK x4, DOCS_LINK x1), which collapsed five wrapped <Link> blocks back to one line each — a naive fix measured 1391. Guard: tests/unit/sidebar-prefetch-policy-8281.test.ts.",
-  "_rebaseline_2026_08_02_v3850_agentrouter_responses": "Release v3.8.50 AgentRouter/Codex compatibility reconciliation. open-sse/executors/base.ts 1562->1578: #9190 wires AgentRouter's selected Claude/OpenAI/Responses protocol through the existing executor URL, auth, identity-header and fingerprint chokepoints; the reusable alternate resolver remains outside base.ts. open-sse/utils/stream.ts 2887->2889: #9213 evaluates Responses ID and usage normalization independently so response.completed always receives finite usage.total_tokens instead of short-circuiting after an ID rewrite. tests/unit/chatcore-translation-paths.test.ts 2769->2776: #9191 updates the existing Claude-Code bridge assertions for the dynamic AgentRouter wire image. PR #9224 offsets its own chatCore growth by extracting the AgentRouter protocol decisions into chatCore/agentRouterProtocol.ts, leaving chatCore below its frozen ceiling. Covered by agentrouter executor/chatCore protocol tests, chatcore translation-path tests, and responses-commentary-passthrough tests.",
-  "_rebaseline_2026_08_08_v3850_base_drift_batch_9757": "Base drift on release/v3.8.50, not own growth: the 08-06..08-08 merge batches grew 12 already-frozen (or newly-landed) files without carrying their rebaselines — the dedicated rebaseline PR #9616 was closed as 'superseded' but its file-size entries never actually reached the base, and later merges (#8894 combos page, #9539 EditConnectionModal, #8895 models route, #9294/#9293 catalog, #9541 db/core, #8970 tokenHealthCheck, #8925 mcp schemas+server, #8890 accountFallback, #9467 chat.ts, #8931 openai-to-kiro, ProxyRegistryManager) kept growing them. All 12 values re-measured on THIS branch's tree (= pure tip + this PR's 1-line chat.ts fix, which adds zero lines). This PR's own source changes (chat.ts identifier restore, stream.ts format carve-out) do not grow any frozen file past these values.",
-  "_rebaseline_2026_08_08_migration_135_collision": "fix(db): resolve migration version 135 numbering collision — #9449's 135_connection_runtime_state.sql and #8908's 135_migrate_model_capability_max_token.sql both claimed version 135 (#9449 branched before #8908 merged and never got renumbered before landing on release/v3.8.50), which threw 'Migration version collision detected' the moment ANY code touched the database — a fresh install/deploy from this tip cannot even boot. Renumbered the later-landing file to 140 (next free slot) and added the matching isSchemaAlreadyApplied('140') retroactive guard, matching the established pattern already used for the prior 135/136 -> 137/138 renumber in the same file. Own growth: src/lib/db/migrationRunner.ts 1084->1094 (+10, the new case block) — irreducible, matches the existing per-case guard pattern exactly. Covered by tests/unit/migration-135-numbering-collision.test.ts (2/2), confirmed failing (reproducing the exact live crash) against the pre-fix colliding filenames, passing after.",
-  "_rebaseline_2026_08_02_9259_rolling_rpm": "PR #9259 (issue #8733) own growth: open-sse/services/rateLimitManager.ts baseline 1060->1167 (+107; final source 1153). The existing withRateLimit chokepoint now composes process-local rolling RPM leases with Bottleneck admission, releases pre-dispatch leases on queue timeout/abort/connection disable, preserves caller abort reasons, and wires 429/header state into the extracted rollingRpmGate.ts. The remaining growth is irreducible lifecycle wiring at the dispatch boundary plus the real watchdog test hooks needed to verify queued-wedge recovery; moving it further would obscure lease ownership and Bottleneck cleanup. Covered by the focused rate-limit manager/sliding-window suite (33/33); distributed multi-instance coordination remains explicitly out of scope.",
-  "_rebaseline_2026_07_25_dario_upstream_proxy_selector": "PR #8523 (Dario embedded service): upstream-proxy mode selector replaces the binary CLIProxyAPI toggle with Native/CLIProxyAPI/Dario/Fallback + a fallback-backend picker. ProviderDetailPageClient.tsx 798->804 (+6, new hook fields threaded through to ConnectionsListPanel), ConnectionRow.tsx 942->958 (+16, the mode <select> + conditional fallback-backend <select> replacing a single pill button), useProviderConnections.ts 954->986 (+32, upstreamProxyMode/upstreamProxyFallbackBackend state + handleSetUpstreamProxyMode, handleToggleCliproxyapiMode kept as a thin backward-compat wrapper for the existing hook-shape test). All additive UI/state for the new modes — no unrelated refactor.",
-  "_rebaseline_2026_08_02_9242_token_health_transient": "PR #9242 (fix/refresh-circuit-transient): src/lib/tokenHealthCheck.ts 1021 (new file, above cap 1000). The file consolidates token-refresh health checking logic that was previously scattered across auth.ts and tokenRefresh.ts. Cohesive single-responsibility module for refresh circuit state management; not extractable without splitting the refresh state machine. Covered by tests/unit/tokenHealthCheck-transient.test.ts.",
  "_rebaseline_2026_07_28_8870_firefly_ref_cap_timeout": "PR #8870 (fix/adobe-firefly-gpt-ref-cap-timeout) own growth: adobeFireflyClient.ts 2322->2385 (+63 = gpt-image subject-ref hard cap at 2 + adaptive poll timeout budget (base 300s + 60s/ref, max 600s) + defensive .slice on referenceBlobs for gpt/nano/generic families). Fixes live 504s on multi-screenshot listing jobs (Featured Promo / Box Art) where 3–4+ subject refs stall colligo until the old 180s poll budget expires. Helpers adobeFireflyMaxImageRefs/adobeFireflyImageTimeoutMs live next to the existing payload/poll chokepoint (not extractable without splitting the wire recipe mid-PR). Covered by tests/unit/adobe-firefly.test.ts (ref-cap + timeout cases). Structural shrink tracked in #3501.",
+  "_rebaseline_2026_07_29_8281_home_quickstart_prefetch": "Release v3.8.49 base-red fix (no PR — captain sweep): src/app/(dashboard)/dashboard/HomePageClient.tsx 1377->1381 (+4). #8292 added prefetch={false} to the sidebar but left /home's five quick-start Links prefetching, so first paint still fired 12 speculative RSC requests — caught by navigation.spec.ts only after the e2e helper bug (APP_ROUTE_PATTERN missing /home) was repaired in the same cycle. Growth is the five prefetch attributes; it was offset first by extracting the repeated className literals (INLINE_LINK x4, DOCS_LINK x1), which collapsed five wrapped <Link> blocks back to one line each — a naive fix measured 1391. Guard: tests/unit/sidebar-prefetch-policy-8281.test.ts.",
  "_rebaseline_2026_08_01_8964_xai_agent_tools": "PR #8964 own growth: chatCore.ts 5020->5034 at the existing native-passthrough chokepoint. Adds xAI Agent Tools passthrough for /v1/responses (xai/xai-oauth/xao): resolve nativeXaiResponsesPassthrough, force openai-responses targetFormat, stamp body marker, and OR into the existing nativeCodexPassthrough sites (web-search bypass + requestEndpointPath). Leaf logic in passthroughHelpers, responsesEndpoint, targetFormat, xai executor, responseSanitizer, usageTracking. Cohesive wiring at the Codex passthrough boundary.",
  "_rebaseline_2026_08_01_8964_response_sanitizer": "PR #8964 own growth: responseSanitizer.ts 1115->1128. Keep cost_in_usd_ticks / server_side_tool_usage(_details) through sanitizeResponsesApiResponse allowlists so native xAI tool responses retain usage.",
+  "_rebaseline_2026_08_02_v3850_agentrouter_responses": "Release v3.8.50 AgentRouter/Codex compatibility reconciliation. open-sse/executors/base.ts 1562->1578: #9190 wires AgentRouter's selected Claude/OpenAI/Responses protocol through the existing executor URL, auth, identity-header and fingerprint chokepoints; the reusable alternate resolver remains outside base.ts. open-sse/utils/stream.ts 2887->2889: #9213 evaluates Responses ID and usage normalization independently so response.completed always receives finite usage.total_tokens instead of short-circuiting after an ID rewrite. tests/unit/chatcore-translation-paths.test.ts 2769->2776: #9191 updates the existing Claude-Code bridge assertions for the dynamic AgentRouter wire image. PR #9224 offsets its own chatCore growth by extracting the AgentRouter protocol decisions into chatCore/agentRouterProtocol.ts, leaving chatCore below its frozen ceiling. Covered by agentrouter executor/chatCore protocol tests, chatcore translation-path tests, and responses-commentary-passthrough tests.",
  "_rebaseline_2026_08_05_9323_agentrouter_waf_retry": "PR #9323 (fix(agentrouter): retry on 400 content-blocked + burst guard) own growth: open-sse/executors/base.ts 1578->1623 (check-file-size.mjs conta via split(\"\\n\").length; wc -l ve 1622). As +45 linhas sao o WAF_RETRY_CONFIG + o burst guard via gateOutboundRequest() para o WAF do agentrouter.org, com comentarios explicando o porque de cada mitigacao e cobertos por tests/unit/base-executor-waf-retry.test.ts e tests/unit/wafRateLimit.test.ts. Crescimento funcional legitimo, nao inchaco.",
  "_rebaseline_2026_08_05_9529_own_growth": "PR #9529 own growth (base release/v3.8.50 medida EXATAMENTE nos frozen antigos, entao o modo base-relative #8522 nao cobre): open-sse/services/rateLimitManager.ts 1060->1105 (+45: helper applyLimiterSettings() que re-arma o heartbeat do reservoir apos updateSettings — fix do bug Bottleneck 2.19.5 que congelava a fila weighted; TDD em tests/unit/ratelimit-reservoir-refresh.test.ts); tests/integration/chat-pipeline.test.ts 1592->1598 (+6: User-Agent do codex derivado de getCodexClientVersion() em vez de literal pinado — teste-irmao alinhado ao contrato); tests/unit/provider-validation-specialty.test.ts 2980->2985 (+5: cobertura NOVA claude-web 429 -> valid:false, alinhamento #9406); open-sse/translator/response/openai-responses.ts 1174->1204 (+30: buildResponsesReasoningSummaryDelta MOVIDA do leaf pureHelpers.ts para o host — a funcao do #9500 muta stream state e violava o contrato do leaf puro; o LOC total do par host+leaf nao cresceu, o pureHelpers encolheu o mesmo tanto). Crescimento por fix de producao + cobertura adicional + realocacao arquitetural, nao inchaco.",
  "_rebaseline_2026_08_06_v3850_inherited_drift_reconcile": "Reconciliacao 2026-08-06 do drift ACUMULADO da release/v3.8.50 apos o lote de merges de 08-05/06: 13 arquivos acima do frozen no tip puro 8180b49ce1 (medidos pelo proprio gate). O modo PR base-relative (#8522) deixa PRs inocentes passarem, e os rebaselines individuais dos PRs se perderam nas resolucoes sucessivas de conflito deste hot-file — o drift so aparece no modo absoluto (nightly/local). Crescimentos funcionais dos PRs mergeados: #9024 topology click-nav src/app/(dashboard)/dashboard/HomePageClient.tsx; #9324 OpenRouter enrich src/app/(dashboard)/dashboard/providers/page.tsx; #9329 quota card ordering src/app/(dashboard)/dashboard/usage/components/ProviderLimits/index.tsx; #9193 context-window suffixes src/sse/handlers/chat.ts; #9332 nested Claude server tool ids open-sse/executors/base.ts; #9228 strip orphaned tool outputs open-sse/executors/codex.ts; #9236 nvidia tool-name normalize open-sse/executors/default.ts; #9314 nested tool_call validation open-sse/executors/kiro.ts; #9260 caller identity REST hops open-sse/mcp-server/server.ts; #8934 cache breakpoints tests tests/unit/chatcore-translation-paths.test.ts; #9193 suffix tests tests/unit/combo-routing-engine.test.ts; #9196 reasoning-on-tool-finish tests tests/unit/sse-auth.test.ts; #9163 GPT-5.6 Max reasoning tests tests/unit/translator-openai-to-kiro.test.ts. default.ts e kiro.ts entram no frozen (estavam sem entrada, acima do cap 1000). Atualizacao pos-medicao (a base avancou durante o ciclo do PR): src/sse/handlers/chat.ts 1857->1877 (#9184 affinity EOF evict) e open-sse/executors/default.ts 1027->1042 (#9005 Kimi K3 tool-name backfill).",
  "_rebaseline_2026_08_06b_v3850_sweepreds_drift": "Segunda reconciliacao de 2026-08-06 (/sweep-reds sobre o tip puro 2ddbbc61a6): 3 arquivos voltaram a passar do frozen apos os merges do mesmo dia, com atribuicao 1:1 por commit. (1) src/app/(dashboard)/dashboard/providers/page.tsx 1928->1944 e (2) open-sse/executors/base.ts 1635->1640, ambos do #9515 (feat(radar): flag-gated signed free-model catalog overlay, commit e7f6b1d130) — o overlay do Radar entra por wiring nos chokepoints ja existentes (a resolucao/verificacao do catalogo assinado mora fora destes dois arquivos); +16 e +5 linhas liquidas nao sao extraiveis sem inventar um leaf por callsite. (3) open-sse/services/accountFallback.ts 1966->1972 do #8704 (commit c4527f97bd), +6 linhas de dados em CREDITS_EXHAUSTED_SIGNALS ('has been exhausted', fixes #8631). src/sse/handlers/chat.ts 1880>1877 tambem estava violando e NAO entra aqui de proposito: e drenado por encolhimento na PR #9598, sem rebaseline. Crescimento proprio DESTA PR: src/lib/db/migrationRunner.ts 1077->1084 (+7) — o guard retroativo em isSchemaAlreadyApplied para os arquivos renumerados 137/138, exigido pela propria mensagem de erro de colisao do runner (ambas as migracoes sao ALTER TABLE ADD COLUMN puro, nao idempotente). Dois `case` + dois `return hasColumn(...)` + 3 linhas de comentario dentro do switch existente; nao extraivel.",
  "_rebaseline_2026_08_06c_v3850_sweepreds_pr2": "Segunda PR do /sweep-reds (fix/release-v3.8.50-basereds-0806b): tests/unit/provider-models-route.test.ts 1784->1787 (medido pelo gate, que conta split(\"\\n\").length) (+2 apos compressao de comentarios) — alinhamento de contrato forcado por dois merges do dia: #9106 tornou gemini-3.1-pro-high user-callable (a entry do alias entra na lista esperada do teste de discovery-retry, +1 linha de dado + 1 de comentario) e ff012ff420 adicionou onboardUser como bootstrap hop (exclusao no mock, ja comprimida a 1 linha). Nao ha o que encolher sem apagar o comentario que explica o porque.",
-  "_rebaseline_2026_08_07_v3850_sweepreds_pr2_toolnamemap": "tests/unit/translator-openai-to-gemini.test.ts 1616->1619 (+3). O frozen estava EXATAMENTE no tamanho da base, entao qualquer linha nova viola. #9568 (c9a3361e5a) fez buildChangedToolNameMap emitir entradas IDENTIDADE (o Gemini minusculiza nomes de tool nas respostas, entao o tradutor de resposta precisa da chave para mapear de volta), o que passou a incluir `_toolNameMap` no envelope Antigravity de qualquer request com tools. As 3 linhas sao: a chave nova na lista esperada de Object.keys, 1 comentario explicando POR QUE ela aparece (sem ele o proximo leitor tenta remove-la de novo) e 1 assert do CONTEUDO do map — presenca de chave sozinha nao provaria a entrada identidade, que e justamente o comportamento novo. Nao ha o que extrair: e alinhamento de contrato dentro de um teste existente.",
-  "_rebaseline_2026_06_22_4644_deepseek_web_tools": "PR #4644 (BugsBag/robust deepseek-web tool-call parsing): open-sse/executors/deepseek-web.ts 1117->1125 (+8). The new agentic tool-call path emits surrounding text + reasoning before tool_calls and swaps to the dedicated deepseekWebTools.ts parser; the +8 lines are cohesive wiring at the existing transformSSE chokepoint (the parser itself lives in the new deepseekWebTools.ts file, already under cap). The PR's own fast-gate (PR->release) does not run check:file-size, so this surfaced only at release reconcile. Covered by tests/unit/deepseek-web-tools-variants.test.ts + deepseek-web-tools-execute.test.ts.",
-  "_rebaseline_2026_06_23_4712_deepseek_web_tool_results": "PR for #4712 (deepseek-web drops role:tool): open-sse/executors/deepseek-web.ts 1125->1148 (+23). messagesToPrompt() now folds role:\\\"tool\\\" results into the single-prompt transcript (recovering the tool name from the preceding assistant tool_calls by tool_call_id) instead of silently dropping them; the lines are cohesive wiring inside the existing function. Covered by tests/unit/deepseek-web-tool-result-prompt-4712.test.ts.",
-  "_rebaseline_2026_06_24_headroom_strategy": "Headroom-aware connection selection (dario technique): combo.ts 3168->3180 (+12 = a new `else if (strategy === \\\"headroom\\\")` dispatch branch in handleComboChat that delegates to orderTargetsByHeadroom + its log line, plus the import). The actual logic lives OUT of the god-file: the pure ranker rankByHeadroom/computeHeadroom is the new leaf open-sse/services/combo/headroomRanking.ts (91 LOC, <cap) and the async orderer orderTargetsByHeadroom is appended to the existing open-sse/services/combo/quotaStrategies.ts (<cap) next to its sibling reset-aware/reset-window orderers (reuses their connection-expansion machinery). headroom = 1 - max(util_5h, util_7d) from getSaturation (src/lib/quota/saturationSignals.ts), prefers the connection with the most free capacity. Only the dispatch wiring is irreducible at the existing combo strategy chokepoint (mirrors the reset-aware/reset-window/context-optimized branches); not extractable without hiding the call site. fill-first stays default; all existing strategies untouched. Covered by tests/unit/combo-headroom-ranking.test.ts (pure helper) + tests/unit/combo-headroom-strategy.test.ts (orderer, saturation injected). Structural shrink of combo.ts tracked in #3501.",
-  "_rebaseline_2026_06_24_quota_share_strategy": "Dedicated quota-share strategy (Phase 3 #9): combo.ts 3180->3190 (+10 = one new `else if (strategy === \\\"quota-share\\\")` dispatch branch in handleComboChat that delegates 100% to selectQuotaShareTarget + its log line, plus the import). All the new logic lives OUT of the god-file in two new leaves under open-sse/services/combo/: quotaShareInflight.ts (in-flight counter with TTL/lease, ~150 LOC <cap) and quotaShareStrategy.ts (per-model bucket gating via isBucketSaturated + DRR proportional to weight + P2C over in-flight, ~240 LOC <cap). Only the dispatch wiring is irreducible at the existing combo strategy chokepoint (mirrors the headroom/reset-aware/reset-window/context-optimized branches); not extractable without hiding the call site. ZERO existing strategy cases were modified — only this branch was added, and the qtSd/ combos switched from fill-first to quota-share in src/lib/quota/quotaCombos.ts. Covered by tests/unit/quota-share-strategy.test.ts (gating, DRR fairness, P2C in-flight, fail-open, activation). Structural shrink of combo.ts tracked in #3501.",
-  "_rebaseline_2026_06_24_task_aware_routing": "Task-aware routing strategy (port PR #2045, OmniRoute #4945): combo.ts 3190->3225 (+35) = one new `else if (strategy === \\\"task-aware\\\")` dispatch branch delegating 100% to selectTaskAwareTarget + its imports/log lines. All scoring/classification logic lives OUT of the god-file in the new leaf open-sse/services/taskAwareRouting.ts (553 LOC <cap). Only the dispatch wiring is irreducible at the existing combo strategy chokepoint (mirrors quota-share/headroom/reset-aware branches). ZERO existing strategy cases modified. Covered by tests/unit/combo-task-aware.test.ts (35 tests). Structural shrink of combo.ts tracked in #3501.",
-  "_rebaseline_2026_06_26_fidelity_gate_extraction": "Milestone-B fidelity-gate wiring residual: bodyToText+gateAdvance extracted to fidelityGateStep.ts (889->854, -35), but the StackOptions.fidelityGate field, the `const fidelityGate` reads at the two stacked-loop dispatch chokepoints, and the import of FidelityGateConfig are irreducible wiring that cannot leave strategySelector without an architectural refactor of the pre-existing stacked pipeline. Net: 889->854 (+6 vs the pre-Milestone-B frozen 848). Covered by tests/unit/compression/*.test.ts (940 pass).",
-  "_rebaseline_2026_06_27_5193_5203_antigravity_oauthmodal": "Antigravity remote-login own growth: OAuthModal.tsx 960->969 (gate units). #5193 (+~4: remote paste instruction shown for all remote incl. Google + its rationale comment) and #5203 (+~5: handleManualSubmit credential-blob branch + button guard; submit logic extracted to oauthBlobSubmit.ts to minimize). Frozen set to the SUM so either merge order passes. Cohesive at the existing manual-submit chokepoint.",
-  "_rebaseline_2026_06_27_5193_antigravity_basered": "Base-red (pre-existing release drift, fast-gate PR->release skips check:file-size): accountFallback.ts 1773->1777 and src/app/api/providers/[id]/test/route.ts 924->940 were already over their frozen caps on release/v3.8.39 independent of any antigravity change. Owner chose to rebaseline (keep the documented issue-reference comments #1846/#1449/#347 etc.) rather than accept the contributor comment-stripping in #5200/#5198. Reverted #5200 to restore the comments; bumped these two frozen caps to the actual base sizes. No logic change.",
-  "_rebaseline_2026_06_28_5237_impersonation_ua_refresh": "PR #5237 (refresh impersonation UAs): grok-web.ts 1871->1873 (+2), muse-spark-web.ts 1284->1302 (+18), perplexity-web.ts 1013->1032 (+19). Net semantic change in each file is a single User-Agent constant (Chrome 147->149 for grok/muse; perplexity kept at Firefox 148 to stay matched with the firefox_148 TLS profile — the contributor's 152 bump was reverted to avoid a UA-vs-JA3 mismatch, #2459). The growth is Prettier reflow that lint-staged unavoidably applies to these grandfathered long-line files the moment they are touched; not extractable. src/sse/services/auth.ts 2336->2401 in the same reconcile is #5222's antigravity-LRU-retry growth that merged via --admin without a baseline bump.",
-  "_rebaseline_2026_06_28_5243_risk_gate_prepass": "PR #5243 (compression risk-gate pre-pass) own growth: open-sse/services/compression/strategySelector.ts 854->899 (+45). The three exported entry points (applyCompression/applyStackedCompression/applyStackedCompressionAsync) become thin wrappers over pure-extracted private bodies (runCompression/runStackedCompression/runStackedCompressionAsync) so the risk-gate mask->run->restore wrapper sits strictly OUTSIDE the per-step loop — a single universal integration point. The wrapper logic itself (resolveRiskGate/withRiskGate) lives in the new riskGate/strategyWrap.ts (<cap); the residual growth is the duplicated thin-wrapper signatures + the extracted bodies' dispatch boundary, guarded by a byte-identical parity test (riskGateIntegration). Default off (DEFAULT_COMPRESSION_CONFIG unchanged). Not extractable without hiding the dispatch boundary, mirroring prior compression rebaselines. Structural shrink tracked in #3501.",
-  "_rebaseline_2026_06_28_5275_correlation_id_extract": "Extraction of the safe CorrelationId subset of #5275 (hartmark) — request correlation id stored in call_logs (migration 109) and returned via the X-Correlation-Id response header, WITHOUT the combo/resilience or build/lazy-loading changes (those stay in #5275). Own growth: callLogs.ts 975->985 (correlation_id column on CallLogSummaryRow + read/map), usageHistory.ts 983->988 (correlationId metadata normalize), chat.ts 1575->1632 (withCorrelationId response wiring + combo-failure log carrying correlationId), chatHelpers.ts new 811 (withCorrelationId helper + reqId threading; was 791<cap pre-feature). Cohesive request/logging chokepoint wiring; structural shrink of chat.ts tracked in #3501.",
-  "_rebaseline_2026_06_29_4038_cas_guard": "PR (#4038) own growth: tokenRefresh.ts 2103->2181 (+78 = the compare-and-swap guard on the refresh persist — runWithCasGuard/getActiveCasGuard AsyncLocalStorage pair mirroring runWithOnPersist, casGuardShouldSkipPersist that rereads the row right before persisting and skips the write when a concurrent writer already rotated the refresh_token past the one presented, plus getCasGuardStats counters). Fixes the sibling-rotation-revert → token-family-revocation storm. Gated behind an active guard (opt-in; no guard => byte-identical). Wiring lives at the two persist chokepoints inside getAccessToken; the comparison reuses wasRefreshTokenRotated from refreshSerializer. Not extractable without splitting the refresh hot path.",
-  "_rebaseline_2026_06_29_5286_memoization": "PR #5286 own growth: strategySelector.ts 899->960 (+61 = the opt-in result-memoization branches in applyCompression/applyCompressionAsync — principal+determinism gate, makeMemoKey lookup/store with model+supportsVision folded into the key, recompute-with-memo-off). Default off (memoizeCompressionResults), so zero behavior change. The memo helpers live in the leaf resultMemo.ts (<cap); the chokepoint wiring here is not extractable. Structural shrink of this hot-path file tracked in #3501.",
-  "_rebaseline_2026_07_01_v3843_release_5609": "Rebaseline v3.8.43 (PR #5609 release reconciliation). DRIFT dos 109 commits do ciclo: 8 god-files existentes cresceram (ApiManagerPageClient 2983->3017, combos/page 4594->4608, AddApiKeyModal 868->869, providerPageHelpers 974->996, chat.ts 1635->1647, auth.ts 2401->2403, batchProcessor 828->915, combo.ts 3368->3387) + 2 novos acima do cap (huggingchat.ts 813, tests web-cookie-providers-new 827) + 4 test files cresceram. Modularizacao deferida (blast-radius mid-release); congelado no estado atual p/ o proximo ciclo ratchetar daqui.",
-  "_rebaseline_2026_07_02_5816_qoder": "PR #5816 (@AgentKiller45, qoder PAT via qodercli): qoderCli.ts 666->989, new-above-cap frozen (owner-approved baseline freeze). The growth is the legitimate PAT job-token exchange + quota parsing CLI transport (the pure-JS Cosy path 500'd on every PAT request); extracting the spawn/parse helpers now would just add indirection to a contributor PR mid-merge. Test frozen also raised for this PR's coverage growth: providers-page-utils.test.ts 1052->1092. Additionally clears an inherited base-red from the already-merged #5933 (codex json_schema->text.format): translator-openai-responses-req.test.ts 1097->1172 (+75 regression tests, no offending branch left). All remain frozen (cannot grow further); release captain's rebaseline-at-release supersedes.",
-  "_rebaseline_2026_07_09_6126_clinepass_dual_auth": "PR #6126 (@hajilok, dual-auth ClinePass) own growth: tokenRefresh.ts 2181->2182 (+1 = a single `case \\\"clinepass\\\":` fallthrough label added to the existing `case \\\"cline\\\":` in _getAccessTokenInternal's provider switch, so clinepass token refresh dispatches to the already-shared refreshClineToken() instead of silently falling through to the generic OAuth refresh). Irreducible 1-line switch-case wiring at the existing chokepoint; the header-building logic for the same feature was extracted to a new leaf src/shared/utils/clineAuth.ts::buildClinepassHeaders() (well under cap) to avoid growing open-sse/executors/default.ts. Covered by tests/unit/clinepass-provider.test.ts.",
-  "_rebaseline_2026_07_09_6363_kiro_external_idp": "PR #6363 (@artickc, Kiro external IdP) own growth: tokenRefresh.ts 2182->2249 (+67 = the external_idp refresh branch inside refreshKiroToken — standard public-client OAuth2 refresh_token grant against the org IdP tokenEndpoint via buildExternalIdpRefreshParams/isExternalIdpAuthMethod from the new leaf open-sse/services/kiroExternalIdp.ts, with invalid_grant/invalid_client -> unrecoverable_refresh_error mapping). Cohesive addition at the existing refreshKiroToken chokepoint. Covered by tests/unit/kiro-external-idp.test.ts.",
-  "_rebaseline_2026_07_09_6587_kiro_api_key_auth": "PR #6587 (@strangersp) own growth for Kiro long-lived API-key auth, merged onto v3.8.47 tip: openai-to-kiro.ts 890->912 (+22, auth-header selection for API-key-vs-OAuth-token connections), providerLimits.ts 998->1000 (+2, API-key auth-type branch), translator-openai-to-kiro.test.ts 1234->1257 (+23), providers-page-utils.test.ts 1109->1107 (net -2 after merging with parallel release drift; connectionMatchesProviderCard api_key coverage added), provider-validation-specialty.test.ts 2856->2980 (+124 net after merge with parallel release drift; this PR also removed the file's `@typescript-eslint/no-explicit-any` eslint-suppression entry by fixing all `any` usages, adding typed replacements). Cohesive additive feature growth, well tested; not extractable without splitting the existing chokepoints mid-merge.",
-  "_rebaseline_2026_07_09_6678_routing_strategy_9router": "#6678 (SeaXen) — 9router-parity Routing Strategy settings card + per-provider/combo sticky-round-robin override. Own growth: ProviderDetailPageClient.tsx 784->786 (single ProviderAccountRoutingCard mount + import), auth.ts 2448->2458 (providerStrategies override resolution: fallbackStrategy/stickyRoundRobinLimit per-provider cascade in getProviderCredentials). Both additive, zero unrelated refactor; new UI/logic lives in new files (ProviderAccountRoutingCard.tsx, RoutingStrategyCard.tsx, rrState.ts::resolveComboStickyRoundRobinLimit). chat.ts value below reflects the current release tip (grown by other concurrent PRs, e.g. #6640), not this PR own change.",
-  "_rebaseline_2026_07_10_6318_omp_letta": "PR #6318 (@hamsa0x7, omp+letta CLI integrations) own growth: cliTools.ts (+53 = 2 registry entries incl. omp docsUrl) and cliRuntime.ts (+18 = runtime-detection wiring for the 2 new tools). Cohesive registry/wiring growth at the existing chokepoints; scope reduced from the original 5 tools (pi/codewhale/jcode shipped separately).",
-  "_rebaseline_2026_07_10_gcf_v3_2_decode": "PR #6838 own growth: new vendored file open-sse/services/compression/engines/headroom/gcf/decode_generic.ts frozen at 880 (> 800 cap). It is the vendored GCF generic-profile decoder (spec v3.2 nested flattening plus the prototype-pollution / hasOwnProperty hardening added in this PR's Gemini review). Kept as one file faithful to upstream gcf-typescript so re-vendoring stays a clean copy rather than a re-split each cycle (sibling generic.ts/scalar.ts stay < cap; extraction would also fragment the file's frozen eslint no-explicit-any suppressions). Round-trip + prototype-pollution regression coverage in tests/unit/compression/headroom-smartcrusher.test.ts. Frozen: only shrinks from here.",
-  "_rebaseline_2026_07_12_v3847_mergeprs_tail": "v3.8.47 /merge-prs tail (owner-approved): src/lib/localDb.ts NEW>800 (799->805, +6 re-exports countFreeProxies + recordFreeProxySyncErrors/clearFreeProxySyncErrors/getFreeProxySyncErrors + FreeProxySyncErrors type for #6909 free-pool relay-repair; re-export-only per Hard Rule #2, not extractable).",
-  "_rebaseline_2026_07_15_7070_combos_memo": "PR #7070 (perf/p1-memo) own growth: src/app/(dashboard)/dashboard/combos/page.tsx 4655->4656 (+1 = React.memo wrapping of ComboCard). Covered by tests/unit/ui/combos-page-smoke.test.tsx.",
-  "_rebaseline_2026_07_18_7399_xai_oauth_modal": "PR #7399 (xAI OAuth PKCE) own growth: OAuthModal.tsx 993->998 (+5 = provider entry + PKCE flow branch wiring at the existing provider-switch chokepoint; the provider logic itself lives in src/lib/oauth/providers/xai-oauth.ts, new leaf). Third irreducible wiring bump on this modal (969->989->993->998); structural shrink tracked in #3501.",
-  "_rebaseline_2026_07_19_6636_codex_session_json": "#6636 own growth: OAuthModal.tsx 998->1030 (gate units, split(\\\"\\\\n\\\").length incl. trailing newline; +32 = session-JSON paste branch for handleManualSubmit plus a shared submitCodexAccessToken() helper extracted from the pre-existing bare-JWT branch, mirroring the #5203 oauthBlobSubmit.ts extraction precedent; the normalizer logic itself lives in the new src/lib/oauth/utils/codexSessionImport.ts leaf module, not here). Fourth irreducible wiring bump on this modal (969->989->993->998->1030); structural shrink tracked in #3501.",
-  "_rebaseline_2026_07_19_7546_ghe_copilot_modal": "PR #7546 (GHE Copilot OAuth provider) own growth: OAuthModal.tsx 1030->1056 (gate units). Adds a gheUrl input state, routes ghe-copilot through the existing device-code branch, and threads gheUrl into the device-code request/poll extraData at the existing provider-switch chokepoints (+~24 lines, cohesive with the same pattern as #7399/#6636). The standalone GHE enterprise-URL config step JSX (originally +31 lines inline) was extracted to the new src/shared/components/oauthModal/GheConfigStep.tsx leaf component to minimize the bump; what remains is the irreducible provider-branch wiring. Fifth bump on this modal (969->989->993->998->1030->1056); structural shrink tracked in #3501.",
-  "_rebaseline_2026_07_19_7787_ic2_localdb_reexports": "PR #7787 (IC2 raw connections cache + lazy-decrypt) own growth: localDb.ts 805->807 (gate units, +2). localDb.ts is the re-export-only layer (hard rule #2 — no logic); the PR adds 4 new db/readCache re-exports (touchConnectionLastUsed, getCachedRawProviderConnections, getCachedProviderConnectionById, getCachedProviderNodes) required by existing barrel importers. Irreducible for a re-export list; frozen so it can only shrink.",
-  "_rebaseline_2026_07_20_7779_routingcombo_thread": "PR #7779 own growth: chatHelpers.ts 876->877 (+1, thread routingComboId into executeChatWithBreaker for compression-combo assignment). Frozen so it can only shrink.",
-  "_rebaseline_2026_07_20_7819_autocandidateoverrides_reexport": "PR for #7819 (Level 1+2: read-only auto/* candidate transparency + per-API-key exclusions) own growth: localDb.ts 807->808 (+1). Adds a single `export * from \\\"./db/autoCandidateOverrides\\\"` barrel re-export (hard rule #2 — no logic) for the new DB module backing per-apiKey candidate exclusions. Irreducible for a re-export list; frozen so it can only shrink.",
-  "_rebaseline_2026_07_21_8027_grok_cli_auth_json_paste": "PR #8027 (RaviTharuma, fix(grok-cli) #7610) own growth: OAuthModal.tsx 1080->1100 (gate units). Requires the full ~/.grok/auth.json (with refresh_token) on the paste-import path instead of a bare JWT, at the existing paste-token chokepoint (renamed tab label, updated instructions/placeholder, textarea for the auth.json blob, inline error surface). The validation logic itself (parseGrokCliPasteToken, previously an inline ~75-line function) was extracted to the new src/lib/oauth/utils/grokCliAuthJson.ts leaf module — mirroring the #6636/#7546 extraction precedent — so only the irreducible UI wiring remains here. Sixth bump on this modal (969->989->993->998->1030->1056->1100); structural shrink tracked in #3501.",
-  "_rebaseline_2026_07_21_8034_compression_exclusions_sidebar": "#8034 (compression exclusions dashboard tab) own growth: sections.ts 796->806 (+10, one new COMPRESSION_CONTEXT_GROUP sidebar item linking /dashboard/compression/exclusions). The file was already 796/800 before this PR (organic growth from prior sidebar entries), so a single new nav item pushed it 6 lines over cap. Freezing at 806 (cannot grow further); the sidebar item array is data, not extractable logic.",
-  "_rebaseline_2026_07_22_7936_namespace_roundtrip": "#7936 (@RCrushMe, Responses-Chat namespace round-trip identity seam) own growth: open-sse/translator/response/openai-responses.ts 1092->1125 (+33) and open-sse/utils/stream.ts 2814->2869 (+55) — threading the namespace-identity seam through the Responses↔Chat translation + stream paths so tool-call namespaces survive the round-trip. Cohesive translation/stream wiring at existing chokepoints, frozen at new size.",
-  "_rebaseline_2026_07_22_8010_codex_responses_engine": "PR #8010 (@JxnLexn) own growth: open-sse/mcp-server/schemas/tools.ts 1497->1505 (+8 = threading the new \\\"codex-responses\\\" literal into the compressionConfigureInput strategy/autoTriggerMode Zod enums and setCompressionEngineInput engine enum, mirroring the existing rtk/omniglyph enum entries; no new tool). open-sse/services/compression/strategySelector.ts 1043->1054 (+11 = one new `if (mode === \\\"codex-responses\\\")` dispatch branch in runCompression that delegates 100% to the new codexResponsesEngine.apply, mirroring the existing rtk single-mode dispatch, plus threading config.codexResponsesConfig.preserveToolNames into the shared adaptBodyForCompression call at the 3 existing call sites). src/lib/db/compression.ts (untracked, new-file cap 800) 794->845 (+51 = normalizeCodexResponsesConfig, mirroring the existing normalizeRtkConfig normalizer, plus registering \\\"codex-responses\\\" in the COMPRESSION_MODES/STACKED_PIPELINE_ENGINE_IDS/SINGLE_MODE_ENGINE sets and the getCompressionSettings load/save switch) — added to the baseline at its current size. All three are cohesive dispatch/normalizer wiring at existing chokepoints (mirroring the prior compression-mode rebaselines #6534/#6556), not extractable without hiding the mode-dispatch boundary. Covered by tests/unit/compression/codex-responses.test.ts (6) + omniglyph-registries.test.ts/types.test.ts (22, updated for the new mode).",
-  "_rebaseline_2026_07_22_8034_compression_exclusions_persistence": "#8034 (compression exclusions) own growth: src/lib/db/compression.ts 845->850 (+5 = threading the new compressionExclusions field through the existing getCompressionSettings/saveCompressionSettings load/save switch over the shared key_value compression namespace — no new table, no raw SQL). Mirrors the prior compression-field rebaselines (#8010 codex-responses normalizer at the same chokepoint); the load/save switch is a single dispatch boundary, not extractable without hiding it. Covered by the PR's 8 node:test + 3 vitest cases.",
-  "_rebaseline_2026_07_22_8050_model_lockout_exact_family": "#8050 (@AndrianBalanescu) own growth: accountFallback.ts 1864->1892 (+28) — exact-vs-family model-lockout scoping (getModelLockKey/isModelLocked/clearModelLock/getModelLockoutInfo) so an Antigravity 404 for one bare model no longer hijacks the whole family cooldown. Cohesive lockout logic; frozen at new size.",
-  "_rebaseline_2026_07_22_8081_reasoning_placeholder_guard": "#8081 (@Dingding-leo) own growth: openai-responses.ts 1125->1137 (+12) restructuring the reasoning-placeholder guard so it skips only the empty content block and still emits finish_reason/tool_calls in the same chunk. Cohesive translator wiring; frozen at new size.",
-  "_rebaseline_2026_07_22_8210_openrouter_midstream_error": "PR #8210 (hartmark, fix/openrouter-midstream-error-surfacing) own growth: open-sse/translator/response/openai-responses.ts 1137->1163 (+26) measured on the merged tip (release 1137 + this PR own growth). Adds a single new branch inside openaiToOpenAIResponsesResponse() that detects an OpenRouter-style mid-stream aggregator error (HTTP 200 SSE chunk with empty choices + a top-level error object) and surfaces it as state.upstreamError instead of silently falling through to the no-op/awaitingTrailingUsage path, which previously masked the failure as a false empty-success completion and skipped combo fallback. Irreducible call-site addition at the existing chunk-dispatch chokepoint (mirrors the Gemini-to-OpenAI translator's #4177 precedent for the same class of upstream error surfacing). Note: this baseline entry does NOT cover the separate pre-existing +11 drift already on the release tip from #8081/#8162 (1125->1136, unrelated reasoning-placeholder-stripping fix merged after this PR branched) — that drift belongs to the maintainer's rebaseline, not this PR.",
-  "_rebaseline_2026_07_22_8211_gemini_malformed_tool_choice": "PR #8211 (hartmark, fix/gemini-malformed-function-call-tool-choice) own growth: open-sse/translator/response/gemini-to-openai.ts 771->821 (+50, entirely this PR's diff — no other commit touched this file between the PR's merge-base and the release tip). Adds MALFORMED_FUNCTION_CALL/UNEXPECTED_TOOL_CALL handling inside geminiToOpenAIResponse(): synthesizes a `malformed_tool_call` tool_calls entry so finish_reason normalizes to the standard \\\"tool_calls\\\" instead of an unrecognized raw enum value that OpenAI-compatible clients (e.g. OpenClaw) silently ignore, and always synthesizes (rather than skipping when a real tool call already exists) so a malformed attempt alongside a real one in the same turn is not silently discarded. Irreducible cohesive addition at the existing candidate/finishReason translation chokepoint (mirrors the 9router#2462 raw-finish-reason precedent immediately below it in the same function). Covered by the PR's own tests/unit test additions for both the malformed-only and malformed-plus-real-call cases.",
-  "_rebaseline_2026_07_22_8213_chat_abandoned_target_abort": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: src/sse/handlers/chat.ts 1794->1860 (+66, measured against the PR's own merge-base — the release tip separately carries an unrelated -5 net shrink from #8013's antigravity callable-catalog alignment, which this PR's branch does not include and this entry does not cover). Adds resolveDispatchClientRawRequest(): merges a per-target modelAbortSignal into clientRawRequest.signal (via mergeAbortSignals) so a combo target abandoned by comboTargetTimeoutMs actually observes its own abort and reaches its cleanup path, instead of hanging forever inside withRateLimit/acquireAccountSemaphore and leaking a permanent 'pending' dashboard entry (live incident, log id 1784418258231-14961a). Also wires combo-exhausted rejection logging to capture request body + attempted models via the new rejectedRequestUsage helper. Irreducible additions at the existing chat dispatch chokepoint. Covered by the PR's own combo-config + integration test additions.",
-  "_rebaseline_2026_07_22_8213_combo_cooldown_wait_recording": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: open-sse/services/combo.ts 3548->3604 (+56, entirely this PR's diff — no other commit touched this file between the PR's merge-base and the release tip). Fixes combo cooldown-wait state recording so a bogus 503 is no longer crystallized when the cooldown-wait vars reset every setTry, adds an OpenAI-format SSE error frame path for combo-exhausted rejections (capturing request body + attempted models), and gives an abandoned per-target dispatch its own timeout instead of leaking a permanent 'pending' dashboard entry. Irreducible additions at the existing handleComboChat dispatch/retry chokepoint (mirrors the prior quota-share/headroom/task-aware strategy-branch precedents already frozen in this file). Covered by the PR's own combo-config + Gemini TPM-ceiling benchmark test additions.",
-  "_rebaseline_2026_07_22_8213_gemini_tpm_quota_cooldown_wait": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: open-sse/services/accountFallback.ts 1857->1932 on the merged tip (release 1892 incl #8050 +35, plus this PR own growth +40); measured against the PR own merge-base was 1857->1898 (+41 — the release tip separately carries an unrelated +34 from #8050's antigravity 404 model-not-found lockout scoping, which this PR's branch does not include and this entry does not cover). Own growth is the Gemini TPM-ceiling classification + cooldown-wait wiring feeding into the combo cooldown-wait state machine (rate-limit wedge recovery) introduced by this PR's commit series. Irreducible additions at the existing account-fallback/model-lockout chokepoint. Covered by the PR's own gemini-rate-limit-tracker and TPM-ceiling benchmark test additions.",
-  "_rebaseline_2026_07_22_8213_health_unblock_model_cooldowns": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: src/app/(dashboard)/dashboard/health/page.tsx 1094->1165 (+71, entirely this PR's diff — no other commit touched this file between the PR's merge-base and the release tip). Adds handleUnblockAll/handleUnblockOne dashboard actions (DELETE /api/resilience/model-cooldowns) so an operator can manually clear a Gemini TPM-wedge model lockout surfaced by this PR's cooldown-wait fixes, instead of waiting out the ceiling. Irreducible UI wiring at the existing health-page action chokepoint. Covered by the PR's own dashboard/resilience test additions.",
-  "_rebaseline_2026_07_22_8213_requestloggerdetail_unblock_ui": "PR #8213 (hartmark, fix/gemini-tpm-quota-cooldown-wait) own growth: src/shared/components/RequestLoggerDetail.tsx 799->941 (+142, entirely this PR's diff — no other commit touched this file between the PR's merge-base and the release tip; crosses the general 800-line new-file cap so is frozen here for the first time). Adds a collapsible section header (open/expand-less toggle) plus per-log-entry unblock (`unblocking`/`cleared` state, isCombo503 detection) so the request-logger detail panel surfaces the same Gemini TPM cooldown-wait / model-lockout unblock action introduced by this PR at the individual-request level (mirrors the health-page bulk unblock action added in the same PR). Covered by the PR's own dashboard/resilience test additions.",
-  "_rebaseline_2026_07_22_fusion_8013_8098_antigravity": "Fusion of #8013 (backryun, catalog/IDE-CLI-split rewrite) + #8098 (nguyenha935, protocol-fidelity/fail-closed/credits/tool-cloaking): open-sse/services/usage/antigravity.ts NEW 802 (>cap 800, +2 — #8098 credits/tier usage service on #8013's profile-aware headers). Test growth (models-catalog-route 1605->1608, provider-models-route 1752->1757 from #8013 Gemini 3.6 catalog) tracked in testFrozen.",
-  "_rebaseline_2026_07_23_8127_grok_weekly_quota": "#8127 (@apoapostolov) own growth: src/sse/handlers/chat.ts 1861->1865 (+4) — weekly quota tracking for grok-web wires a quota-fetch hook at the existing dispatch chokepoint. Thin wiring mirroring adjacent provider-quota branches; not extractable. Covered by tests/unit/grok-quota-fetcher.test.ts.",
-  "_rebaseline_2026_07_23_8143_empty_catch_logging": "#8143 (@chirag127) own growth: open-sse/utils/stream.ts 2869->2887 (+18) — replacing empty catch blocks in the SSE stream subsystem with console.debug logging (Rule #6 silent-swallow fix, issues #8138-#8142). Cohesive logging additions at the existing catch chokepoints, not extractable; frozen at new size. Covered by tests/unit/stream-handler-catch-logging-8143.test.ts.",
-  "_rebaseline_2026_07_23_8219_cache_ttl_settings_sidebar": "#8219 (@oyi77) own growth: sections.ts 806->813 (+7) — configurable model-catalog cache-TTL settings adds a new sidebar nav entry + its visibility wiring. Sidebar item array is data, not extractable logic; frozen at new size.",
-  "_rebaseline_2026_07_23_8247_8248_model_unhealthy": "#8247+#8248 own growth: accountFallback.ts 1940->1941 (+1, irreducible import statement only — the substantive #8248 DEGRADED-pattern classifier was extracted into open-sse/config/errorConfig.ts, which has ample headroom, instead of growing this frozen file; #8247's fix is a single existing-line condition change, net zero lines). Scoping the credits-exhausted 403/429 branch to isCompatibleProvider() (per-model-quota openai/anthropic-compatible-* nicknames) so it stays model-scoped instead of terminalling the whole connection, and classifying NVIDIA NIM 'Function ... DEGRADED' 400 bodies as model-access-denied instead of a raw passthrough 400. Covered by tests/unit/8247-accountfallback-model-unhealthy.test.ts and tests/unit/8248-accountfallback-nvidia-degraded.test.ts.",
-  "_rebaseline_2026_07_23_8252_combo_400_advance": "#8252 (@RaviTharuma) own growth: accountFallback.ts 1932->1940 (+8) + combo.ts 3604->3630 (+26) — advance combo on model-scoped 400s wrapped as invalid/Bad-Request. Irreducible wiring at existing account-fallback + combo dispatch chokepoints. Covered by combo-model-scoped-400-advance.test.ts.",
-  "_rebaseline_2026_07_23_8266_alibaba_media": "#8266 (@backryun) own growth: imageRegistry.ts 821->979 (+158) — Alibaba-family media models (Qwen image/video, Bailian, Wan) added to the image/video registry. Registry model data, not extractable logic; frozen at new size.",
-  "_rebaseline_2026_07_24_8388_compression_detail_persist": "#8388 (compression engine DETAIL settings — Headroom/session-dedup/CCR — dropped on save) own growth: src/lib/db/compression.ts 866->872 (+6 = irreducible call-site wiring at the existing getCompressionSettings/updateCompressionSettings chokepoint: one import line, one `...buildDetailConfigDefaults()` spread in the seed config, and one `case \\\"sessionDedup\\\": case \\\"ccr\\\": applyDetailConfigUpdate(config, key, parsed); break;` load-switch case, mirroring the existing headroom/#8056 case immediately above it). The actual normalizer logic (normalizeSessionDedupConfig/normalizeCcrConfig, matching SESSION_DEDUP_SCHEMA/CCR_SCHEMA bounds) was EXTRACTED into a new leaf src/lib/db/compressionDetailNormalizers.ts (well under cap) so this frozen file only carries the minimal dispatch wiring. Covered by tests/unit/8388-compression-detail-persist.test.ts (schema-accept + full DB save->reload round-trip for both new sub-objects, plus a no-regression assertion on the existing headroom round-trip).",
-  "_rebaseline_2026_07_24_responses_toolcalls_log_summary": "hartmark, fix/responses-tool-calls-log-summary own growth: open-sse/translator/response/openai-responses.ts 1163->1174 (+11). closeToolCall() now also writes the completed tool call into the shared state.toolCalls Map (already populated by the openai-to-claude / claude-to-openai / gemini-to-openai response translators) so stream.ts's completion-log summary builder (which reads state.toolCalls, not this translator's own funcCallIds/funcNames/funcArgsBuf bookkeeping) reports finish_reason \\\"tool_calls\\\" and message.tool_calls for openai->openai-responses translated streams instead of always logging \\\"stop\\\" with no tool_calls — the actual client-facing SSE events were already correct; only the persisted call-log summary was wrong. Irreducible call-site addition at the existing tool-call-close chokepoint. Covered by the new regression test in tests/unit/translator-resp-openai-responses.test.ts.",
-  "_rebaseline_2026_07_25_8476_combo_input_bound_homogeneous_scope": "PR #8476 (herjarsa, fix/8375-8459-combo-image-fixes, #8375) own growth: open-sse/services/combo.ts 3642->3679 (+37 net: +29 the PR's own isInputBoundFailure short-circuit for deterministic context_length_exceeded/context_window_exceeded failures, +8 a /green-prs pre-merge fix scoping that short-circuit to homogeneous remainders only — the shipped code fired unconditionally on ANY target, regressing the intentional heterogeneous-combo fallback #6637/isContextOverflow400 protects, exactly as flagged by this PR's own review evidence but never actually implemented in the branch). The fix compares orderedTargets[i+1..] modelStr against the failing target's modelStr at the existing executeTarget dispatch chokepoint (mirrors the sameProviderNext precedent a few lines below) — irreducible call-site wiring, not extractable without hiding the dispatch boundary. Covered by tests/unit/combo-input-bound-failure-8375.test.ts (homogeneous pool still short-circuits) and the new tests/unit/combo-input-bound-heterogeneous-8375.test.ts (heterogeneous combo now correctly falls through to the larger-context target).",
-  "_rebaseline_2026_07_25_adobe_firefly_reference_images": "Follow-up to #8006: storage upload + referenceBlobs for image/video and /v1/images/edits dispatch. adobeFireflyClient.ts 1958->2317 (+upload helpers, extract sources, resolve blob ids). Note: 2317 not 2316 — check-file-size.mjs counts LOC via split(\\\"\\\\n\\\").length (counts the trailing-newline empty element), which is 1 higher than `wc -l` on a file ending in \\\\n; the PR's original entry (2316) was measured with wc -l and undercounted by 1 against the actual gate.",
-  "_rebaseline_pr1043_minimax_tts": "Upstream port decolua/9router#1043 (toanalien) own growth: audioSpeech.ts 965->1061 (+96). Adds MiniMax T2A v2 TTS dispatch (handleMinimaxSpeech + hexToBytes helper) — provider entry was already in audioRegistry (format: minimax-tts) but no handler existed, falling through to the OpenAI-compatible default that fails (T2A has custom shape + hex-encoded audio + base_resp envelope). New branch sits next to the other inline provider branches (xiaomi-mimo, coqui, tortoise, aws-polly) — extracting would just create indirection. Covered by tests/unit/minimax-tts-1043.test.ts (3 tests, GREEN: success, base_resp error, invalid-hex).",
-  "_rebaseline_pr4592_exclude_exhausted_auto": "Reconcile #4592 already-merged growth: combo.ts 2991->3036 (+45, terminal-status quota-cutoff exclusion in buildAutoCandidates + opt-in gate). Fast-gate PR->release does not run check:file-size.",
-  "open-sse/executors/antigravity.ts": "1528",
-  "open-sse/executors/base.ts": "1640",
-  "open-sse/executors/chatgpt-web.ts": "3241",
-  "open-sse/executors/codex.ts": "1562",
-  "open-sse/executors/cursor.ts": "1563",
-  "open-sse/executors/deepseek-web.ts": "1148",
-  "open-sse/executors/grok-web.ts": "1044",
-  "open-sse/executors/muse-spark-web.ts": "1405",
-  "open-sse/handlers/chatCore.ts": "5034",
-  "open-sse/handlers/imageGeneration.ts": "3101",
-  "open-sse/handlers/responseSanitizer.ts": "1128",
-  "open-sse/handlers/search.ts": "1536",
-  "open-sse/handlers/videoGeneration.ts": "1063",
-  "open-sse/mcp-server/schemas/tools.ts": "1553",
-  "open-sse/mcp-server/server.ts": "1448",
-  "open-sse/mcp-server/tools/advancedTools.ts": "1120",
-  "open-sse/services/accountFallback.ts": "1978",
-  "open-sse/services/adobeFireflyClient.ts": "2385",
-  "open-sse/services/claudeCodeCompatible.ts": "1202",
-  "open-sse/services/combo.ts": "3648",
-  "open-sse/services/compression/strategySelector.ts": "1060",
-  "open-sse/services/rateLimitManager.ts": "1167",
-  "open-sse/translator/response/openai-responses.ts": "1204",
-  "open-sse/utils/cursorAgentProtobuf.ts": "1505",
-  "open-sse/utils/stream.ts": "2889",
-  "src/app/(dashboard)/dashboard/HomePageClient.tsx": "1388",
-  "src/app/(dashboard)/dashboard/analytics/ComboHealthTab.tsx": "1031",
-  "src/app/(dashboard)/dashboard/api-manager/ApiManagerPageClient.tsx": "3117",
-  "src/app/(dashboard)/dashboard/cache/media/MediaPageClient.tsx": "1067",
-  "src/app/(dashboard)/dashboard/combos/page.tsx": "4703",
-  "src/app/(dashboard)/dashboard/costs/CostOverviewTab.tsx": "1283",
-  "src/app/(dashboard)/dashboard/costs/quota-share/components/PoolWizard.tsx": "1022",
-  "src/app/(dashboard)/dashboard/endpoint/EndpointPageClient.tsx": "2615",
-  "src/app/(dashboard)/dashboard/health/page.tsx": "1165",
-  "src/app/(dashboard)/dashboard/providers/[id]/components/modals/EditConnectionModal.tsx": "1324",
-  "src/app/(dashboard)/dashboard/providers/page.tsx": "1944",
-  "src/app/(dashboard)/dashboard/runtime/RuntimePageClient.tsx": "1201",
-  "src/app/(dashboard)/dashboard/settings/components/PricingTab.tsx": "1019",
-  "src/app/(dashboard)/dashboard/settings/components/ProxyRegistryManager.tsx": "1470",
-  "src/app/(dashboard)/dashboard/settings/components/ResilienceTab.tsx": "1123",
-  "src/app/(dashboard)/dashboard/settings/components/RoutingTab.tsx": "1629",
-  "src/app/(dashboard)/dashboard/settings/components/SystemStorageTab.tsx": "1573",
-  "src/app/(dashboard)/dashboard/usage/components/BudgetTab.tsx": "1028",
-  "src/app/(dashboard)/dashboard/usage/components/EvalsTab.tsx": "2148",
-  "src/app/(dashboard)/dashboard/usage/components/ProviderLimits/index.tsx": "1119",
-  "src/app/api/providers/[id]/models/route.ts": "2361",
-  "src/app/api/v1/models/catalog.ts": "1590",
-  "src/lib/tokenHealthCheck.ts": "1053",
-  "src/lib/db/apiKeys.ts": "1529",
-  "src/lib/db/core.ts": "1639",
-  "src/lib/db/migrationRunner.ts": "1094",
-  "src/lib/db/models.ts": "1097",
-  "src/lib/db/providers.ts": "1034",
-  "src/lib/memory/retrieval.ts": "1073",
-  "src/lib/tailscaleTunnel.ts": "1202",
-  "src/lib/usage/providerLimits.ts": "1013",
-  "src/shared/components/OAuthModal.tsx": "1134",
-  "src/shared/components/RequestLoggerV2.tsx": "1629",
-  "src/shared/components/analytics/charts.tsx": "1035",
-  "src/shared/services/cliRuntime.ts": "1122",
-  "src/sse/handlers/chat.ts": "1904",
-  "src/sse/services/auth.ts": "2508",
-  "tests/unit/account-fallback-service.test.ts": "1572",
-  "tests/unit/provider-validation-specialty.test.ts": "2985",
-  "open-sse/executors/hyperagent.ts": "1026",
-  "open-sse/executors/default.ts": "1042",
-  "open-sse/executors/kiro.ts": "1069",
-  "open-sse/translator/request/openai-to-kiro.ts": "1057",
-  "open-sse/utils/sseHeartbeat.ts": "142",
-  "_rebaseline_2026_08_04_9305_sse_comments": "#9305 fix: broadened sseCommentsEnabled()"
+  "_rebaseline_2026_08_07_v3850_sweepreds_pr2_toolnamemap": "tests/unit/translator-openai-to-gemini.test.ts 1616->1619 (+3). O frozen estava EXATAMENTE no tamanho da base, entao qualquer linha nova viola. #9568 (c9a3361e5a) fez buildChangedToolNameMap emitir entradas IDENTIDADE (o Gemini minusculiza nomes de tool nas respostas, entao o tradutor de resposta precisa da chave para mapear de volta), o que passou a incluir `_toolNameMap` no envelope Antigravity de qualquer request com tools. As 3 linhas sao: a chave nova na lista esperada de Object.keys, 1 comentario explicando POR QUE ela aparece (sem ele o proximo leitor tenta remove-la de novo) e 1 assert do CONTEUDO do map — presenca de chave sozinha nao provaria a entrada identidade, que e justamente o comportamento novo. Nao ha o que extrair: e alinhamento de contrato dentro de um teste existente."
 }
--- a/docs/compression/COMPRESSION_GUIDE.md
+++ b/docs/compression/COMPRESSION_GUIDE.md
@@ -158,7 +158,7 @@ error lines produced **95.93% token savings / 96.26% character savings** — squ
 range. But the same pipeline run against normal, non-redundant tool output (a clean `grep` match list,
 a short file read, ordinary conversational text) correctly produces **near-zero savings**, because
 there is nothing repetitive to remove and `validateCompression()` (`validation.ts`) refuses to ship a
-rewrite that would drop or alter code blocks, URLs, headings, versions, or ALL-CAPS constant identifiers.
+rewrite that would drop or alter code blocks, URLs, headings, versions, or `CONST_CASE` identifiers.

 This is expected, safe behavior, not a bug: a coding session that mostly reads/greps clean files will
 see modest total savings even with compression fully enabled, while a session that hits a failing
--- a/open-sse/config/audioRegistry.ts
+++ b/open-sse/config/audioRegistry.ts
@@ -603,7 +603,7 @@ export interface ProviderNodeRow {
 }

 /** Hosts reachable only from the operator's machine/Docker network. */
-export function isLoopbackNodeHost(baseUrl: string): boolean {
+function isLoopbackNodeHost(baseUrl: string): boolean {
  try {
    const hostname = new URL(baseUrl).hostname;
    return (
--- a/open-sse/config/providers/index.ts
+++ b/open-sse/config/providers/index.ts
@@ -225,6 +225,7 @@ import { digitaloceanProvider } from "./registry/digitalocean/index.ts";
 import { hcnsecProvider } from "./registry/hcnsec/index.ts";
 import { promptqlProvider } from "./registry/promptql/index.ts";
 import { hyperagentProvider } from "./registry/hyperagent/index.ts";
+import { muse_codeProvider } from "./registry/muse-code/index.ts";

 export const REGISTRY: Record<string, RegistryEntry> = {
  aimlapi: aimlapiProvider,
@@ -451,5 +452,6 @@ export const REGISTRY: Record<string, RegistryEntry> = {
  hcnsec: hcnsecProvider,
  promptql: promptqlProvider,
  hyperagent: hyperagentProvider,
+  "muse-code": muse_codeProvider,
  unorouter: unorouterProvider,
 };
--- a/open-sse/config/providers/registry/gemini/web/index.ts
+++ b/open-sse/config/providers/registry/gemini/web/index.ts
@@ -8,32 +8,9 @@ export const gemini_webProvider: RegistryEntry = {
  baseUrl: "https://gemini.google.com/app",
  authType: "apikey",
  authHeader: "cookie",
-  // #9356: `supportsReasoning: false` is a live-behavior statement, not a guess
-  // about the underlying Gemini model. The executor drives the gemini.google.com
-  // web UI by typing a prompt, so it has no thinking-budget control to set and
-  // never surfaces `reasoning_content` — agent routers reading /v1/models must
-  // not select these for reasoning work. `toolCalling: false` is the matching
-  // statement for native function calling; the prompt-emulation shim (#7286)
-  // stays available and is advertised separately as `toolCalling: "emulated"`
-  // on the provider constant (src/shared/constants/providers/web-cookie.ts).
  models: [
-    {
-      id: "gemini-3.1-pro",
-      name: "Gemini 3.1 Pro",
-      toolCalling: false,
-      supportsReasoning: false,
-    },
-    {
-      id: "gemini-3.5-flash",
-      name: "Gemini 3.5 Flash",
-      toolCalling: false,
-      supportsReasoning: false,
-    },
-    {
-      id: "gemini-3.1-flash-lite",
-      name: "Gemini 3.1 Flash-Lite",
-      toolCalling: false,
-      supportsReasoning: false,
-    },
+    { id: "gemini-3.1-pro", name: "Gemini 3.1 Pro", toolCalling: false },
+    { id: "gemini-3.5-flash", name: "Gemini 3.5 Flash", toolCalling: false },
+    { id: "gemini-3.1-flash-lite", name: "Gemini 3.1 Flash-Lite", toolCalling: false },
  ],
 };
--- a/open-sse/config/providers/registry/muse-code/index.ts
+++ b/open-sse/config/providers/registry/muse-code/index.ts
@@ -0,0 +1,106 @@
+import type { RegistryEntry } from "../../shared.ts";
+import { buildOpenAiCompatibleRegistryEntry } from "../../shared.ts";
+
+/**
+ * Muse Code CLI — Meta's agentic coding tool.
+ *
+ * Wire format: OpenAI Responses API (POST /responses).
+ * Auth: Bearer token from META_API_KEY env var.
+ * Reasoning efforts: xhigh/ultra -> high (handled generically).
+ *
+ * @see https://github.com/joymadhu49/muse-openrouter-shim
+ */
+export const muse_codeProvider: RegistryEntry = buildOpenAiCompatibleRegistryEntry({
+  id: "muse-code",
+  alias: "mc",
+  passthroughModels: true,
+  defaultContextLength: 200000,
+  models: [
+    {
+      id: "llama-4-maverick",
+      name: "Llama 4 Maverick",
+      contextLength: 1048576,
+      maxOutputTokens: 131072,
+      supportsReasoning: true,
+      supportsXHighEffort: true,
+      toolCalling: true,
+      supportsVision: true,
+      targetFormat: "openai-responses",
+      unsupportedParams: ["logprobs", "topLogprobs", "logitBias"],
+    },
+    {
+      id: "llama-4-scout",
+      name: "Llama 4 Scout",
+      contextLength: 1048576,
+      maxOutputTokens: 131072,
+      supportsReasoning: true,
+      supportsXHighEffort: true,
+      toolCalling: true,
+      supportsVision: true,
+      targetFormat: "openai-responses",
+      unsupportedParams: ["logprobs", "topLogprobs", "logitBias"],
+    },
+    {
+      id: "llama-3.3-70b",
+      name: "Llama 3.3 70B",
+      contextLength: 131072,
+      maxOutputTokens: 32768,
+      supportsReasoning: false,
+      toolCalling: true,
+      targetFormat: "openai-responses",
+      unsupportedParams: ["logprobs", "topLogprobs"],
+    },
+    {
+      id: "llama-3.1-405b",
+      name: "Llama 3.1 405B",
+      contextLength: 131072,
+      maxOutputTokens: 32768,
+      supportsReasoning: false,
+      toolCalling: true,
+      targetFormat: "openai-responses",
+      unsupportedParams: ["logprobs", "topLogprobs"],
+    },
+    {
+      id: "llama-3.1-70b",
+      name: "Llama 3.1 70B",
+      contextLength: 131072,
+      maxOutputTokens: 32768,
+      supportsReasoning: false,
+      toolCalling: true,
+      targetFormat: "openai-responses",
+      unsupportedParams: ["logprobs", "topLogprobs"],
+    },
+    {
+      id: "llama-3.1-8b",
+      name: "Llama 3.1 8B",
+      contextLength: 131072,
+      maxOutputTokens: 32768,
+      supportsReasoning: false,
+      toolCalling: true,
+      targetFormat: "openai-responses",
+      unsupportedParams: ["logprobs", "topLogprobs"],
+    },
+    {
+      id: "llama-3.2-90b-vision",
+      name: "Llama 3.2 90B Vision",
+      contextLength: 131072,
+      maxOutputTokens: 32768,
+      supportsReasoning: false,
+      toolCalling: true,
+      supportsVision: true,
+      targetFormat: "openai-responses",
+      unsupportedParams: ["logprobs", "topLogprobs"],
+    },
+    {
+      id: "llama-3.2-11b-vision",
+      name: "Llama 3.2 11B Vision",
+      contextLength: 131072,
+      maxOutputTokens: 32768,
+      supportsReasoning: false,
+      toolCalling: true,
+      supportsVision: true,
+      targetFormat: "openai-responses",
+      unsupportedParams: ["logprobs", "topLogprobs"],
+    },
+  ],
+});
--- a/open-sse/executors/devin-agentic/serializer.ts
+++ b/open-sse/executors/devin-agentic/serializer.ts
@@ -119,8 +119,7 @@ function serializeMessage(
      "unsupported_role"
    );
  }
-  // role was just narrowed to "user" | "assistant" by the guard above ("system" throws).
-  const label = role === "assistant" ? "Assistant" : "User";
+  const label = role === "assistant" ? "Assistant" : role === "system" ? "System" : "User";
  const content = record.content;

  if (typeof content === "string") return `[${label}]\n${content}`;
--- a/open-sse/executors/gemini-web.ts
+++ b/open-sse/executors/gemini-web.ts
@@ -14,13 +14,9 @@
 */

 import { BaseExecutor, type ExecuteInput } from "./base.ts";
-import { buildErrorBody, sanitizeErrorMessage } from "../utils/error.ts";
+import { sanitizeErrorMessage } from "../utils/error.ts";
 import { prepareToolMessages } from "../translator/webTools.ts";
 import { buildToolModeResponse } from "./chatgptWebTools.ts";
-import {
-  checkGeminiWebUnsupportedControls,
-  GEMINI_WEB_UNSUPPORTED_CONTROL_CODE,
-} from "./gemini-web/capabilities.ts";

 // ─── Constants ──────────────────────────────────────────────────────────────

@@ -410,33 +406,6 @@ export class GeminiWebExecutor extends BaseExecutor {
    const { model, body, stream, credentials, signal, log, onCredentialsRefreshed } = input;
    const requestBody = body as GeminiRequestBody;

-    // #9356: fail fast on controls this provider cannot honor (reasoning_effort
-    // above "minimal", forced tool_choice). Runs before the credential check and
-    // before Playwright launches — the request is unservable no matter which
-    // cookie is used, and answering 200 with ordinary prose made agents believe
-    // their reasoning/tool requirements had been met. See ./gemini-web/capabilities.ts.
-    const violation = checkGeminiWebUnsupportedControls(body as Record<string, unknown>);
-    if (violation) {
-      log?.warn?.(
-        "GEMINI-WEB",
-        `Rejected request: "${violation.param}" is not supported by this provider`
-      );
-      return {
-        response: new Response(
-          JSON.stringify(
-            buildErrorBody(400, violation.message, null, {
-              type: "invalid_request_error",
-              code: GEMINI_WEB_UNSUPPORTED_CONTROL_CODE,
-            })
-          ),
-          { status: 400, headers: { "Content-Type": "application/json" } }
-        ),
-        url: GEMINI_URL,
-        headers: {},
-        transformedBody: body,
-      };
-    }
-
    const cookie = resolveGeminiWebCookie(credentials);
    if (!cookie) {
      return {
--- a/open-sse/executors/gemini-web/capabilities.ts
+++ b/open-sse/executors/gemini-web/capabilities.ts
@@ -1,121 +0,0 @@
-/**
- * Request-contract guards for the Gemini Web executor (#9356).
- *
- * gemini-web is not an API client. It launches Playwright, types ONE flat
- * prompt string into the gemini.google.com `.ql-editor` contenteditable,
- * presses Enter, and captures the first `StreamGenerate` response off the page
- * (see ../gemini-web.ts). There is no JSON request body on the wire, which
- * makes two OpenAI controls structurally impossible to honor:
- *
- *   • `reasoning_effort` — no field exists to carry a thinking budget. Unlike
- *     deepseek-web or perplexity-web, which post a real payload and can flip a
- *     `thinking_enabled` flag or swap the model preference, there is nothing
- *     here to set.
- *   • forced `tool_choice` — the tools support gemini-web does have is the
- *     prompt-emulation shim (`translator/webTools.ts`, #7286): it ASKS the
- *     model, in prose, to answer with `<tool>{...}</tool>` and parses whatever
- *     comes back. That is best-effort by construction. "required" / "any" /
- *     a named function is a GUARANTEE, and a prompt cannot make one.
- *
- * Before this module both were accepted and quietly ignored, so an agent got a
- * 200 with `finish_reason: "stop"`, no `reasoning_content`, and `tool_calls: []`
- * and concluded its requirements had been met (#9356). Failing the request is
- * the honest answer: the caller can drop the control, or route to a model that
- * actually implements it.
- *
- * Deliberately NOT rejected — these are already satisfied or already work:
- *   • `reasoning_effort: "none" | "minimal"` — asking for as little reasoning as
- *     possible is something a non-thinking provider trivially complies with.
- *   • `tool_choice: "auto" | "none"` and plain `tools[]` — the #7286 emulation
- *     path, which several shipped combos depend on (#5240, #8488). Untouched.
- *
- * Pure and dependency-free so the whole contract is unit-testable without a
- * browser.
- */
-
-/** `error.code` on every compatibility rejection raised here. */
-export const GEMINI_WEB_UNSUPPORTED_CONTROL_CODE = "unsupported_control_for_provider";
-
-/** Effort levels a non-thinking provider already complies with. */
-const SATISFIED_EFFORT_LEVELS = new Set(["none", "minimal"]);
-
-/** `tool_choice` strings that demand a tool call rather than merely offering one. */
-const FORCING_TOOL_CHOICE_STRINGS = new Set(["required", "any"]);
-
-/** `tool_choice: { type }` values that pin the model to a specific/any tool. */
-const FORCING_TOOL_CHOICE_TYPES = new Set(["function", "tool", "any"]);
-
-export interface GeminiWebCapabilityViolation {
-  /** Which request field could not be honored. */
-  param: "reasoning_effort" | "tool_choice";
-  /** Client-facing explanation — already safe to put in a response body. */
-  message: string;
-}
-
-function normalizeString(value: unknown): string | null {
-  return typeof value === "string" && value.trim().length > 0 ? value.trim().toLowerCase() : null;
-}
-
-/**
- * True when `tool_choice` demands a tool call. Covers the OpenAI strings
- * ("required"), the Anthropic-flavored ones the translators also emit ("any"),
- * and the object forms that name a function or force any tool. "auto" / "none"
- * and every unrecognized shape are treated as non-forcing — this guard only
- * blocks contracts it is certain gemini-web cannot keep.
- */
-export function isForcingToolChoice(toolChoice: unknown): boolean {
-  const asString = normalizeString(toolChoice);
-  if (asString) return FORCING_TOOL_CHOICE_STRINGS.has(asString);
-
-  if (toolChoice && typeof toolChoice === "object" && !Array.isArray(toolChoice)) {
-    const type = normalizeString((toolChoice as Record<string, unknown>).type);
-    return type !== null && FORCING_TOOL_CHOICE_TYPES.has(type);
-  }
-
-  return false;
-}
-
-/** True when `reasoning_effort` asks for MORE thinking than "none at all". */
-export function requestsThinkingBudget(reasoningEffort: unknown): boolean {
-  const effort = normalizeString(reasoningEffort);
-  if (effort === null) return false;
-  return !SATISFIED_EFFORT_LEVELS.has(effort);
-}
-
-/**
- * Inspect an OpenAI-shaped request body for controls gemini-web cannot honor.
- * Returns the first violation found, or `null` when the request is servable.
- *
- * `reasoning_effort` is checked before `tool_choice` only for determinism; a
- * request carrying both is rejected either way.
- */
-export function checkGeminiWebUnsupportedControls(
-  body: Record<string, unknown> | null | undefined
-): GeminiWebCapabilityViolation | null {
-  if (!body || typeof body !== "object") return null;
-
-  if (requestsThinkingBudget(body.reasoning_effort)) {
-    return {
-      param: "reasoning_effort",
-      message:
-        'Model provider "gemini-web" does not support "reasoning_effort". It drives the ' +
-        "gemini.google.com web UI through a typed prompt and has no thinking-budget control " +
-        'to set, so any effort above "minimal" would be silently ignored. Remove ' +
-        '"reasoning_effort" (or send "none"/"minimal") or route to a reasoning-capable model.',
-    };
-  }
-
-  if (isForcingToolChoice(body.tool_choice)) {
-    return {
-      param: "tool_choice",
-      message:
-        'Model provider "gemini-web" cannot guarantee a forced tool call. Its tool support is ' +
-        "prompt-emulated — the model is asked to emit a tool block and may answer with prose " +
-        'instead — so "tool_choice" values that require one ("required", "any", or a named ' +
-        'function) cannot be honored. Use "auto" to keep best-effort tool calling, or route to ' +
-        "a model with native function calling.",
-    };
-  }
-
-  return null;
-}
--- a/open-sse/executors/lmarena/response.ts
+++ b/open-sse/executors/lmarena/response.ts
@@ -7,8 +7,6 @@ import { isCloudflareChallenge } from "../../services/lmarenaTlsClient.ts";
 import { markLMArenaCatalogModelDead } from "./models.ts";
 import { parseArenaSSE } from "./stream.ts";

-const encoder = new TextEncoder();
-
 export function errorResponse(
  status: number,
  message: string,
@@ -167,7 +165,7 @@ function baseChunk(model: string) {
 }

 function enqueueSse(controller: ReadableStreamDefaultController, chunk: Record<string, unknown>) {
-  controller.enqueue(encoder.encode(`data: ${JSON.stringify(chunk)}\n\n`));
+  controller.enqueue(new TextEncoder().encode(`data: ${JSON.stringify(chunk)}\n\n`));
 }

 function emitStopAndDone(controller: ReadableStreamDefaultController, model: string) {
@@ -175,8 +173,7 @@ function emitStopAndDone(controller: ReadableStreamDefaultController, model: str
    ...baseChunk(model),
    choices: [{ index: 0, delta: {}, finish_reason: "stop" }],
  });
-
-  controller.enqueue(encoder.encode("data: [DONE]\n\n"));
+  controller.enqueue(new TextEncoder().encode("data: [DONE]\n\n"));
  controller.close();
 }

--- a/open-sse/executors/raycast.ts
+++ b/open-sse/executors/raycast.ts
@@ -28,14 +28,7 @@ export class RaycastExecutor extends BaseExecutor {
    return RAYCAST_CHAT_URL;
  }

-  // Not a BaseExecutor.buildHeaders override: Raycast signs headers over the exact
-  // request payload (2nd param is the body string, not the base's `stream` boolean),
-  // and execute() below is fully custom — keep it as a distinct helper so a
-  // polymorphic buildHeaders(credentials, true) call can never land here.
-  private buildRaycastRequestHeaders(
-    credentials: ProviderCredentials,
-    payload?: string
-  ): Record<string, string> {
+  buildHeaders(credentials: ProviderCredentials, payload?: string): Record<string, string> {
    const body = payload || "{}";
    return buildRaycastHeaders(body, credentials as JsonRecord);
  }
@@ -51,11 +44,7 @@ export class RaycastExecutor extends BaseExecutor {
      return {
        response: new Response(
          JSON.stringify({
-            error: {
-              message: sanitizeErrorMessage(message),
-              type: "invalid_request_error",
-              code: "",
-            },
+            error: { message: sanitizeErrorMessage(message), type: "invalid_request_error", code: "" },
          }),
          { status: 400, headers: { "Content-Type": "application/json" } }
        ),
@@ -65,7 +54,7 @@ export class RaycastExecutor extends BaseExecutor {
      };
    }

-    const headers = this.buildRaycastRequestHeaders(credentials as ProviderCredentials, payload);
+    const headers = this.buildHeaders(credentials as ProviderCredentials, payload);
    mergeUpstreamExtraHeaders(headers, upstreamExtraHeaders as Record<string, string> | null);

    let raycastResponse: Response;
--- a/open-sse/services/backgroundTaskDetector.ts
+++ b/open-sse/services/backgroundTaskDetector.ts
@@ -190,31 +190,15 @@ export function getBackgroundTaskReason(
  const messages = toMessageArray(typedBody.messages ?? typedBody.input ?? []);
  if (!Array.isArray(messages) || messages.length === 0) return null;

-  // Derive system content from messages array (OpenAI format) or top-level
-  // system field (Anthropic format).
+  // Find system message
  const systemMsg = messages.find(
    (message: BackgroundMessage) => message.role === "system" || message.role === "developer"
  );
-  let systemContent = "";
-  if (systemMsg && typeof systemMsg.content === "string") {
-    systemContent = systemMsg.content.toLowerCase();
-  } else if (!systemMsg) {
-    // Anthropic top-level system field: string or array of text blocks
-    const raw = (typedBody as Record<string, unknown>).system;
-    if (typeof raw === "string") {
-      systemContent = raw.toLowerCase();
-    } else if (Array.isArray(raw)) {
-      systemContent = raw
-        .map((part) =>
-          part && typeof (part as { text?: unknown }).text === "string"
-            ? (part as { text: string }).text
-            : ""
-        )
-        .filter(Boolean)
-        .join(" ")
-        .toLowerCase();
-    }
-  }
+  if (!systemMsg) return null;
+
+  const systemContent =
+    typeof systemMsg.content === "string" ? systemMsg.content.toLowerCase() : "";
+
  if (!systemContent) return null;

  // Check against detection patterns
--- a/open-sse/services/compression/rules/ru/ultra.json
+++ b/open-sse/services/compression/rules/ru/ultra.json
@@ -32,7 +32,7 @@
      "replacement": " ",
      "context": "all",
      "category": "ultra",
-      "minIntensity": "ultra"
+      "minIntensity": "notes"
    },
    {
      "name": "ultra_lowercase",
@@ -40,7 +40,7 @@
      "replacement": " $1",
      "context": "all",
      "category": "ultra",
-      "minIntensity": "ultra"
+      "minIntensity": "notes"
    }
  ]
 }
--- a/open-sse/translator/index.ts
+++ b/open-sse/translator/index.ts
@@ -166,29 +166,6 @@ function isReasoningOnlyReplayTarget(provider: unknown, model: unknown): boolean
  );
 }

-/**
- * Upstreams that reject an ABSENT reasoning_content on replay turns, so the
- * placeholder must survive the cache miss.
- *
- * #9573/#9610 removed the placeholder globally because the model echoed it as
- * its own reasoning and stopped (empty turns). That holds for DeepSeek, where
- * an absent field was verified to be accepted — but Xiaomi MiMo still 400s
- * ("Param Incorrect: The reasoning_content in the thinking mode must be passed
- * back to the API", 9router#1321/#1337), so omitting the field there trades one
- * live bug for another. Keep the placeholder only for those providers; the echo
- * that comes back is still stripped on the way in by
- * isInternalReasoningPlaceholder(), so it never re-poisons cache or history.
- */
-function requiresReasoningContentPresence(provider: unknown, model: unknown): boolean {
-  const normalizedProvider = String(provider ?? "")
-    .trim()
-    .toLowerCase();
-  const normalizedModel = String(model ?? "")
-    .trim()
-    .toLowerCase();
-  return normalizedProvider === "xiaomi-mimo" || /(^|\/)mimo/i.test(normalizedModel);
-}
-
 /** @param options.normalizeToolCallId - When true, use 9-char tool call ids (e.g. Mistral); when false, leave ids as-is */
 /** @param options.preserveDeveloperRole - undefined/true: keep developer for OpenAI format (default); false: map to system */
 /** @param options.preserveCacheControl - When true, preserve client-side cache_control markers (for Claude Code, etc.) */
@@ -598,11 +575,7 @@ export function translateRequest(
      // the field instead; providers that genuinely enforce the contract
      // (kimi-coding, moonshot authentic-reasoning) have their own paths above.
      if ((hasToolCalls || shouldReplayReasoningOnly) && !msg.reasoning_content) {
-        if (requiresReasoningContentPresence(normalizedProvider, normalizedModel)) {
-          msg.reasoning_content = NON_ANTHROPIC_THINKING_PLACEHOLDER;
-        } else {
-          delete msg.reasoning_content;
-        }
+        delete msg.reasoning_content;
      }
    }
  } else if (
--- a/open-sse/translator/request/openai-responses.ts
+++ b/open-sse/translator/request/openai-responses.ts
@@ -724,7 +724,7 @@ export function openaiResponsesToOpenAIRequest(
    const reasoningRec = toRecord(root.reasoning);
    const effort = toString(reasoningRec.effort);
    if (effort && result.reasoning_effort === undefined) {
-      result.reasoning_effort = normalizeResponsesReasoningEffort(effort, model ?? root.model);
+      result.reasoning_effort = normalizeResponsesReasoningEffort(effort, model);
    }
    if (
      credentialRecord._copilotClient === true &&
--- a/open-sse/translator/response/gemini-to-claude.ts
+++ b/open-sse/translator/response/gemini-to-claude.ts
@@ -112,7 +112,7 @@ export function geminiToClaudeResponse(chunk, state) {
        // When the toolNameMap provides a match (e.g., lowercase "bash" → "Bash"),
        // use it directly without passing through normalizeToolName(), which would
        // reverse TitleCase back to lowercase via REVERSE_MAP (#9568).
-        const restoredToolName = mappedName ?? normalizeToolName(rawToolName);
+        const restoredToolName = mappedName || normalizeToolName(rawToolName);
        const idx = state.contentBlockIndex++;
        const toolId = fc.id || `toolu_${Date.now()}_${idx}`;

--- a/open-sse/translator/response/openai-responses.ts
+++ b/open-sse/translator/response/openai-responses.ts
@@ -874,7 +874,6 @@ function openaiResponsesToOpenAIResponseStream(chunk, state) {
    if (state.currentToolCallId) state.toolCallIdsSeen.add(state.currentToolCallId);

    const toolName = normalizeToolName(item.name);
-    state.currentToolName = toolName; // track for schema lookup at done time
    if (!toolName) {
      // Some Responses providers briefly emit placeholder/empty tool names.
      // Defer emission until output_item.done in case the final name is populated there.
@@ -920,9 +919,26 @@ function openaiResponsesToOpenAIResponseStream(chunk, state) {
    state.currentToolCallArgsBuffer = (state.currentToolCallArgsBuffer || "") + argsDelta;
    if (state.currentToolCallDeferred) return null;

-    // #9168: buffer arguments until output_item.done for schema-aware null normalization
-    // Previously emitted raw null values for optional enum fields (e.g. isolation: null).
-    return null;
+    return {
+      id: state.chatId,
+      object: "chat.completion.chunk",
+      created: state.created,
+      model: state.model || "gpt-4",
+      choices: [
+        {
+          index: 0,
+          delta: {
+            tool_calls: [
+              {
+                index: state.toolCallIndex,
+                function: { arguments: argsDelta },
+              },
+            ],
+          },
+          finish_reason: null,
+        },
+      ],
+    };
  }

  // Function call done — emit args chunk from item.arguments when no deltas were received,
@@ -995,35 +1011,6 @@ function openaiResponsesToOpenAIResponseStream(chunk, state) {
    if (item.arguments != null && !buffered) {
      const argsToEmit = stripEmptyOptionalToolArgs(item.arguments, toolName, toolSchema);

-      const argsStr = typeof argsToEmit === "string" ? argsToEmit : JSON.stringify(argsToEmit);
-      if (argsStr) {
-        return {
-          id: state.chatId,
-          object: "chat.completion.chunk",
-          created: state.created,
-          model: state.model || "gpt-4",
-          choices: [
-            {
-              index: 0,
-              delta: {
-                tool_calls: [
-                  {
-                    index: currentIndex,
-                    function: { arguments: argsStr },
-                  },
-                ],
-              },
-              finish_reason: null,
-            },
-          ],
-        };
-      }
-    } else if (buffered) {
-      // #9168: deltas were buffered — normalize against the original client schema
-      // and emit the cleaned arguments once, stripping optional null values that
-      // would otherwise reach the client raw.
-      const argsToEmit = stripEmptyOptionalToolArgs(buffered, toolName, toolSchema);
-
      const argsStr = typeof argsToEmit === "string" ? argsToEmit : JSON.stringify(argsToEmit);
      if (argsStr) {
        return {
--- a/open-sse/utils/sseHeartbeat.ts
+++ b/open-sse/utils/sseHeartbeat.ts
@@ -79,8 +79,7 @@ export function sseCommentsEnabled(): boolean {
  if (typeof process === "undefined") return true;
  const v = process.env.OMNIROUTE_SSE_COMMENTS;
  if (v === undefined || v === "") return true;
-  const normalized = v.trim().toLowerCase();
-  return normalized !== "off" && normalized !== "false" && normalized !== "0" && normalized !== "no";
+  return v.trim().toLowerCase() !== "off";
 }

 export function createSseHeartbeatTransform({
--- a/open-sse/utils/stream.ts
+++ b/open-sse/utils/stream.ts
@@ -25,7 +25,6 @@ import {
 } from "./streamHelpers.ts";
 import { calculateCost } from "@/lib/usage/costCalculator";
 import { buildOmniRouteSseMetadataComment } from "@/domain/omnirouteResponseMeta";
-import { sseCommentsEnabled } from "./sseHeartbeat.ts";
 import {
  createStructuredSSECollector,
  buildStreamSummaryFromEvents,
@@ -1002,11 +1001,6 @@ export function createSSEStream(options: StreamOptions = {}) {
    controller: TransformStreamDefaultController,
    finalUsage: UsageTokenRecord | Record<string, unknown> | null | undefined
  ) => {
-    // Skip SSE metadata comment lines when OMNIROUTE_SSE_COMMENTS is disabled
-    // (e.g., "off", "false", "0", "no"). Strict OpenAI-compatible clients that
-    // JSON.parse every SSE line will crash on `: x-omniroute-*` comment lines.
-    if (!sseCommentsEnabled()) return;
-
    const costUsd = finalUsage ? await calculateCost(provider, model, finalUsage) : 0;
    const comment = buildOmniRouteSseMetadataComment({
      provider,
@@ -2469,18 +2463,8 @@ export function createSSEStream(options: StreamOptions = {}) {
                  status: 200,
                  usage,
                  responseBody,
-                  // #9315 switched the summary to the accumulated responseBody to avoid
-                  // stale/truncated event data — but responseBody here is synthesized in
-                  // chat-completion shape, which loses the Responses API `response` object.
-                  // Keep the events-derived summary for OPENAI_RESPONSES only.
                  providerPayload: providerPayloadCollector.build(
-                    sourceFormat === FORMATS.OPENAI_RESPONSES
-                      ? buildStreamSummaryFromEvents(
-                          providerPayloadCollector.getEvents(),
-                          sourceFormat,
-                          model
-                        )
-                      : responseBody,
+                    responseBody,
                    { includeEvents: false }
                  ),
                  clientPayload: clientPayloadCollector.build(responseBody, {
@@ -2750,16 +2734,8 @@ export function createSSEStream(options: StreamOptions = {}) {
                status: 200,
                usage: state?.usage,
                responseBody,
-                // Same OPENAI_RESPONSES carve-out as the passthrough branch above —
-                // the synthesized chat-shaped responseBody drops the `response` object.
                providerPayload: providerPayloadCollector.build(
-                  targetFormat === FORMATS.OPENAI_RESPONSES
-                    ? buildStreamSummaryFromEvents(
-                        providerPayloadCollector.getEvents(),
-                        targetFormat,
-                        model
-                      )
-                    : responseBody,
+                  responseBody,
                  { includeEvents: false }
                ),
                clientPayload: clientPayloadCollector.build(responseBody, {
--- a/scripts/build/assembleStandalone.mjs
+++ b/scripts/build/assembleStandalone.mjs
@@ -89,15 +89,6 @@ const NATIVE_ASSET_ENTRIES = [
    src: ["node_modules", "better-sqlite3", "build"],
    dest: ["node_modules", "better-sqlite3", "build"],
  },
-  {
-    // #8847: Bun (and npx -g global installs) resolve better-sqlite3's native
-    // binary from prebuilds/ instead of build/Release/, so the compiled build/
-    // copy alone leaves a hollow package that falls back to sql.js (OOM under
-    // Bun). Ship the prebuilds alongside the compiled binary.
-    label: "better-sqlite3 prebuilds (Bun / global installs)",
-    src: ["node_modules", "better-sqlite3", "prebuilds"],
-    dest: ["node_modules", "better-sqlite3", "prebuilds"],
-  },
  {
    // TPROXY IP_TRANSPARENT addon (Fase 3 / Epic A). Built by build-tproxy-native
    // before assembly; Linux-only + opt-in, so the source is absent on non-Linux
--- a/scripts/build/colocateOptionals.mjs
+++ b/scripts/build/colocateOptionals.mjs
@@ -47,8 +47,7 @@
 */

 import { cpSync, existsSync, mkdirSync, readFileSync } from "node:fs";
-import { createRequire } from "node:module";
-import { dirname, join, sep } from "node:path";
+import { dirname, join } from "node:path";

 /**
 * Entry packages of the SLM optional stack (the closure roots). `@huggingface/transformers` is
@@ -97,33 +96,6 @@ export function computeDependencyClosure(nodeModulesDir, seeds = SEED_PACKAGES)
  return closure;
 }

-/**
- * A package in the target tree counts as PRESENT only when its entrypoint
- * resolves from inside that tree — the same contract the Dockerfile's
- * post-build guard enforces. Next's file tracing can materialize a package
- * PARTIALLY (the package.json lands, the files its `main` points at do not),
- * and a directory-level `existsSync` check then skips the package forever
- * while the runtime dies with "Cannot find module <pkg>/dist/index.js".
- *
- * @param {string} targetNodeModulesDir
- * @param {string} name
- * @returns {boolean}
- */
-function isPackageIntact(targetNodeModulesDir, name) {
-  if (!existsSync(join(targetNodeModulesDir, name))) return false;
-  try {
-    const probe = createRequire(
-      join(targetNodeModulesDir, "__colocate_probe__.js")
-    );
-    const resolved = probe.resolve(name);
-    // A resolution that walked past the target into an ancestor tree does not
-    // prove the target copy is usable.
-    return resolved.startsWith(targetNodeModulesDir + sep);
-  } catch {
-    return false;
-  }
-}
-
 /**
 * Co-locate the SLM optional dependency closure from `<rootDir>/node_modules`
 * into a standalone bundle's `node_modules`.
@@ -170,12 +142,11 @@ export function colocateLlmlinguaOptionals({

  const closure = computeDependencyClosure(rootNm, seeds);

-  // Check the complete closure rather than only the entry package, and judge
-  // presence by entrypoint integrity — a partially traced directory (see
-  // isPackageIntact) must still receive its missing files.
+  // Check the complete closure rather than only the entry package. A partially
+  // populated bundle must still receive any missing transitive dependencies.
  if (
    closure.length > 0 &&
-    closure.every((name) => isPackageIntact(targetNm, name))
+    closure.every((name) => existsSync(join(targetNm, name)))
  ) {
    return { skipped: true, reason: "already co-located" };
  }
@@ -184,18 +155,11 @@ export function colocateLlmlinguaOptionals({

  for (const name of closure) {
    const dest = join(targetNm, name);
-    if (isPackageIntact(targetNm, name)) continue;
+    if (existsSync(dest)) continue;

    try {
      mkdirSync(dirname(dest), { recursive: true });
-      // force:false merges into a partially traced directory: files the trace
-      // already materialized are kept, missing ones (the package payload) are
-      // filled in from the root tree.
-      cpSync(join(rootNm, name), dest, {
-        recursive: true,
-        force: false,
-        errorOnExist: false,
-      });
+      cpSync(join(rootNm, name), dest, { recursive: true });
      copied++;
    } catch (err) {
      log(
--- a/scripts/build/pack-artifact-policy.ts
+++ b/scripts/build/pack-artifact-policy.ts
@@ -93,10 +93,6 @@ export const PACK_ARTIFACT_ROOT_ALLOWED_EXACT_PATHS: string[] = [
  // runtime; shipped via package.json "files", so it must be allowed here.
  "bin/aliasResolverHook.mjs",
  "bin/mcp-server.mjs",
-  // #9281: stdout/stderr console guard preloaded via `node --import` by
-  // bin/mcp-server.mjs before the MCP entry's module graph evaluates — without it
-  // the published CLI's `omniroute --mcp` crashes on the pathToFileURL() import.
-  "bin/mcpStdioConsoleGuard.mjs",
  "bin/nodeRuntimeSupport.mjs",
  "bin/omniroute.mjs",
  "bin/reset-password.mjs",
@@ -187,10 +183,6 @@ export const PACK_ARTIFACT_REQUIRED_PATHS: string[] = [
  "bin/cli/utils/storageKeyProvision.mjs",
  "bin/cli/utils/versionFastPath.mjs",
  "bin/mcp-server.mjs",
-  // #9281: stdout/stderr console guard preloaded via `node --import` by
-  // bin/mcp-server.mjs before the MCP entry's module graph evaluates — without it
-  // the published CLI's `omniroute --mcp` crashes on the pathToFileURL() import.
-  "bin/mcpStdioConsoleGuard.mjs",
  "bin/nodeRuntimeSupport.mjs",
  "bin/omniroute.mjs",
  // #7808: aliasResolver + its hook file. bin/omniroute.mjs imports
--- a/src/app/api/memory/[id]/route.ts
+++ b/src/app/api/memory/[id]/route.ts
@@ -1,10 +1,6 @@
 import { NextResponse } from "next/server";
 import { requireManagementAuth } from "@/lib/api/requireManagementAuth";
-// Import through the module index, NOT "@/lib/memory/manager" directly: the index's
-// import-time side effect is what calls memoryManager.register(sqliteBackend). Importing
-// the bare manager gives an EMPTY registry, so every handler here threw
-// `Primary backend "sqlite" not registered` and returned 500 (#8752).
-import { memoryManager } from "@/lib/memory";
+import { memoryManager } from "@/lib/memory/manager";
 import { validateBody, isValidationFailure } from "@/shared/validation/helpers";
 import { MemoryUpdatePutSchema } from "@/shared/schemas/memory";
 import { sanitizeErrorMessage } from "@omniroute/open-sse/utils/error.ts";
--- a/src/app/api/plugins/marketplace/install/route.ts
+++ b/src/app/api/plugins/marketplace/install/route.ts
@@ -1,14 +1,9 @@
 import { NextRequest, NextResponse } from "next/server";
-import { z } from "zod";
 import { CORS_HEADERS, handleCorsOptions } from "@/shared/utils/cors";
 import { buildErrorBody } from "@omniroute/open-sse/utils/error";
 import { installMarketplacePlugin } from "@/lib/plugins/marketplace";
 import { requireManagementAuth } from "@/lib/api/requireManagementAuth";

-const InstallBodySchema = z.object({
-  name: z.string().trim().min(1),
-});
-
 export async function OPTIONS() {
  return handleCorsOptions();
 }
@@ -20,14 +15,15 @@ export async function POST(request: NextRequest) {
  const authError = await requireManagementAuth(request);
  if (authError) return authError;
  try {
-    const parsed = InstallBodySchema.safeParse(await request.json());
-    if (!parsed.success) {
+    const body = await request.json();
+    const { name } = body as { name?: string };
+    if (!name || typeof name !== "string") {
      return NextResponse.json(buildErrorBody(400, "Missing or invalid 'name' field"), {
        status: 400,
        headers: CORS_HEADERS,
      });
    }
-    const result = await installMarketplacePlugin(parsed.data.name);
+    const result = await installMarketplacePlugin(name);
    return NextResponse.json(result, { status: 201, headers: CORS_HEADERS });
  } catch (err: unknown) {
    const msg = err instanceof Error ? err.message : "Failed to install marketplace plugin";
--- a/src/app/api/quota/pools/[id]/route.ts
+++ b/src/app/api/quota/pools/[id]/route.ts
@@ -73,7 +73,9 @@ export async function PATCH(request: Request, { params }: RouteParams): Promise<
    // helpers. Without the pre-update removal, a group/provider switch would leave
    // orphan qtSd/ combos a quota key still sees. Guarded + non-fatal.
    const combosNeedResync =
-      body !== null && typeof body === "object" && ("connectionIds" in body || "groupId" in body);
+      body !== null &&
+      typeof body === "object" &&
+      ("connectionIds" in body || "groupId" in body);
    if (combosNeedResync) {
      try {
        const { removeQuotaCombosForPool } = await import("@/lib/quota/quotaCombos");
@@ -104,7 +106,7 @@ export async function PATCH(request: Request, { params }: RouteParams): Promise<
        id,
        prevApiKeyIds,
        nextApiKeyIds,
-        parsed.data.exclusive ?? false
+        parsed.data.exclusive ?? false,
      );
    }

@@ -130,7 +132,7 @@ export async function DELETE(request: Request, { params }: RouteParams): Promise

  try {
    const { id } = await params;
-    const existed = await deletePool(id);
+    const existed = deletePool(id);
    if (!existed) {
      return NextResponse.json(buildErrorBody(404, "Pool not found"), { status: 404 });
    }
--- a/src/app/api/services/dario/admin/accounts/route.ts
+++ b/src/app/api/services/dario/admin/accounts/route.ts
@@ -11,15 +11,9 @@
 * and never reaches the browser.
 */

-import { z } from "zod";
-
 import { forwardToDarioAdmin, requireAdminAuth } from "../_lib";
 import { createErrorResponse } from "@/lib/api/errorResponse";

-const DeleteAccountBodySchema = z.object({
-  alias: z.string().trim().min(1).optional(),
-});
-
 export async function GET(request: Request): Promise<Response> {
  const authResponse = await requireAdminAuth(request);
  if (authResponse) return authResponse;
@@ -35,9 +29,9 @@ export async function DELETE(request: Request): Promise<Response> {

  if (!alias && request.body !== null) {
    try {
-      const parsed = DeleteAccountBodySchema.safeParse(await request.json());
-      if (parsed.success && parsed.data.alias) {
-        alias = parsed.data.alias;
+      const parsed = await request.json();
+      if (parsed && typeof parsed === "object" && typeof (parsed as { alias?: unknown }).alias === "string") {
+        alias = (parsed as { alias: string }).alias.trim();
      }
    } catch {
      /* fall through to the missing-alias error below */
--- a/src/app/api/services/dario/admin/import-from-omniroute/route.ts
+++ b/src/app/api/services/dario/admin/import-from-omniroute/route.ts
@@ -28,7 +28,6 @@
 * pickup, rather than relying on any undocumented hot-reload behavior.
 */

-import { z } from "zod";
 import { NextResponse } from "next/server";
 import fs from "node:fs";
 import path from "node:path";
@@ -40,11 +39,6 @@ import { getDarioHomeDir } from "@/lib/services/installers/dario";
 import { createErrorResponse } from "@/lib/api/errorResponse";
 import { sanitizeErrorMessage } from "@omniroute/open-sse/utils/error";

-const ImportBodySchema = z.object({
-  connectionId: z.string().trim().min(1).optional(),
-  alias: z.string().trim().min(1).optional(),
-});
-
 const ALIAS_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_\-.]{0,63}$/;

 function safeAliasFromSource(email: string | null | undefined, connectionId: string): string {
@@ -88,16 +82,15 @@ export async function POST(request: Request): Promise<Response> {
  const authResponse = await requireAdminAuth(request);
  if (authResponse) return authResponse;

-  let raw: unknown;
+  let body: unknown;
  try {
-    raw = await request.json();
+    body = await request.json();
  } catch {
    return createErrorResponse({ status: 400, message: "Invalid JSON body" });
  }

-  const parsed = ImportBodySchema.safeParse(raw ?? {});
-  const b = parsed.success ? parsed.data : {};
-  const connectionId = b.connectionId ?? null;
+  const b = (body || {}) as Record<string, unknown>;
+  const connectionId = typeof b.connectionId === "string" ? b.connectionId : null;
  if (!connectionId) {
    return createErrorResponse({ status: 400, message: "connectionId is required" });
  }
@@ -119,7 +112,10 @@ export async function POST(request: Request): Promise<Response> {
    });
  }

-  let alias = b.alias || safeAliasFromSource(conn.email as string | null, connectionId);
+  let alias =
+    typeof b.alias === "string" && b.alias.trim()
+      ? b.alias.trim()
+      : safeAliasFromSource(conn.email as string | null, connectionId);
  if (!ALIAS_PATTERN.test(alias)) {
    alias = safeAliasFromSource(conn.email as string | null, connectionId);
  }
--- a/src/app/api/services/dario/admin/login-start/route.ts
+++ b/src/app/api/services/dario/admin/login-start/route.ts
@@ -8,29 +8,23 @@
 * posts the displayed code to /login-complete.
 */

-import { z } from "zod";
 import { forwardToDarioAdmin, requireAdminAuth } from "../_lib";
 import { createErrorResponse } from "@/lib/api/errorResponse";

-const LoginStartBodySchema = z.object({
-  alias: z.string().trim().min(1).optional(),
-});
-type LoginStartBody = z.infer<typeof LoginStartBodySchema>;
-
 export async function POST(request: Request): Promise<Response> {
  const authResponse = await requireAdminAuth(request);
  if (authResponse) return authResponse;

-  let body: LoginStartBody = {};
+  let body: { alias?: string } = {};
  try {
    if (request.body !== null) {
-      const parsed = LoginStartBodySchema.safeParse(await request.json());
-      if (parsed.success) body = parsed.data;
+      const parsed = await request.json();
+      if (parsed && typeof parsed === "object") body = parsed as { alias?: string };
    }
  } catch {
    return createErrorResponse({ status: 400, message: "Invalid JSON body" });
  }

-  const forwardBody = body.alias ? { alias: body.alias } : {};
+  const forwardBody = typeof body.alias === "string" && body.alias.trim() ? { alias: body.alias.trim() } : {};
  return forwardToDarioAdmin({ method: "POST", path: "/admin/login/start", body: forwardBody });
 }
--- a/src/app/api/v1/_shared/audioProviderNodes.ts
+++ b/src/app/api/v1/_shared/audioProviderNodes.ts
@@ -24,7 +24,6 @@ import { getCachedProviderNodes } from "@/lib/db/readCache";
 import { isFeatureFlagEnabled } from "@/shared/utils/featureFlags";
 import {
  buildDynamicAudioProvider,
-  isLoopbackNodeHost,
  type AudioProvider,
  type ProviderNodeRow,
 } from "@omniroute/open-sse/config/audioRegistry.ts";
@@ -36,7 +35,19 @@ export const AUDIO_REMOTE_NODES_FLAG = "AUDIO_REMOTE_PROVIDER_NODES";
 * Loopback / private-range hosts that never leave the operator's machine or
 * Docker network. `::1` stays excluded, matching the previous SSRF hardening.
 */
-export { isLoopbackNodeHost as isLocalAudioNodeHost };
+export function isLocalAudioNodeHost(baseUrl: string): boolean {
+  try {
+    const hostname = new URL(baseUrl).hostname;
+    return (
+      hostname === "localhost" ||
+      hostname === "127.0.0.1" ||
+      // Strictly 172.16.0.0/12 (Docker/local)
+      /^172\.(1[6-9]|2[0-9]|3[0-1])\.\d{1,3}\.\d{1,3}$/.test(hostname)
+    );
+  } catch {
+    return false;
+  }
+}

 /**
 * Pure selection step — no DB, no flag lookup, so the policy is directly testable.
@@ -61,7 +72,7 @@ export function selectAudioProviderNodes(
      return false;
    }
    if (!node.baseUrl) return false;
-    return isLoopbackNodeHost(node.baseUrl) || allowRemote;
+    return isLocalAudioNodeHost(node.baseUrl) || allowRemote;
  });

  const providers: AudioProvider[] = [];
--- a/src/app/api/v1/models/catalog.ts
+++ b/src/app/api/v1/models/catalog.ts
@@ -1376,7 +1376,7 @@ async function buildUnifiedModelsResponseCore(
          continue;
        }

-        // #8958/#9034: honor the compatible-provider node prefix (as the synced/custom
+        // #8958: honor the compatible-provider node prefix (as the synced/custom
        // loops do) so an alias-backed entry publishes `prefix/model` instead of the
        // raw provider-node UUID. Without the providerIdToPrefix lookup, `alias` fell
        // through to `providerKey` (the UUID) and the dedupe below — which only checks
--- a/src/app/api/v1/muse-code/models/route.ts
+++ b/src/app/api/v1/muse-code/models/route.ts
@@ -0,0 +1,87 @@
+/**
+ * Muse Code CLI proprietary model catalog endpoint.
+ *
+ * Muse CLI calls GET /muse-code/models (or --base-url/muse-code/models)
+ * to discover available models. Returns the proprietary Muse format:
+ *
+ *   { object: "list", data: [{ id, object, created, owned_by, metadata }] }
+ *
+ * Each model's metadata includes: name, family, reasoning, tool_call,
+ * modalities, limit, cost.
+ */
+
+import { muse_codeProvider } from "@omniroute/open-sse/config/providers/registry/muse-code/index.ts";
+
+const MUSECODE_TIMESTAMP = Math.floor(Date.now() / 1000);
+
+interface MuseCodeModel {
+  id: string;
+  object: "model";
+  created: number;
+  owned_by: string;
+  metadata: {
+    name: string;
+    family: string;
+    reasoning: boolean;
+    tool_call: boolean;
+    modalities: string[];
+    limit: number;
+    cost: number;
+  };
+}
+
+function buildModelCatalog(): MuseCodeModel[] {
+  const data: MuseCodeModel[] = [];
+
+  for (const model of muse_codeProvider.models) {
+    let family = "llama";
+    if (model.id.includes("llama-4")) family = "llama-4";
+    else if (model.id.includes("llama-3.3")) family = "llama-3.3";
+    else if (model.id.includes("llama-3.2")) family = "llama-3.2";
+    else if (model.id.includes("llama-3.1")) family = "llama-3.1";
+
+    const modalities: string[] = ["text"];
+    if (model.supportsVision) modalities.push("image");
+
+    data.push({
+      id: model.id,
+      object: "model",
+      created: MUSECODE_TIMESTAMP,
+      owned_by: "meta",
+      metadata: {
+        name: model.name,
+        family,
+        reasoning: !!model.supportsReasoning,
+        tool_call: !!model.toolCalling,
+        modalities,
+        limit: model.contextLength ?? 200_000,
+        cost: model.id.includes("maverick") || model.id.includes("405b") ? 3 : 1,
+      },
+    });
+  }
+
+  return data;
+}
+
+// Cache the catalog for the lifetime of the process — model list is static.
+const CATALOG = buildModelCatalog();
+const CATALOG_PAYLOAD = JSON.stringify({ object: "list", data: CATALOG }, null, 2);
+
+export async function OPTIONS() {
+  return new Response(null, {
+    headers: {
+      "Access-Control-Allow-Methods": "GET, OPTIONS",
+      "Access-Control-Allow-Headers": "*",
+    },
+  });
+}
+
+export async function GET() {
+  return new Response(CATALOG_PAYLOAD, {
+    status: 200,
+    headers: {
+      "content-type": "application/json",
+      "cache-control": "public, max-age=3600",
+    },
+  });
+}
--- a/src/app/api/v1/vscode/[token]/usableChatModel.ts
+++ b/src/app/api/v1/vscode/[token]/usableChatModel.ts
@@ -13,9 +13,6 @@
 // happen once.

 export type UsableChatModelCandidate = {
-	id?: string;
-	root?: string;
-	name?: string;
 	owned_by?: string;
 	parent?: string | null;
 	type?: string;
@@ -47,19 +44,9 @@ function excludesTextOutputModality(model: UsableChatModelCandidate) {
 	);
 }

-function isBuiltinAutoModel(model: UsableChatModelCandidate): boolean {
-	const id = model.id || model.root || model.name || "";
-	const normalized = id.trim().toLowerCase();
-	return normalized === "auto" || normalized.startsWith("auto/");
-}
-
 export function isUsableChatModel(model: UsableChatModelCandidate) {
 	if (typeof model.owned_by === "string" && model.owned_by.trim().toLowerCase() === "combo") {
-		// Allow built-in auto-routing models (e.g. auto, auto/best-coding)
-		// while still excluding operator-created combos.
-		if (!isBuiltinAutoModel(model)) {
-			return false;
-		}
+		return false;
 	}
 	if (typeof model.parent === "string" && model.parent.length > 0) return false;
 	if (typeof model.type === "string" && model.type !== "chat") return false;
--- a/src/i18n/messages/vi.json
+++ b/src/i18n/messages/vi.json
@@ -5071,8 +5071,6 @@
    "noNewModelsAddedExisting": "Không có mô hình mới nào được thêm (tất cả đã tồn tại).",
    "importDoneCount": "✓ Hoàn tất! {count, plural, one {Đã nhập # mô hình.} other {Đã nhập # mô hình.}}",
    "unexpectedErrorOccurred": "Đã xảy ra lỗi không mong muốn",
-    "getApiKey": "Lấy khóa API",
-    "getApiKeyDescription": "Đăng ký hoặc tạo tài khoản để nhận khóa API",
    "connectionCountLabel": "{count, plural, one {# kết nối} other {# kết nối}}",
    "messagesPath": "messages",
    "responsesPath": "responses",
@@ -5203,18 +5201,6 @@
    "interceptFetchHint": "Ghi đè các lệnh gọi công cụ web_fetch gốc sang /v1/web/fetch của OmniRoute.",
    "interceptionLoadError": "Không thể tải cài đặt chặn: {error}",
    "interceptionSaveError": "Không thể lưu cài đặt chặn: {error}",
-    "ccAliasSectionTitle": "Hiển thị trong Claude Code (claude/…)",
-    "ccAliasSectionHint": "Công bố các mô hình của nhà cung cấp này dưới dạng id phản chiếu claude/&lt;provider&gt;/&lt;model&gt; để tính năng khám phá mô hình qua gateway của Claude Code có thể liệt kê chúng. Mặc định tắt — bật lên sẽ nhân đôi số mục trong danh mục với mọi client.",
-    "ccAliasProviderLevelLabel": "Mặc định của nhà cung cấp",
-    "ccAliasModelOverridesLabel": "Ghi đè theo từng mô hình",
-    "ccAliasModelOverrideAriaLabel": "Ghi đè cho {modelId}",
-    "ccAliasStateInherit": "Kế thừa",
-    "ccAliasStateOn": "Bật",
-    "ccAliasStateOff": "Tắt",
-    "ccAliasAddModelPlaceholder": "Id mô hình (ví dụ: gpt-4o)",
-    "ccAliasAddModelButton": "Thêm ghi đè",
-    "ccAliasLoadError": "Không tải được cài đặt bí danh khám phá: {error}",
-    "ccAliasSaveError": "Không lưu được cài đặt bí danh khám phá: {error}",
    "compatUpstreamHeadersLabel": "Các header upstream bổ sung",
    "compatUpstreamHeadersHint": "Cài đặt có đặc quyền cao — có cùng mức độ tin cậy như khi chỉnh sửa thông tin xác thực API của nhà cung cấp; chỉ quản trị viên đáng tin cậy mới nên sử dụng. Các header này được hợp nhất sau khi OmniRoute thêm thông tin xác thực từ khóa API của nhà cung cấp. Nếu một header tùy chỉnh có cùng tên với header hiện có (ví dụ: Authorization), giá trị của bạn sẽ thay thế hoàn toàn header được tạo tự động (bao gồm cả token Bearer) — máy chủ thượng nguồn chỉ nhận được nội dung bạn đã nhập, không phải khóa trong phần cài đặt. Cấu hình sai có thể gây ra lỗi 401 hoặc làm hỏng quá trình xác thực với máy chủ thượng nguồn. Mỗi hàng tương ứng với một header (ví dụ: header Authentication bổ sung cho một số cổng). Di chuột hoặc đặt tiêu điểm vào giá trị để xem trước. Tự động lưu khi mất tiêu điểm, nhấp ra ngoài hoặc đóng bảng điều khiển này.",
    "compatUpstreamHeaderName": "Tên header",
@@ -5489,13 +5475,6 @@
    "newApiUserIdLabel": "ID người dùng New-API",
    "newApiUserIdPlaceholder": "vd. 12345",
    "newApiUserIdHint": "Giá trị tiêu đề New-Api-User của AgentRouter, dùng cùng với khóa API console để lấy số dư hạn mức.",
-    "newApiAggregatorToggleLabel": "Cổng tổng hợp",
-    "newApiAggregatorToggleHint": "Bật phát hiện số dư cho các node tổng hợp New-API / One-API / Sub2API. Bảng điều khiển sẽ hiển thị huy hiệu số dư và định tuyến quota-preflight sẽ bỏ qua các tài khoản đã cạn.",
-    "newApiAggregatorConsoleApiKeyHint": "System Access Token cho endpoint /api/user/self của bộ tổng hợp. Không phải khóa API định tuyến.",
-    "newApiAggregatorUserIdHint": "Giá trị header New-Api-User dùng để lấy số dư quota của người dùng bộ tổng hợp.",
-    "newApiAggregatorQuotaPerUnitLabel": "Quota mỗi đơn vị",
-    "newApiAggregatorQuotaPerUnitHint": "Số đơn vị tín dụng New-API cho mỗi 1 USD (mặc định: 500000). Ghi đè nếu bộ tổng hợp của bạn dùng tỷ lệ khác.",
-    "featureFlagNewApiAggregatorBalanceDescription": "Bật phát hiện số dư cho các node tương thích New-API / One-API / Sub2API",
    "cpaModeDisabledTitle": "Chế độ tương thích CLIProxyAPI đã bị tắt",
    "cpaModeEnabledTitle": "Chế độ tương thích CLIProxyAPI đã được bật",
    "customUserAgentHint": "Gợi ý User Agent tùy chỉnh",
@@ -5611,7 +5590,6 @@
    "tagGroupPlaceholder": "Nhập nhóm thẻ...",
    "testModel": "Kiểm tra mô hình",
    "testingModel": "Đang kiểm tra mô hình",
-    "modelTestQuotaTooltip": "Đã hết quota — sẽ đặt lại vào ngày mai hoặc cần nạp thêm",
    "toggleOffShort": "Tắt",
    "toggleOnShort": "Bật",
    "tokenExpiredBadge": "Nhãn token đã hết hạn",
@@ -6030,7 +6008,27 @@
    "kimiOfficialSupporterTooltip": "Kimi (Moonshot AI) là người bạn mã nguồn mở sáng lập của OmniRoute",
    "cheaperInferenceSupporterBadge": "Người bạn mã nguồn mở",
    "cheaperInferenceSupporterTooltip": "Cheaper Inference hỗ trợ OmniRoute với tư cách là người bạn mã nguồn mở",
-    "kimiPartnerLinkNote": "Partner link — supports OmniRoute at no extra cost to you"
+    "kimiPartnerLinkNote": "Partner link — supports OmniRoute at no extra cost to you",
+    "ccAliasSectionTitle": "Hiển thị trong Claude Code (claude/…)",
+    "ccAliasSectionHint": "Công bố các mô hình của nhà cung cấp này dưới dạng id phản chiếu claude/&lt;provider&gt;/&lt;model&gt; để tính năng khám phá mô hình qua gateway của Claude Code có thể liệt kê chúng. Mặc định tắt — bật lên sẽ nhân đôi số mục trong danh mục với mọi client.",
+    "ccAliasProviderLevelLabel": "Mặc định của nhà cung cấp",
+    "ccAliasModelOverridesLabel": "Ghi đè theo từng mô hình",
+    "ccAliasModelOverrideAriaLabel": "Ghi đè cho {modelId}",
+    "ccAliasStateInherit": "Kế thừa",
+    "ccAliasStateOn": "Bật",
+    "ccAliasStateOff": "Tắt",
+    "ccAliasAddModelPlaceholder": "Id mô hình (ví dụ: gpt-4o)",
+    "ccAliasAddModelButton": "Thêm ghi đè",
+    "ccAliasLoadError": "Không tải được cài đặt bí danh khám phá: {error}",
+    "ccAliasSaveError": "Không lưu được cài đặt bí danh khám phá: {error}",
+    "newApiAggregatorToggleLabel": "Cổng tổng hợp",
+    "newApiAggregatorToggleHint": "Bật phát hiện số dư cho các node tổng hợp New-API / One-API / Sub2API. Bảng điều khiển sẽ hiển thị huy hiệu số dư và định tuyến quota-preflight sẽ bỏ qua các tài khoản đã cạn.",
+    "newApiAggregatorConsoleApiKeyHint": "System Access Token cho endpoint /api/user/self của bộ tổng hợp. Không phải khóa API định tuyến.",
+    "newApiAggregatorUserIdHint": "Giá trị header New-Api-User dùng để lấy số dư quota của người dùng bộ tổng hợp.",
+    "newApiAggregatorQuotaPerUnitLabel": "Quota mỗi đơn vị",
+    "newApiAggregatorQuotaPerUnitHint": "Số đơn vị tín dụng New-API cho mỗi 1 USD (mặc định: 500000). Ghi đè nếu bộ tổng hợp của bạn dùng tỷ lệ khác.",
+    "featureFlagNewApiAggregatorBalanceDescription": "Bật phát hiện số dư cho các node tương thích New-API / One-API / Sub2API",
+    "modelTestQuotaTooltip": "Đã hết quota — sẽ đặt lại vào ngày mai hoặc cần nạp thêm"
  },
  "settings": {
    "title": "Cài đặt",
--- a/src/lib/db/quotaPools.ts
+++ b/src/lib/db/quotaPools.ts
@@ -11,32 +11,8 @@
 import { getDbInstance } from "./core";
 // Phase B2: auto-mint/prune quotaShared-* combos when pool allocations change.
 // Imported lazily (dynamic import in the hook) to avoid circular-dependency
-// risk between db/ and quota/ modules. Sync hooks are fire-and-forget; deletion
-// awaits its guarded cleanup while metadata is available. Combo failures never
-// break pool CRUD.
-const quotaComboMaintenance = new Map<string, Promise<unknown>>();
-const deletingPools = new Set<string>();
-
-/** Reset module-level state for test isolation. Call in test.after() hooks. */
-export function resetQuotaPoolsModuleState(): void {
-  deletingPools.clear();
-  quotaComboMaintenance.clear();
-}
-
-function serializeQuotaComboMaintenance<T>(
-  poolId: string,
-  operation: () => Promise<T>
-): Promise<T> {
-  const previous = quotaComboMaintenance.get(poolId);
-  const current = previous ? previous.catch(() => undefined).then(operation) : operation();
-  quotaComboMaintenance.set(poolId, current);
-  const cleanup = () => {
-    if (quotaComboMaintenance.get(poolId) === current) quotaComboMaintenance.delete(poolId);
-  };
-  void current.then(cleanup, cleanup);
-  return current;
-}
-
+// risk between db/ and quota/ modules. The import is fire-and-forget; combo
+// failures never break pool CRUD.
 async function syncQuotaCombosGuarded(poolId: string): Promise<void> {
  try {
    const { syncQuotaCombos } = await import("@/lib/quota/quotaCombos");
@@ -424,7 +400,7 @@ export function createPool(input: PoolCreate): QuotaPool {
  );

  // Phase B2: fire-and-forget combo sync; failures are logged but never thrown.
-  void serializeQuotaComboMaintenance(id, () => syncQuotaCombosGuarded(id));
+  void syncQuotaCombosGuarded(id);

  return result;
 }
@@ -436,8 +412,6 @@ export function createPool(input: PoolCreate): QuotaPool {
 * connection_id (primary) is synced to connectionIds[0].
 */
 export function updatePool(id: string, input: PoolUpdate): QuotaPool | null {
-  if (deletingPools.has(id)) return null;
-
  const database = getDb();
  const existing = database
    .prepare<PoolRow>(
@@ -501,7 +475,7 @@ export function updatePool(id: string, input: PoolUpdate): QuotaPool | null {
  const result = rowToPool(existing, getAllocations(id));

  // Phase B2: fire-and-forget combo sync; failures are logged but never thrown.
-  void serializeQuotaComboMaintenance(id, () => syncQuotaCombosGuarded(id));
+  void syncQuotaCombosGuarded(id);

  return result;
 }
@@ -511,38 +485,28 @@ export function updatePool(id: string, input: PoolUpdate): QuotaPool | null {
 * Also removes join rows in quota_pool_connections.
 * Returns true if a row was deleted, false if not found.
 */
-export async function deletePool(id: string): Promise<boolean> {
-  if (deletingPools.has(id)) return false;
-  const exists = getDb().prepare<{ id: string }>("SELECT id FROM quota_pools WHERE id = ?").get(id);
-  if (!exists) return false;
-  deletingPools.add(id);
+export function deletePool(id: string): boolean {
+  // Phase B2: remove quota combos BEFORE deleting the pool row so that
+  // removeQuotaCombosForPool can still resolve the pool name → slug.
+  void removeQuotaCombosGuarded(id);

-  const deletion = serializeQuotaComboMaintenance(id, async () => {
-    // Phase B2: remove quota combos BEFORE deleting the pool row so that
-    // removeQuotaCombosForPool can still resolve the pool name → slug.
-    await removeQuotaCombosGuarded(id);
-
-    const database = getDb();
-    const doDelete = database.transaction(() => {
-      database.prepare("DELETE FROM quota_pool_connections WHERE pool_id = ?").run(id);
-      // Prune this pool id from every key's allowed_quotas JSON array.
-      database
-        .prepare(
-          `UPDATE api_keys SET allowed_quotas = COALESCE(
+  const database = getDb();
+  const doDelete = database.transaction(() => {
+    database.prepare("DELETE FROM quota_pool_connections WHERE pool_id = ?").run(id);
+    // Prune this pool id from every key's allowed_quotas JSON array.
+    database
+      .prepare(
+        `UPDATE api_keys SET allowed_quotas = COALESCE(
         (SELECT json_group_array(value) FROM json_each(api_keys.allowed_quotas) WHERE value != ?),
         '[]')
       WHERE allowed_quotas IS NOT NULL AND allowed_quotas != '[]'
         AND EXISTS (SELECT 1 FROM json_each(api_keys.allowed_quotas) WHERE value = ?)`
-        )
-        .run(id, id);
-      return database.prepare("DELETE FROM quota_pools WHERE id = ?").run(id);
-    });
-    const result = doDelete();
-    return result.changes > 0;
+      )
+      .run(id, id);
+    return database.prepare("DELETE FROM quota_pools WHERE id = ?").run(id);
  });
-  const clearDeleting = () => deletingPools.delete(id);
-  void deletion.then(clearDeleting, clearDeleting);
-  return deletion;
+  const result = doDelete();
+  return result.changes > 0;
 }

 /**
@@ -582,8 +546,6 @@ export async function deletePool(id: string): Promise<boolean> {
 * Runs atomically: all pool writes are inside a single SQLite transaction.
 */
 export function upsertAllocations(poolId: string, allocations: PoolAllocation[]): void {
-  if (deletingPools.has(poolId)) return;
-
  const database = getDb();

  // Normalize: when all weights are 0, distribute equally so the pool is usable
@@ -640,7 +602,7 @@ export function upsertAllocations(poolId: string, allocations: PoolAllocation[])

  // Phase B2: fire-and-forget combo sync for the target pool only; failures are
  // logged but never thrown. Sibling pools' combos are synced on their own lifecycle.
-  void serializeQuotaComboMaintenance(poolId, () => syncQuotaCombosGuarded(poolId));
+  void syncQuotaCombosGuarded(poolId);
 }

 /**
--- a/src/lib/modelMetadataRegistry.ts
+++ b/src/lib/modelMetadataRegistry.ts
@@ -345,10 +345,7 @@ function resolveCatalogPricing(
  // Consulted only when models.dev returned nothing, matching the order
  // already implemented in db/settings/pricing.ts::getPricing().
  try {
-    const litellm = getSyncedPricing() as unknown as Record<
-      string,
-      Record<string, Record<string, number>>
-    >;
+    const litellm = getSyncedPricing() as Record<string, Record<string, Record<string, number>>>;
    const providerPricing =
      findInsensitive(litellm, provider) || findInsensitive(litellm, provider.replace(/-cn$/, ""));
    if (providerPricing) {
--- a/src/lib/providerModels/modelDiscovery.ts
+++ b/src/lib/providerModels/modelDiscovery.ts
@@ -112,8 +112,7 @@ function parseEffortList(rawList: unknown): string[] | undefined {
        .map((entry) => {
          const entryParsed = effortEntrySchema.safeParse(entry);
          if (!entryParsed.success) return null;
-          const raw =
-            typeof entryParsed.data === "string" ? entryParsed.data : entryParsed.data.effort;
+          const raw = typeof entryParsed.data === "string" ? entryParsed.data : entryParsed.data.effort;
          return raw.length > 0 ? normalizeSupportedEffort(raw) : null;
        })
        .filter((effort): effort is string => effort !== null)
@@ -145,16 +144,6 @@ export function detectSupportedThinkingEfforts(record: JsonRecord): string[] | u
    }
  }

-  // #9160: fall back to `capabilities.effort_tiers` before the legacy fields.
-  // OmniRoute's own catalog surfaces effort tiers inside `capabilities.effort_tiers`,
-  // which the existing `parseEffortList` already handles (string arrays).
-  const capabilitiesRecord = asRecord(record.capabilities);
-  const capabilitiesParsed = effortListSchema.safeParse(capabilitiesRecord.effort_tiers);
-  if (capabilitiesParsed.success) {
-    const fromCapabilities = parseEffortList(capabilitiesRecord.effort_tiers);
-    if (fromCapabilities) return fromCapabilities;
-  }
-
  // #8347: fall back to `supported_reasoning_levels`, then `thinking.levels` — in that
  // order, per the regression guard for #7694 (the flat field and `reasoning.supported_efforts`
  // both take precedence over these two and are handled above / by the caller).
--- a/src/lib/quota/quotaCombos.ts
+++ b/src/lib/quota/quotaCombos.ts
@@ -152,10 +152,7 @@ export async function syncQuotaCombos(poolId: string): Promise<void> {
  for (const connId of pool.connectionIds) {
    let connection: Record<string, unknown> | null = null;
    try {
-      connection = (await getCachedProviderConnectionById(connId)) as Record<
-        string,
-        unknown
-      > | null;
+      connection = (await getCachedProviderConnectionById(connId)) as Record<string, unknown> | null;
    } catch {
      // Connection lookup failure — skip this connection.
      continue;
@@ -205,10 +202,6 @@ export async function syncQuotaCombos(poolId: string): Promise<void> {
    }));
    try {
      const existing = await getComboByName(comboName);
-      // A pool may be deleted while this fire-and-forget sync is awaiting combo
-      // lookups. Re-check immediately before the synchronous DB upsert so stale
-      // create/update work cannot recreate managed combos after delete cleanup.
-      if (!getPool(poolId)) return;
      const payload = {
        name: comboName,
        models: steps,
--- a/src/lib/radar/feedSchema.ts
+++ b/src/lib/radar/feedSchema.ts
@@ -217,3 +217,4 @@ export type RadarProvider = z.infer<typeof ProviderSchema>;
 export type RadarQuirk = z.infer<typeof QuirkSchema>;
 export type RadarBudget = z.infer<typeof BudgetSchema>;
 export type RadarReferral = z.infer<typeof RadarReferralSchema>;
+export type RadarReferrals = z.infer<typeof RadarReferralsSchema>;
--- a/src/server/authz/policies/management.ts
+++ b/src/server/authz/policies/management.ts
@@ -253,39 +253,6 @@ export const managementPolicy: RoutePolicy = {
      return allow({ kind: "management_key", id: "cli", label: "local-cli-token" });
    }

-    // MCP path carve-out (#9159): accept mcp:connect, manage, or admin
-    // scope for /api/mcp/* from any origin (loopback, private LAN, or remote).
-    // Loopback/LAN requests skip the Tier 1 bypass gate above, so with
-    // requireLogin=true they would fall through to the generic API-key check
-    // which only accepts manage/admin -- rejecting mcp:connect-only keys.
-    // This carve-out mirrors the existing Tier 1 MCP check but without the
-    // locality guard, so it catches the loopback/LAN requests that the Tier 1
-    // gate does not reach.
-    if (path.startsWith("/api/mcp/")) {
-      const apiKey = extractApiKey(ctx.request as unknown as Request, { allowUrl: false });
-      if (apiKey) {
-        try {
-          if (await isValidApiKey(apiKey)) {
-            const meta = await getApiKeyMetadata(apiKey);
-            if (meta && hasMcpConnectOrManageScope(meta.scopes)) {
-              const grantedBy = meta.scopes.includes("admin")
-                ? "admin"
-                : meta.scopes.includes("manage")
-                  ? "manage"
-                  : "mcp-connect";
-              return allow({
-                kind: "management_key",
-                id: meta.id,
-                label: `api-key-${grantedBy}-scope-mcp-carve-out`,
-              });
-            }
-          }
-        } catch {
-          return reject(503, "AUTH_BACKEND_UNAVAILABLE", "Service temporarily unavailable");
-        }
-      }
-    }
-
    // Tier 2: always-protected routes skip the requireLogin=false bypass.
    if (!isAlwaysProtectedPath(path) && !(await isAuthRequired(ctx.request))) {
      return allow({ kind: "anonymous", id: "anonymous", label: "auth-disabled" });
--- a/src/shared/constants/clientIdentityProfiles.ts
+++ b/src/shared/constants/clientIdentityProfiles.ts
@@ -51,6 +51,13 @@ const GEMINI_CLI_PROFILE: ClientIdentityProfile = Object.freeze({
    "User-Agent": "GeminiCLI/0.1.0 (linux; x64)",
  }),
 });
+const MUSE_CLI_PROFILE: ClientIdentityProfile = Object.freeze({
+  id: "muse-cli",
+  label: "Muse Code CLI",
+  headers: Object.freeze({
+    "User-Agent": "MuseCodeCLI/0.1.0 (linux; x64)",
+  }),
+});

 /** Ordered so `CLIENT_IDENTITY_PROFILE_OPTIONS` renders "Default" first. */
 export const CLIENT_IDENTITY_PROFILES: Readonly<Record<string, ClientIdentityProfile>> =
@@ -59,6 +66,7 @@ export const CLIENT_IDENTITY_PROFILES: Readonly<Record<string, ClientIdentityPro
    "claude-cli": CLAUDE_CLI_PROFILE,
    "codex-cli": CODEX_CLI_PROFILE,
    "gemini-cli": GEMINI_CLI_PROFILE,
+    "muse-cli": MUSE_CLI_PROFILE,
  });

 export const CLIENT_IDENTITY_PROFILE_IDS: readonly string[] = Object.keys(CLIENT_IDENTITY_PROFILES);
--- a/src/shared/constants/providers/apikey/frontier-labs.ts
+++ b/src/shared/constants/providers/apikey/frontier-labs.ts
@@ -275,4 +275,19 @@ export const APIKEY_PROVIDERS_FRONTIER = {
      "Writer Palmyra is OpenAI-compatible at https://api.writer.com/v1. palmyra-x5 offers a 1M-token context window.",
    hasFree: false,
  },
+  "muse-code": {
+    id: "muse-code",
+    alias: "mc",
+    name: "Muse Code (Meta)",
+    icon: "auto_awesome",
+    color: "#0866FF",
+    textIcon: "MC",
+    website: "https://github.com/meta-llama/llama-stack",
+    authHint:
+      "Use your META_API_KEY env var as a Bearer token. Muse Code CLI uses the OpenAI Responses API wire format (POST /responses).",
+    apiHint:
+      "Muse Code is OpenAI-compatible. OmniRoute routes chat traffic through the Responses API and exposes the proprietary model catalog at /v1/muse-code/models.",
+    passthroughModels: true,
+    hasFree: false,
+  },
 };
--- a/src/shared/utils/classify429.ts
+++ b/src/shared/utils/classify429.ts
@@ -67,14 +67,6 @@ const QUOTA_PATTERNS: ReadonlyArray<RegExp> = [
  // ~60s against a budget that only resets at UTC midnight.
  /daily free allocation/i,

-  // OmniRoute auth-layer synthetic 429 (Issue #9269).
-  // Body: "All antigravity accounts have exhausted their quota (reset after 5m)"
-  // Produced by auth.ts line 1477 when every account for a provider has
-  // exhausted its quota. Without this pattern, the message is classified as
-  // a transient rate-limit and the combo loop burns retries against the
-  // same provider instead of falling back to a healthy one.
-  /have exhausted their quota/i,
-
  // Modal-hosted OpenAI-compatible endpoints (e.g. self-hosted Kimi K3).
  // Body: {"error":"usage limit reached"}, no nested "message"/"quota"/
  // "daily" wording. Without this pattern the 429 falls through to
--- a/src/sse/handlers/chat.ts
+++ b/src/sse/handlers/chat.ts
@@ -714,20 +714,6 @@ async function handleChatImplementation(
    ) => {
      if (isComboLiveTest) return true;

-      // #9057: for keys with model restrictions (allowedModels or disableNonPublicModels),
-      // run isModelAllowedForKey even for auto/* models. The API-key policy gate
-      // (validateModelAccess in apiKeyPolicy.ts) treats auto/* as a virtual combo and
-      // skips isModelAllowedForKey, so the per-candidate check here is the only
-      // enforcement point during combo routing. Without it, a key with
-      // disableNonPublicModels=true can reach free/prohibited models through auto/*.
-      const hasModelRestrictions =
-        apiKeyInfo &&
-        (Boolean(apiKeyInfo.allowedModels?.length) || apiKeyInfo.disableNonPublicModels === true);
-      if (hasModelRestrictions && apiKey) {
-        const modelAllowed = await isModelAllowedForKey(apiKey, modelString);
-        if (!modelAllowed) return false;
-      }
-
      // Use getModelInfo to resolve custom prefixes, but prefer the combo
      // target's providerId when available — the model string's provider
      // prefix may differ from the credential provider ID (e.g. model
@@ -1362,7 +1348,7 @@ async function handleSingleModelChat(
        const breakerFailureStatus = Number(lastStatus ?? credentials?.lastErrorCode);
        if (
          !forceLiveComboTest &&
-          credentials?.allRateLimited &&
+          isAllRateLimited &&
          PROVIDER_BREAKER_FAILURE_STATUSES.has(breakerFailureStatus)
        ) {
          breaker._onFailure();
--- a/src/sse/services/auth.ts
+++ b/src/sse/services/auth.ts
@@ -775,15 +775,9 @@ function providerCanUseSyntheticNoAuthFallback(providerId: string): boolean {

 async function maybeSyntheticNoAuthFallback(
  providerId: string,
-  excludedConnectionIds: Set<string>,
-  allowedConnections: string[] | null = null
+  excludedConnectionIds: Set<string>
 ) {
  if (!providerCanUseSyntheticNoAuthFallback(providerId)) return null;
-  // #9057: a key pinned to specific connections via allowedConnections must
-  // NOT receive the synthetic "noauth" connection — the synthetic id is
-  // never in an explicit allowlist, so returning it would let a restricted
-  // key reach free providers (felo-chat, etc.) that it should not access.
-  if (Array.isArray(allowedConnections) && allowedConnections.length > 0) return null;
  if (excludedConnectionIds.has(SYNTHETIC_NOAUTH_CONNECTION_ID)) return null;
  // #4954: hydrate per-account proxy/rotation config off the connection row so
  // no-auth executors (opencode, mimocode) actually honor configured proxies.
@@ -1012,14 +1006,7 @@ export async function getProviderCredentials(
        excludeConnectionId,
        options.excludeConnectionIds
      );
-      // #9057: when allowedConnections is set, the synthetic "noauth" connection
-      // is never in the explicit allowlist, so we must NOT return it — fall through
-      // to the normal connection-selection path so the connection allowlist is
-      // respected (the no-auth provider will be rejected if it has no real connections
-      // matching the allowlist, or a real connection row will be selected if present).
-      if (!allowedConnections || allowedConnections.length === 0) {
-        return await maybeSyntheticNoAuthFallback(resolvedId, excludedForNoAuth);
-      }
+      return await maybeSyntheticNoAuthFallback(resolvedId, excludedForNoAuth);
    }

    const allowSuppressedConnections = options.allowSuppressedConnections === true;
@@ -1146,8 +1133,7 @@ export async function getProviderCredentials(
        if (terminalConnections.length === allConnections.length) {
          const syntheticFallback = await maybeSyntheticNoAuthFallback(
            resolvedId,
-            excludedConnectionIds,
-            allowedConnections
+            excludedConnectionIds
          );
          if (syntheticFallback) return syntheticFallback;

@@ -1167,8 +1153,7 @@ export async function getProviderCredentials(
      }
      const syntheticFallback = await maybeSyntheticNoAuthFallback(
        resolvedId,
-        excludedConnectionIds,
-        allowedConnections
+        excludedConnectionIds
      );
      if (syntheticFallback) return syntheticFallback;
      log.warn("AUTH", `No credentials for ${provider}`);
@@ -1367,8 +1352,7 @@ export async function getProviderCredentials(
      }
      const syntheticFallback = await maybeSyntheticNoAuthFallback(
        resolvedId,
-        excludedConnectionIds,
-        allowedConnections
+        excludedConnectionIds
      );
      if (syntheticFallback) return syntheticFallback;
      log.warn("AUTH", `${provider} | all ${connections.length} accounts unavailable`);
--- a/stryker.conf.json
+++ b/stryker.conf.json
@@ -39,7 +39,9 @@
  "incremental": true,
  "incrementalFile": "reports/mutation/stryker-incremental.json",
  "testRunner": "tap",
-  "plugins": ["@stryker-mutator/tap-runner"],
+  "plugins": [
+    "@stryker-mutator/tap-runner"
+  ],
  "tap": {
    "testFiles": [
      "tests/unit/7993-noauth-proxy-routing.test.ts",
@@ -50,7 +52,6 @@
      "tests/unit/8376-econnrefused-breaker.test.ts",
      "tests/unit/8396-cooldown-429-cap.test.ts",
      "tests/unit/8488-capability-filter-fail-closed.test.ts",
-      "tests/unit/8779-agy-prefix-credential-lookup.test.ts",
      "tests/unit/account-fallback-anthropic-quota.test.ts",
      "tests/unit/account-fallback-cf1010-no-retry-8775.test.ts",
      "tests/unit/account-fallback-lockout-eviction.test.ts",
@@ -84,7 +85,6 @@
      "tests/unit/auto-combo-engine.test.ts",
      "tests/unit/auto-combo-scoring-clamp.test.ts",
      "tests/unit/bug-7940-gemini-retrydelay.test.ts",
-      "tests/unit/bug-9204-agy-provider-alias-credentials.test.ts",
      "tests/unit/build/check-circular-deps.test.ts",
      "tests/unit/cache-sweeps.test.ts",
      "tests/unit/cc-bridge-openai-image-7777.test.ts",
@@ -191,7 +191,6 @@
      "tests/unit/combo/combo-target-timeout-standards.test.ts",
      "tests/unit/combo/effective-max-concurrency.test.ts",
      "tests/unit/combo/recovery-hint.test.ts",
-      "tests/unit/combo/reset-window-strategy-9330.test.ts",
      "tests/unit/complexity-aware-scoring-wiring.test.ts",
      "tests/unit/compression-header-verification.test.ts",
      "tests/unit/context-pinning-tool-calls.test.ts",
@@ -251,7 +250,6 @@
      "tests/unit/observability-payloads.test.ts",
      "tests/unit/ollama-cloud-weekly-quota-cooldown-3709.test.ts",
      "tests/unit/openapi-security-tiers.test.ts",
-      "tests/unit/openrouter-passthrough-models.test.ts",
      "tests/unit/openrouter-quota-6842.test.ts",
      "tests/unit/persist-429-cooldown-account-fallback.test.ts",
      "tests/unit/plan3-p0.test.ts",
@@ -273,7 +271,6 @@
      "tests/unit/rate-limit-manager.test.ts",
      "tests/unit/rate-limit-queue-timeout-lockout.test.ts",
      "tests/unit/repro-7503-no-choices.test.ts",
-      "tests/unit/repro-9630-combo-false-503.test.ts",
      "tests/unit/repro-antigravity-404-family-cooldown-hijack.test.ts",
      "tests/unit/responses-handler.test.ts",
      "tests/unit/rotation-config-omniroute.test.ts",
@@ -431,7 +428,11 @@
    ".worktrees",
    ".stryker-tmp"
  ],
-  "reporters": ["progress", "html", "json"],
+  "reporters": [
+    "progress",
+    "html",
+    "json"
+  ],
  "htmlReporter": {
    "fileName": "reports/mutation/mutation.html"
  },
--- a/tests/integration/combo-matrix/context-relay-codex.test.ts
+++ b/tests/integration/combo-matrix/context-relay-codex.test.ts
@@ -62,12 +62,6 @@ const { getHandoff } = await import("../../../src/lib/db/contextHandoffs.ts");
 // ── Constants ─────────────────────────────────────────────────────────────────

 const CODEX_COMBO_NAME = "m-relay-codex-quota";
-// The control test needs its OWN combo name. resetStorage() unlinks the DB file
-// between tests, but the previous better-sqlite3 handle survives the unlink and
-// keeps writing to the same inode, so reusing the name here failed with
-// `UNIQUE constraint failed: combos.name` — a test-isolation defect, not a
-// routing one (the assertion below does not depend on the name).
-const CONTROL_COMBO_NAME = "m-relay-openai-control";
 const SESSION_HEADER_VALUE = "relay-codex-quota-001";
 const SESSION_ID = `ext:${SESSION_HEADER_VALUE}`;

@@ -77,7 +71,8 @@ const CODEX_RESPONSES_HOST = "chatgpt.com/backend-api/codex/responses";

 // Summary JSON that parseHandoffJSON will successfully parse.
 const CODEX_SUMMARY_JSON = JSON.stringify({
-  summary: "User is implementing a TypeScript context-relay codex quota-handoff test using TDD.",
+  summary:
+    "User is implementing a TypeScript context-relay codex quota-handoff test using TDD.",
  keyDecisions: ["codex provider selected", "quota threshold at 90%"],
  taskProgress: "writing deterministic integration test for codex handoff",
  activeEntities: ["combo.ts", "codexQuotaFetcher.ts", "contextHandoff.ts"],
@@ -147,11 +142,11 @@ function buildCodexUsageBody(

 // ── Request builder ───────────────────────────────────────────────────────────

-function codexRequest(withSessionId = true, comboName = CODEX_COMBO_NAME) {
+function codexRequest(withSessionId = true) {
  return buildRequest({
    headers: withSessionId ? { "x-session-id": SESSION_HEADER_VALUE } : {},
    body: {
-      model: comboName,
+      model: CODEX_COMBO_NAME,
      stream: false,
      messages: [{ role: "user", content: "Write a TypeScript hello world." }],
    },
@@ -264,7 +259,9 @@ test("context-relay codex quota handoff: fires and expiresAt matches session-win
    name: CODEX_COMBO_NAME,
    strategy: "context-relay",
    config: { maxRetries: 0, retryDelayMs: 0, stickyRoundRobinLimit: 1 },
-    models: [{ id: "rc-codex-1", kind: "model", providerId: "codex", model: "gpt-5.3-codex" }],
+    models: [
+      { id: "rc-codex-1", kind: "model", providerId: "codex", model: "gpt-5.3-codex" },
+    ],
  });

  // 4. Compute quota reset times (future timestamps).
@@ -331,10 +328,12 @@ test("context-relay codex quota handoff: does NOT fire when provider is openai (
  await seedConnection("openai", { apiKey: "sk-openai-control-no-codex-block" });

  await combosDb.createCombo({
-    name: CONTROL_COMBO_NAME,
+    name: CODEX_COMBO_NAME,
    strategy: "context-relay",
    config: { maxRetries: 0, retryDelayMs: 0, stickyRoundRobinLimit: 1 },
-    models: [{ id: "rc-openai-ctrl", kind: "model", providerId: "openai", model: "gpt-4o-mini" }],
+    models: [
+      { id: "rc-openai-ctrl", kind: "model", providerId: "openai", model: "gpt-4o-mini" },
+    ],
  });

  const seenUrls: string[] = [];
@@ -343,7 +342,7 @@ test("context-relay codex quota handoff: does NOT fire when provider is openai (
    return buildOpenAIResponse("assistant reply ok");
  };

-  const r = await handleChat(codexRequest(true, CONTROL_COMBO_NAME));
+  const r = await handleChat(codexRequest(true));
  assert.equal(r.status, 200, "openai request must return 200");

  // Give setImmediate time to fire if the block were incorrectly entered.
@@ -359,7 +358,7 @@ test("context-relay codex quota handoff: does NOT fire when provider is openai (
  // No codex quota handoff record in DB.
  // (The universal handoff also does not fire because no prior model is seeded,
  // so getLastSessionModel returns null → no model switch detected.)
-  const handoff = getHandoff(SESSION_ID, CONTROL_COMBO_NAME);
+  const handoff = getHandoff(SESSION_ID, CODEX_COMBO_NAME);
  assert.equal(
    handoff,
    null,
--- a/tests/integration/quota-pool-delete-combo-cleanup.test.ts
+++ b/tests/integration/quota-pool-delete-combo-cleanup.test.ts
@@ -1,427 +0,0 @@
-import test from "node:test";
-import assert from "node:assert/strict";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { makeManagementSessionRequest } from "../helpers/managementSession.ts";
-
-const TEST_DATA_DIR = fs.mkdtempSync(
-  path.join(os.tmpdir(), "omniroute-quota-pool-delete-combo-cleanup-")
-);
-process.env.DATA_DIR = TEST_DATA_DIR;
-process.env.API_KEY_SECRET = "test-quota-pool-delete-combo-cleanup-secret";
-
-const core = await import("../../src/lib/db/core.ts");
-const apiKeysDb = await import("../../src/lib/db/apiKeys.ts");
-const combosDb = await import("../../src/lib/db/combos.ts");
-const groupsDb = await import("../../src/lib/db/quotaGroups.ts");
-const poolsDb = await import("../../src/lib/db/quotaPools.ts");
-const providersDb = await import("../../src/lib/db/providers.ts");
-const compliance = await import("../../src/lib/compliance/index.ts");
-const poolIdRoute = await import("../../src/app/api/quota/pools/[id]/route.ts");
-const { removeQuotaCombosForPool, syncQuotaCombos } =
-  await import("../../src/lib/quota/quotaCombos.ts");
-const { parseQuotaModelName, quotaGroupSlug } =
-  await import("../../src/lib/quota/quotaModelNaming.ts");
-
-type Combo = Awaited<ReturnType<typeof combosDb.getCombos>>[number];
-
-type Db = {
-  prepare: (sql: string) => {
-    all: (...params: unknown[]) => unknown[];
-    get: (...params: unknown[]) => unknown;
-  };
-};
-
-function resetDb() {
-  core.resetDbInstance();
-  apiKeysDb.resetApiKeyState();
-  fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
-  fs.mkdirSync(TEST_DATA_DIR, { recursive: true });
-}
-
-function quotaNamesFor(combos: Combo[], groupName: string, provider: string): string[] {
-  const groupSlug = quotaGroupSlug(groupName);
-  return combos
-    .map((combo) => (typeof combo.name === "string" ? combo.name : ""))
-    .filter((name) => {
-      const parsed = parseQuotaModelName(name);
-      return parsed?.groupSlug === groupSlug && parsed.provider === provider;
-    })
-    .sort();
-}
-
-async function createConnection(provider: "openrouter" | "baidu", name: string) {
-  const connection = await providersDb.createProviderConnection({
-    provider,
-    authType: "apikey",
-    name,
-    apiKey: `test-only-${name}`,
-  });
-  const id = (connection as Record<string, unknown>).id;
-  assert.equal(typeof id, "string", `${provider} connection should have an id`);
-  return id as string;
-}
-
-async function deletePoolThroughRoute(poolId: string): Promise<Response> {
-  const request = await makeManagementSessionRequest(`http://localhost/api/quota/pools/${poolId}`, {
-    method: "DELETE",
-  });
-  return poolIdRoute.DELETE(request, { params: Promise.resolve({ id: poolId }) });
-}
-
-function getAllowedQuotas(apiKeyId: string): string[] {
-  const db = core.getDbInstance() as unknown as Db;
-  const row = db.prepare("SELECT allowed_quotas FROM api_keys WHERE id = ?").get(apiKeyId) as {
-    allowed_quotas: string;
-  };
-  return JSON.parse(row.allowed_quotas) as string[];
-}
-
-function countRows(sql: string, id: string): number {
-  const db = core.getDbInstance() as unknown as Db;
-  const row = db.prepare(sql).get(id) as { count: number };
-  return row.count;
-}
-
-function nextImmediate(): Promise<void> {
-  return new Promise((resolve) => setImmediate(resolve));
-}
-
-test.beforeEach(() => {
-  resetDb();
-  compliance.initAuditLog();
-});
-
-test.after(() => {
-  core.resetDbInstance();
-  fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
-});
-
-test("DELETE pool waits for scoped quota-combo cleanup before returning 204", async () => {
-  const targetGroup = groupsDb.createGroup("Delete Target Group");
-  const otherGroup = groupsDb.createGroup("Delete Other Group");
-  const targetConnectionId = await createConnection("openrouter", "delete-target-openrouter");
-  const sameGroupConnectionId = await createConnection("baidu", "delete-control-baidu");
-  const otherGroupConnectionId = await createConnection("openrouter", "delete-control-openrouter");
-  const apiKey = await apiKeysDb.createApiKey("Delete Pool Key", "delete-pool-machine");
-
-  const targetPool = poolsDb.createPool({
-    connectionId: targetConnectionId,
-    name: "Delete Target Pool",
-    groupId: targetGroup.id,
-    allocations: [{ apiKeyId: apiKey.id, weight: 100, policy: "hard" }],
-  });
-  const sameGroupPool = poolsDb.createPool({
-    connectionId: sameGroupConnectionId,
-    name: "Same Group Different Provider",
-    groupId: targetGroup.id,
-  });
-  const otherGroupPool = poolsDb.createPool({
-    connectionId: otherGroupConnectionId,
-    name: "Different Group Same Provider",
-    groupId: otherGroup.id,
-  });
-  await apiKeysDb.updateApiKeyPermissions(apiKey.id, {
-    allowedQuotas: [targetPool.id, otherGroupPool.id],
-  });
-
-  await syncQuotaCombos(targetPool.id);
-  await syncQuotaCombos(sameGroupPool.id);
-  await syncQuotaCombos(otherGroupPool.id);
-  await nextImmediate();
-  await nextImmediate();
-  const ordinaryCombo = await combosDb.createCombo({
-    name: "ordinary-delete-control",
-    models: [{ kind: "model", model: "openrouter/control-model", weight: 100 }],
-    strategy: "priority",
-  });
-
-  const before = await combosDb.getCombos();
-  const targetNames = quotaNamesFor(before, targetGroup.name, "openrouter");
-  const sameGroupControlNames = quotaNamesFor(before, targetGroup.name, "baidu");
-  const otherGroupControlNames = quotaNamesFor(before, otherGroup.name, "openrouter");
-  assert.ok(targetNames.length > 0, "target openrouter quota combos must exist before DELETE");
-  assert.ok(sameGroupControlNames.length > 0, "same-group baidu control combos must exist");
-  assert.ok(otherGroupControlNames.length > 0, "other-group openrouter control combos must exist");
-  assert.ok(
-    await combosDb.getComboByName(ordinaryCombo.name as string),
-    "ordinary combo must exist"
-  );
-  assert.ok(poolsDb.getPool(targetPool.id), "target pool row must exist before DELETE");
-  assert.equal(
-    countRows(
-      "SELECT count(*) AS count FROM quota_pool_connections WHERE pool_id = ?",
-      targetPool.id
-    ),
-    1
-  );
-  assert.equal(
-    countRows("SELECT count(*) AS count FROM quota_allocations WHERE pool_id = ?", targetPool.id),
-    1
-  );
-  assert.deepEqual(getAllowedQuotas(apiKey.id), [targetPool.id, otherGroupPool.id]);
-
-  const response = await deletePoolThroughRoute(targetPool.id);
-
-  assert.equal(response.status, 204);
-  const after = await combosDb.getCombos();
-  assert.deepEqual(
-    quotaNamesFor(after, targetGroup.name, "openrouter"),
-    [],
-    "DELETE must not return while target group+provider quota combos remain"
-  );
-  assert.deepEqual(
-    quotaNamesFor(after, targetGroup.name, "baidu"),
-    sameGroupControlNames,
-    "same-group combos for another provider must remain byte/name-identical"
-  );
-  assert.deepEqual(
-    quotaNamesFor(after, otherGroup.name, "openrouter"),
-    otherGroupControlNames,
-    "same-provider combos for another group must remain byte/name-identical"
-  );
-  assert.deepEqual(
-    await combosDb.getComboByName(ordinaryCombo.name as string),
-    ordinaryCombo,
-    "ordinary user combo must remain unchanged"
-  );
-  assert.equal(poolsDb.getPool(targetPool.id), null);
-  assert.equal(
-    countRows(
-      "SELECT count(*) AS count FROM quota_pool_connections WHERE pool_id = ?",
-      targetPool.id
-    ),
-    0
-  );
-  assert.equal(
-    countRows("SELECT count(*) AS count FROM quota_allocations WHERE pool_id = ?", targetPool.id),
-    0
-  );
-  assert.deepEqual(getAllowedQuotas(apiKey.id), [otherGroupPool.id]);
-  const auditEvents = compliance.getAuditLog({ action: "quota.pool.deleted", limit: 10 });
-  assert.ok(
-    auditEvents.some(
-      (event) =>
-        typeof event === "object" &&
-        event !== null &&
-        (event as Record<string, unknown>).target === targetPool.id
-    ),
-    "successful DELETE must record quota.pool.deleted audit event"
-  );
-});
-
-test("DELETE prevents an in-flight create sync from recreating quota combos", async () => {
-  const group = groupsDb.createGroup("Immediate Create Delete Group");
-  const connectionId = await createConnection("openrouter", "immediate-create-delete");
-  const pool = poolsDb.createPool({
-    connectionId,
-    name: "Immediate Create Delete Pool",
-    groupId: group.id,
-  });
-
-  const deleted = await poolsDb.deletePool(pool.id);
-  await nextImmediate();
-  await nextImmediate();
-
-  assert.equal(deleted, true);
-  assert.equal(poolsDb.getPool(pool.id), null);
-  assert.deepEqual(
-    quotaNamesFor(await combosDb.getCombos(), group.name, "openrouter"),
-    [],
-    "a create sync already in flight must not mint quota combos after pool deletion"
-  );
-});
-
-test("DELETE prevents an in-flight update sync from recreating quota combos", async () => {
-  const group = groupsDb.createGroup("Immediate Update Delete Group");
-  const connectionId = await createConnection("openrouter", "immediate-update-delete");
-  const pool = poolsDb.createPool({
-    connectionId,
-    name: "Immediate Update Delete Pool",
-    groupId: group.id,
-  });
-  await syncQuotaCombos(pool.id);
-  await nextImmediate();
-  await nextImmediate();
-  await removeQuotaCombosForPool(pool.id);
-  assert.deepEqual(quotaNamesFor(await combosDb.getCombos(), group.name, "openrouter"), []);
-
-  assert.ok(poolsDb.updatePool(pool.id, { name: "Updated Then Deleted Pool" }));
-  const deleted = await poolsDb.deletePool(pool.id);
-  await nextImmediate();
-  await nextImmediate();
-
-  assert.equal(deleted, true);
-  assert.equal(poolsDb.getPool(pool.id), null);
-  assert.deepEqual(
-    quotaNamesFor(await combosDb.getCombos(), group.name, "openrouter"),
-    [],
-    "an update sync already in flight must not recreate quota combos after pool deletion"
-  );
-});
-
-test("DELETE rejects a synchronous pool update once deletion has started", async () => {
-  const oldGroup = groupsDb.createGroup("Deleting Pool Old Group");
-  const newGroup = groupsDb.createGroup("Deleting Pool New Group");
-  const connectionId = await createConnection("openrouter", "delete-update-race");
-  const pool = poolsDb.createPool({
-    connectionId,
-    name: "Delete Update Race Pool",
-    groupId: oldGroup.id,
-  });
-  await syncQuotaCombos(pool.id);
-  await nextImmediate();
-  await nextImmediate();
-  assert.ok(quotaNamesFor(await combosDb.getCombos(), oldGroup.name, "openrouter").length > 0);
-
-  const deleting = poolsDb.deletePool(pool.id);
-  const updated = poolsDb.updatePool(pool.id, { groupId: newGroup.id });
-  const deleted = await deleting;
-  await nextImmediate();
-  await nextImmediate();
-
-  assert.equal(updated, null, "a pool must become immutable as soon as deletion starts");
-  assert.equal(deleted, true);
-  assert.equal(poolsDb.getPool(pool.id), null);
-  assert.deepEqual(quotaNamesFor(await combosDb.getCombos(), oldGroup.name, "openrouter"), []);
-  assert.deepEqual(quotaNamesFor(await combosDb.getCombos(), newGroup.name, "openrouter"), []);
-});
-
-test("DELETE makes a synchronous allocation upsert a no-op once deletion has started", async () => {
-  const group = groupsDb.createGroup("Deleting Pool Allocation Group");
-  const targetConnectionId = await createConnection("openrouter", "delete-allocation-target");
-  const siblingConnectionId = await createConnection("baidu", "delete-allocation-sibling");
-  const targetPool = poolsDb.createPool({
-    connectionId: targetConnectionId,
-    name: "Delete Allocation Target",
-    groupId: group.id,
-  });
-  const siblingPool = poolsDb.createPool({
-    connectionId: siblingConnectionId,
-    name: "Delete Allocation Sibling",
-    groupId: group.id,
-  });
-  const apiKey = await apiKeysDb.createApiKey("Delete Allocation Key", "delete-allocation-key");
-  await nextImmediate();
-  await nextImmediate();
-
-  const deleting = poolsDb.deletePool(targetPool.id);
-  poolsDb.upsertAllocations(targetPool.id, [{ apiKeyId: apiKey.id, weight: 100, policy: "hard" }]);
-  const deleted = await deleting;
-
-  assert.equal(deleted, true);
-  assert.equal(poolsDb.getPool(targetPool.id), null);
-  assert.deepEqual(
-    poolsDb.getPool(siblingPool.id)?.allocations,
-    [],
-    "an allocation upsert on a deleting pool must not mutate sibling pools"
-  );
-});
-
-test("concurrent DELETE calls report one deletion and one missing pool", async () => {
-  const group = groupsDb.createGroup("Concurrent Delete Group");
-  const connectionId = await createConnection("openrouter", "concurrent-delete");
-  const pool = poolsDb.createPool({
-    connectionId,
-    name: "Concurrent Delete Pool",
-    groupId: group.id,
-  });
-
-  const results = await Promise.all([poolsDb.deletePool(pool.id), poolsDb.deletePool(pool.id)]);
-
-  assert.deepEqual(results, [true, false]);
-  assert.equal(poolsDb.getPool(pool.id), null);
-  assert.deepEqual(quotaNamesFor(await combosDb.getCombos(), group.name, "openrouter"), []);
-});
-
-test("DELETE nonexistent pool returns sanitized 404 without changing combos", async () => {
-  const missingPoolId = "pool-that-never-existed";
-  const group = groupsDb.createGroup("Missing Pool Control Group");
-  const connectionId = await createConnection("baidu", "missing-pool-control-baidu");
-  const pool = poolsDb.createPool({
-    connectionId,
-    name: "Missing Pool Control",
-    groupId: group.id,
-  });
-  const apiKey = await apiKeysDb.createApiKey("Missing Pool Key", "missing-pool-key");
-  await apiKeysDb.updateApiKeyPermissions(apiKey.id, {
-    allowedQuotas: [missingPoolId, pool.id],
-  });
-  await syncQuotaCombos(pool.id);
-  await nextImmediate();
-  await nextImmediate();
-  await combosDb.createCombo({
-    name: "ordinary-missing-delete-control",
-    models: [{ kind: "model", model: "baidu/control-model", weight: 100 }],
-    strategy: "priority",
-  });
-  const before = await combosDb.getCombos();
-  assert.ok(quotaNamesFor(before, group.name, "baidu").length > 0);
-
-  const response = await deletePoolThroughRoute(missingPoolId);
-  const body = await response.json();
-
-  assert.equal(response.status, 404);
-  assert.equal(body.error?.message, "Pool not found");
-  assert.doesNotMatch(JSON.stringify(body), /\s+at\s+\//, "404 must not expose a stack trace");
-  assert.deepEqual(await combosDb.getCombos(), before);
-  assert.deepEqual(
-    getAllowedQuotas(apiKey.id),
-    [missingPoolId, pool.id],
-    "a missing-pool DELETE must not mutate API key permissions"
-  );
-  assert.ok(poolsDb.getPool(pool.id), "unrelated pool must remain");
-});
-
-test("DELETE keeps relational cleanup non-fatal when quota-combo listing fails", async () => {
-  const group = groupsDb.createGroup("Cleanup Failure Group");
-  const connectionId = await createConnection("openrouter", "cleanup-failure-openrouter");
-  const apiKey = await apiKeysDb.createApiKey("Cleanup Failure Key", "cleanup-failure-machine");
-  const pool = poolsDb.createPool({
-    connectionId,
-    name: "Cleanup Failure Pool",
-    groupId: group.id,
-    allocations: [{ apiKeyId: apiKey.id, weight: 100, policy: "hard" }],
-  });
-  await apiKeysDb.updateApiKeyPermissions(apiKey.id, { allowedQuotas: [pool.id] });
-  await syncQuotaCombos(pool.id);
-  await nextImmediate();
-  await nextImmediate();
-  assert.ok(quotaNamesFor(await combosDb.getCombos(), group.name, "openrouter").length > 0);
-
-  const db = core.getDbInstance();
-  const originalPrepare = db.prepare.bind(db);
-  const unhandled: unknown[] = [];
-  const onUnhandled = (reason: unknown) => unhandled.push(reason);
-  process.on("unhandledRejection", onUnhandled);
-  db.prepare = ((sql: string) => {
-    if (sql.startsWith("SELECT data, sort_order, context_cache_protection FROM combos ORDER BY")) {
-      throw new Error("forced quota combo listing failure");
-    }
-    return originalPrepare(sql);
-  }) as typeof db.prepare;
-
-  let response: Response;
-  try {
-    response = await deletePoolThroughRoute(pool.id);
-    await nextImmediate();
-    await nextImmediate();
-  } finally {
-    db.prepare = originalPrepare as typeof db.prepare;
-    process.off("unhandledRejection", onUnhandled);
-  }
-
-  assert.equal(response!.status, 204);
-  assert.deepEqual(unhandled, [], "guarded combo failure must not produce unhandledRejection");
-  assert.equal(poolsDb.getPool(pool.id), null);
-  assert.equal(
-    countRows("SELECT count(*) AS count FROM quota_pool_connections WHERE pool_id = ?", pool.id),
-    0
-  );
-  assert.equal(
-    countRows("SELECT count(*) AS count FROM quota_allocations WHERE pool_id = ?", pool.id),
-    0
-  );
-  assert.deepEqual(getAllowedQuotas(apiKey.id), []);
-});
--- a/tests/snapshots/provider/translate-path.json
+++ b/tests/snapshots/provider/translate-path.json
@@ -3405,6 +3405,26 @@
      "stream": "https://api.morphllm.com/v1/chat/completions"
    }
  },
+  "muse-code": {
+    "format": "openai",
+    "headers": {
+      "apiKey": {
+        "Accept": "text/event-stream",
+        "Authorization": "Bearer <TOK>",
+        "Content-Type": "application/json"
+      },
+      "nonStream": {
+        "Authorization": "Bearer <TOK>",
+        "Content-Type": "application/json"
+      },
+      "oauth": {
+        "Accept": "text/event-stream",
+        "Authorization": "Bearer <TOK>",
+        "Content-Type": "application/json"
+      }
+    },
+    "url": {}
+  },
  "muse-spark-web": {
    "format": "openai",
    "headers": {
--- a/tests/unit/8951-github-gpt56-responses.test.ts
+++ b/tests/unit/8951-github-gpt56-responses.test.ts
@@ -1,19 +0,0 @@
-import assert from "node:assert/strict";
-import test from "node:test";
-
-import { GithubExecutor } from "../../open-sse/executors/github.ts";
-
-test("#8951 GitHub GPT-5.6 models must use the Responses endpoint", () => {
-  const executor = new GithubExecutor();
-  const urls = Object.fromEntries(
-    ["gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna"].map((model) => [
-      model,
-      executor.buildUrl(model, false),
-    ])
-  );
-  assert.deepEqual(urls, {
-    "gpt-5.6-sol": "https://api.githubcopilot.com/responses",
-    "gpt-5.6-terra": "https://api.githubcopilot.com/responses",
-    "gpt-5.6-luna": "https://api.githubcopilot.com/responses",
-  });
-});
--- a/tests/unit/9034-alias-backed-prefix-id-repro.test.ts
+++ b/tests/unit/9034-alias-backed-prefix-id-repro.test.ts
@@ -1,120 +0,0 @@
-/**
- * Regression test for #9034 — /v1/models alias-backed emission block (catalog.ts ~:1298)
- * leaked the raw provider-node UUID as the published model `id` for alias-backed models
- * (synced via `syncManagedAvailableModelAliases`), instead of the operator-configured
- * prefix. The #8327 fix only covered `owned_by`; the routable model `id` was missed.
- *
- * Root cause: the alias-backed block builds `alias` as
- * `providerIdToAlias[canonicalProviderId] || providerKey` and never consults
- * `providerIdToPrefix`. For a compatible provider node, the storage prefix is the raw
- * node UUID (managedAvailableModels.getProviderStoragePrefix()), so `providerKey` is the
- * node UUID and the catalog re-publishes it as the public model `id` (e.g.
- * `openai-compatible-chat-550e8400-.../kimi-k2`) instead of the configured prefix.
- *
- * Fix: resolve `const prefix = providerIdToPrefix[providerKey] ?? providerIdToPrefix[canonicalProviderId]`
- * and `const alias = prefix || providerIdToAlias[canonicalProviderId] || providerKey`,
- * plus add `!prefix` to the includeCanonical guard (mirroring synced :896 / custom :1245).
- */
-import test from "node:test";
-import assert from "node:assert/strict";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-
-const TEST_DATA_DIR = fs.mkdtempSync(path.join(os.tmpdir(), "omniroute-9034-"));
-process.env.DATA_DIR = TEST_DATA_DIR;
-
-// Type-only imports for the module shape
-type CoreModule = typeof import("../../src/lib/db/core.ts");
-type ProvidersDbModule = typeof import("../../src/lib/db/providers.ts");
-type ModelsDbModule = typeof import("../../src/lib/db/models.ts");
-type CatalogModule = typeof import("../../src/app/api/v1/models/catalog.ts");
-type ManagedAvailableModelsModule = typeof import("../../src/lib/providerModels/managedAvailableModels.ts");
-
-let core: CoreModule;
-let providersDb: ProvidersDbModule;
-let modelsDb: ModelsDbModule;
-let v1ModelsCatalog: CatalogModule;
-let managedAvailableModels: ManagedAvailableModelsModule;
-
-// A realistic provider-node id shape, matching `openai-compatible-chat-<uuid>`
-const NODE_ID = "openai-compatible-chat-550e8400-e29b-41d4-a716-446655440000";
-const UUID_SHAPE_RE = /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i;
-const CONFIGURED_PREFIX = "myprefix";
-const MODEL_NAME = "kimi-k2";
-
-async function resetStorage() {
-  core.resetDbInstance();
-  fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
-  fs.mkdirSync(TEST_DATA_DIR, { recursive: true });
-  v1ModelsCatalog.__resetCatalogBuilderRunsForTest();
-}
-
-test.before(async () => {
-  core = await import("../../src/lib/db/core.ts");
-  providersDb = await import("../../src/lib/db/providers.ts");
-  modelsDb = await import("../../src/lib/db/models.ts");
-  v1ModelsCatalog = await import("../../src/app/api/v1/models/catalog.ts");
-  managedAvailableModels = await import("../../src/lib/providerModels/managedAvailableModels.ts");
-  await resetStorage();
-});
-
-test.after(async () => {
-  if (core) core.resetDbInstance();
-  fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
-});
-
-test("#9034: alias-backed model id must use the configured prefix, not the raw provider-node UUID", async () => {
-  // Create an openai-compatible provider node with a configured prefix
-  await providersDb.createProviderNode({
-    id: NODE_ID,
-    type: "openai-compatible",
-    name: "test node (probe)",
-    prefix: CONFIGURED_PREFIX,
-    baseUrl: "https://proxy.example.com",
-    chatPath: "/v1/chat/completions",
-    modelsPath: "/v1/models",
-  });
-  await providersDb.createProviderConnection({
-    provider: NODE_ID,
-    authType: "apikey",
-    name: "test-conn",
-    apiKey: "sk-test",
-    isActive: true,
-    testStatus: "active",
-    providerSpecificData: {
-      baseUrl: "https://proxy.example.com",
-      chatPath: "/v1/chat/completions",
-      modelsPath: "/v1/models",
-    },
-  });
-
-  // The real producer path: syncManagedAvailableModelAliases stores aliases as
-  // `<UUID>/<modelId>` (getProviderStoragePrefix returns raw node id for compatible providers).
-  // This creates a key_value alias entry that the alias-backed block in catalog.ts reads.
-  await managedAvailableModels.syncManagedAvailableModelAliases(NODE_ID, [MODEL_NAME]);
-
-  const response = await v1ModelsCatalog.getUnifiedModelsResponse(
-    new Request("http://localhost/api/v1/models")
-  );
-  const body = (await response.json()) as { data: Array<Record<string, unknown>> };
-  const ids = body.data.map((m) => m.id as string);
-
-  assert.equal(response.status, 200);
-
-  // (a) The configured prefix must be used in the model id
-  const expectedId = `${CONFIGURED_PREFIX}/${MODEL_NAME}`;
-  assert.ok(
-    ids.includes(expectedId),
-    `expected model id "${expectedId}" to exist in /v1/models — got: ${JSON.stringify(ids)}`
-  );
-
-  // (b) No entry id should start with the raw node UUID when a prefix is configured
-  for (const id of ids) {
-    assert.equal(
-      id.startsWith(NODE_ID),
-      false,
-      `entry id "${id}" must not start with the raw provider-node UUID "${NODE_ID}" when a prefix ("${CONFIGURED_PREFIX}") is configured`
-    );
-  }
-});
--- a/tests/unit/9134-repro-audio-combo-rejection.test.ts
+++ b/tests/unit/9134-repro-audio-combo-rejection.test.ts
@@ -1,95 +0,0 @@
-// Repro test for #9134 — /v1/audio/transcriptions rejects combo names.
-//
-// Run: node --import tsx/esm --test tests/unit/9134-repro-audio-combo-rejection.test.ts
-// Expected to PASS once the fix is applied, RED before.
-
-import test from "node:test";
-import assert from "node:assert/strict";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-
-const TEST_DATA_DIR = fs.mkdtempSync(path.join(os.tmpdir(), "omniroute-9134-repro-"));
-process.env.DATA_DIR = TEST_DATA_DIR;
-
-const core = await import("../../src/lib/db/core.ts");
-const { createCombo } = await import("../../src/lib/db/combos.ts");
-const { createProviderNode } = await import("../../src/lib/db/providers.ts");
-const route = await import("../../src/app/api/v1/audio/transcriptions/route.ts");
-
-const originalFetch = globalThis.fetch;
-
-test.after(() => {
-  globalThis.fetch = originalFetch;
-  core.resetDbInstance();
-  fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true });
-});
-
-/** Minimal but structurally valid WAV so nothing rejects the upload shape. */
-function makeWav(): Blob {
-  const dataLen = 1600;
-  const b = Buffer.alloc(44 + dataLen);
-  b.write("RIFF", 0, "ascii");
-  b.writeUInt32LE(36 + dataLen, 4);
-  b.write("WAVE", 8, "ascii");
-  b.write("fmt ", 12, "ascii");
-  b.writeUInt32LE(16, 16);
-  b.writeUInt16LE(1, 20);
-  b.writeUInt16LE(1, 22);
-  b.writeUInt32LE(16000, 24);
-  b.writeUInt32LE(32000, 28);
-  b.writeUInt16LE(2, 32);
-  b.writeUInt16LE(16, 34);
-  b.write("data", 36, "ascii");
-  b.writeUInt32LE(dataLen, 40);
-  return new Blob([b], { type: "audio/wav" });
-}
-
-function transcriptionRequest(model: string) {
-  const fd = new FormData();
-  fd.set("model", model);
-  fd.set("file", makeWav(), "t.wav");
-  return new Request("http://localhost/v1/audio/transcriptions", { method: "POST", body: fd });
-}
-
-test("#9134 combo name is rejected instead of resolved", async () => {
-  await createProviderNode({
-    id: "openai-compatible-audio-transcriptions-test",
-    type: "openai-compatible",
-    name: "Local STT",
-    prefix: "localstt",
-    apiType: "audio-transcriptions",
-    baseUrl: "http://localhost:9000/v1",
-  } as Parameters<typeof createProviderNode>[0]);
-
-  await createCombo({
-    name: "transcricao",
-    strategy: "priority",
-    models: [{ provider: "localstt", model: "whisper-1" }],
-  } as Parameters<typeof createCombo>[0]);
-
-  globalThis.fetch = (async () =>
-    new Response(JSON.stringify({ text: "ok" }), {
-      status: 200,
-      headers: { "Content-Type": "application/json" },
-    })
-  ) as typeof fetch;
-
-  const res = await route.POST(transcriptionRequest("transcricao"));
-  const body = await res.text();
-
-  // The bug: the combo name "transcricao" is NOT resolved. The route returns 400
-  // with "Invalid transcription model: transcricao. Use format: provider/model"
-  // even though /v1/models advertises this combo and chat/embeddings resolve it.
-  // Regression guard: combo names must be resolved before model parsing. This
-  // was failing as `400 Invalid transcription model: transcricao` before the fix.
-  assert.notEqual(
-    res.status,
-    400,
-    `BUG #9134: combo name "transcricao" was rejected as invalid model — got status ${res.status}: ${body}`
-  );
-  assert.ok(
-    !body.includes("Invalid transcription model"),
-    `BUG #9134: combo name was not resolved — got: ${body}`
-  );
-});
--- a/tests/unit/api-key-policy-noauth-allowed-connections.test.ts
+++ b/tests/unit/api-key-policy-noauth-allowed-connections.test.ts
@@ -1,71 +0,0 @@
-/**
- * #9057 — API key `allowedConnections` MUST gate no-auth synthetic credentials
- *
- * TDD regression test: an API key pinned via `allowedConnections` to a specific
- * connection must NOT receive synthetic no-auth credentials for free providers
- * (e.g. felo-chat).
- */
-
-import test from "node:test";
-import assert from "node:assert/strict";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-
-const TEST_DATA_DIR = fs.mkdtempSync(path.join(os.tmpdir(), "omniroute-9057-"));
-process.env.DATA_DIR = TEST_DATA_DIR;
-process.env.API_KEY_SECRET = process.env.API_KEY_SECRET || "9057-test-secret";
-
-const coreDb = await import("../../src/lib/db/core.ts");
-const apiKeysDb = await import("../../src/lib/db/apiKeys.ts");
-const { getProviderCredentials } = await import("../../src/sse/services/auth.ts");
-const { isModelAllowedForKey } = await import("../../src/lib/db/apiKeys.ts");
-
-const RESTRICTED_CONNECTION_UUID = "00000000-0000-4000-8000-000000000001";
-
-test.after(() => {
-  coreDb.resetDbInstance();
-  try { fs.rmSync(TEST_DATA_DIR, { recursive: true, force: true }); } catch {}
-});
-
-test("#9057 LAYER1: restricted key gets NO synthetic credentials for noauth provider felo", async () => {
-  // LAYER1: getProviderCredentials() with explicit allowedConnections
-  // must NOT return synthetic noauth credentials because the synthetic
-  // "noauth" connection is never in an explicit allowed-connections list.
-  const creds = await getProviderCredentials(
-    "felo",
-    null,
-    [RESTRICTED_CONNECTION_UUID], // allowedConnections restricts to a real UUID
-    "felo-chat"
-  );
-  assert.equal(creds, null,
-    "noauth provider felo must not leak synthetic credentials for a connection-restricted key");
-});
-
-test("#9057 LAYER1: unrestricted key still gets synthetic credentials for felo", async () => {
-  const creds = await getProviderCredentials(
-    "felo",
-    null,
-    null,   // allowedConnections=null means unrestricted
-    "felo-chat"
-  );
-  assert(creds, "unrestricted key must receive synthetic credentials for felo");
-  assert.equal(
-    (creds as Record<string, unknown>)?.connectionId,
-    "noauth",
-    "synthetic noauth connection"
-  );
-});
-
-test("#9057 LAYER2: isModelAllowedForKey rejects felo-chat for disableNonPublicModels key", async () => {
-  // Create a key with disableNonPublicModels=true
-  const created = await apiKeysDb.createApiKey("dnp-9057", "machine-dnp");
-  assert(created, "key must be created");
-  const key = created.key;
-  await apiKeysDb.updateApiKeyPermissions(created.id, {
-    disableNonPublicModels: true,
-  });
-
-  const allowed = await isModelAllowedForKey(key, "felo-chat");
-  assert.equal(allowed, false, "disableNonPublicModels key must reject felo-chat");
-});
--- a/tests/unit/audio-speech-dynamic-node-9096.test.ts
+++ b/tests/unit/audio-speech-dynamic-node-9096.test.ts
@@ -1,67 +0,0 @@
-import test from "node:test";
-import assert from "node:assert/strict";
-
-const { parseSpeechModel, parseTranscriptionModel, parseTranslationModel } = await import("../../open-sse/config/audioRegistry.ts");
-
-test("parseSpeechModel resolves dynamic provider (audio-speech apiType) by prefix", () => {
-  const dynamicProviders = [
-    {
-      id: "mytest9096",
-      baseUrl: "http://localhost:9999/v1/audio/speech",
-      authType: "none" as const,
-      authHeader: "none" as const,
-      models: [],
-    },
-  ];
-
-  const result = parseSpeechModel("mytest9096/tts-1", dynamicProviders);
-  assert.equal(result.provider, "mytest9096");
-  assert.equal(result.model, "tts-1");
-});
-
-test("parseSpeechModel returns null for unknown dynamic provider prefix", () => {
-  const dynamicProviders = [
-    {
-      id: "mytest9096",
-      baseUrl: "http://localhost:9999/v1/audio/speech",
-      authType: "none" as const,
-      authHeader: "none" as const,
-      models: [],
-    },
-  ];
-
-  const result = parseSpeechModel("nonexistent/tts-1", dynamicProviders);
-  assert.equal(result.provider, null);
-});
-
-test("parseTranscriptionModel resolves dynamic provider (audio-transcriptions apiType) by prefix", () => {
-  const dynamicProviders = [
-    {
-      id: "mytest9096",
-      baseUrl: "http://localhost:9999/v1/audio/transcriptions",
-      authType: "none" as const,
-      authHeader: "none" as const,
-      models: [],
-    },
-  ];
-
-  const result = parseTranscriptionModel("mytest9096/whisper-1", dynamicProviders);
-  assert.equal(result.provider, "mytest9096");
-  assert.equal(result.model, "whisper-1");
-});
-
-test("parseTranslationModel resolves dynamic provider (audio-transcriptions apiType) by prefix", () => {
-  const dynamicProviders = [
-    {
-      id: "mytest9096",
-      baseUrl: "http://localhost:9999/v1/audio/translations",
-      authType: "none" as const,
-      authHeader: "none" as const,
-      models: [],
-    },
-  ];
-
-  const result = parseTranslationModel("mytest9096/whisper-1", dynamicProviders);
-  assert.equal(result.provider, "mytest9096");
-  assert.equal(result.model, "whisper-1");
-});
--- a/tests/unit/classify429.test.ts
+++ b/tests/unit/classify429.test.ts
@@ -45,13 +45,6 @@ test("classify429: Antigravity 'Individual quota reached' body returns 'quota_ex
  assert.equal(classify429({ status: 429, body: { error: { message: body } } }), "quota_exhausted");
 });

-test("classify429: auth-layer synthetic 'have exhausted their quota' returns 'quota_exhausted' (#9269)", () => {
-  const body = "All antigravity accounts have exhausted their quota (reset after 5m)";
-  assert.equal(looksLikeQuotaExhausted(body), true);
-  assert.equal(classify429({ status: 429, body }), "quota_exhausted");
-  assert.equal(classify429({ status: 429, body: { error: { message: body } } }), "quota_exhausted");
-});
-
 test("classify429: Google RESOURCE_EXHAUSTED with a billing-period reset is quota exhausted", () => {
  const body = "Resource has been exhausted (e.g. check quota). (reset after 24h)";
  assert.equal(looksLikeQuotaExhausted(body), true);
--- a/tests/unit/colocate-optionals.test.ts
+++ b/tests/unit/colocate-optionals.test.ts
@@ -33,11 +33,6 @@ function mkPkg(
 *   @tensorflow/tfjs   → dep @tensorflow/tfjs-core → dep long
 *   js-tiktoken        → dep base64-js
 *   @huggingface/transformers present at root as a (stale) 4.2.0
- *
- * Each mock package gets a resolvable entrypoint so that isPackageIntact (which
- * checks entrypoint integrity via require.resolve) can validate the co-located
- * copy. The `main` field and corresponding index.js mirror what real npm
- * packages ship.
 */
 function buildRoot(rootDir: string): void {
  const rootNm = join(rootDir, "node_modules");
@@ -45,7 +40,6 @@ function buildRoot(rootDir: string): void {
    rootNm,
    "@atjsh/llmlingua-2",
    {
-      main: "dist/index.js",
      dependencies: { "es-toolkit": "^1.38.0" },
      peerDependencies: {
        "@huggingface/transformers": "*",
@@ -55,27 +49,12 @@ function buildRoot(rootDir: string): void {
    },
    { "dist/index.js": "export const llmlingua = true;\n" }
  );
-  mkPkg(rootNm, "es-toolkit", { main: "index.js" }, { "index.js": "export const esToolkit = true;\n" });
-  mkPkg(
-    rootNm,
-    "@tensorflow/tfjs",
-    { main: "index.js", dependencies: { "@tensorflow/tfjs-core": "4.22.0" } },
-    { "index.js": "export const tfjs = true;\n" }
-  );
-  mkPkg(
-    rootNm,
-    "@tensorflow/tfjs-core",
-    { main: "index.js", dependencies: { long: "^5.0.0" } },
-    { "index.js": "export const tfjsCore = true;\n" }
-  );
-  mkPkg(rootNm, "long", { main: "index.js" }, { "index.js": "export const long = true;\n" });
-  mkPkg(
-    rootNm,
-    "js-tiktoken",
-    { main: "index.js", dependencies: { "base64-js": "^1.5.1" } },
-    { "index.js": "export const tiktoken = true;\n" }
-  );
-  mkPkg(rootNm, "base64-js", { main: "index.js" }, { "index.js": "export const base64 = true;\n" });
+  mkPkg(rootNm, "es-toolkit", {});
+  mkPkg(rootNm, "@tensorflow/tfjs", { dependencies: { "@tensorflow/tfjs-core": "4.22.0" } });
+  mkPkg(rootNm, "@tensorflow/tfjs-core", { dependencies: { long: "^5.0.0" } });
+  mkPkg(rootNm, "long", {});
+  mkPkg(rootNm, "js-tiktoken", { dependencies: { "base64-js": "^1.5.1" } });
+  mkPkg(rootNm, "base64-js", {});
  // Root transformers is the STALE 4.x line — the bug we must not propagate into dist.
  mkPkg(rootNm, "@huggingface/transformers", { version: "4.2.0" });
 }
--- a/tests/unit/db-quota-pools.test.ts
+++ b/tests/unit/db-quota-pools.test.ts
@@ -137,15 +137,15 @@ test("updatePool returns null for unknown id", () => {
  assert.equal(result, null);
 });

-test("deletePool removes pool and returns true", async () => {
+test("deletePool removes pool and returns true", () => {
  const pool = poolsDb.createPool({ connectionId: "c6", name: "Deletable" });
-  const deleted = await poolsDb.deletePool(pool.id);
+  const deleted = poolsDb.deletePool(pool.id);
  assert.equal(deleted, true);
  assert.equal(poolsDb.getPool(pool.id), null);
 });

-test("deletePool returns false for unknown id", async () => {
-  const result = await poolsDb.deletePool("ghost-pool");
+test("deletePool returns false for unknown id", () => {
+  const result = poolsDb.deletePool("ghost-pool");
  assert.equal(result, false);
 });

@@ -190,14 +190,14 @@ test("upsertAllocations with empty array removes all allocations", () => {
 // FK CASCADE: delete pool → allocations gone
 // ---------------------------------------------------------------------------

-test("deletePool cascades to allocations", async () => {
+test("deletePool cascades to allocations", () => {
  const pool = poolsDb.createPool({
    connectionId: "c9",
    name: "With Allocs",
    allocations: [{ apiKeyId: "k-cascade", weight: 100, policy: "hard" }],
  });

-  await poolsDb.deletePool(pool.id);
+  poolsDb.deletePool(pool.id);

  // After pool is deleted, listAllocationsForApiKey should find nothing for k-cascade
  const remaining = poolsDb.listAllocationsForApiKey("k-cascade");
--- a/tests/unit/docker-llmlingua-optionals-9166.test.ts
+++ b/tests/unit/docker-llmlingua-optionals-9166.test.ts
@@ -55,7 +55,6 @@ function buildLlmlinguaRoot(
    rootNm,
    "@atjsh/llmlingua-2",
    {
-      main: "dist/index.js",
      dependencies: {
        "es-toolkit": "^1.38.0",
      },
@@ -228,103 +227,6 @@ test("#9166 standalone assembly never overwrites an already pinned transformers
  }
 });

-test("#9166 co-location completes a partially traced package (package.json without its main)", () => {
-  const root = mkdtempSync(
-    join(tmpdir(), "omniroute-docker-llmlingua-partial-9166-")
-  );
-
-  try {
-    buildLlmlinguaRoot(root);
-    const { distDir, standaloneDir } = createStandalone(root);
-
-    // Next's file tracing materializes @atjsh/llmlingua-2 PARTIALLY in the
-    // standalone: the package.json lands (its "main" points at dist/index.js)
-    // but the dist/ payload does not — the exact state the Docker guard hits
-    // ("Cannot find module .../dist/index.js"). A directory-level no-clobber
-    // sees the dir and skips the package forever.
-    mkPkg(join(standaloneDir, "node_modules"), "@atjsh/llmlingua-2", {
-      main: "dist/index.js",
-    });
-
-    assembleStandalone({
-      distDir,
-      outDir: standaloneDir,
-      projectRoot: root,
-      copyNatives: true,
-    });
-
-    assert.ok(
-      existsSync(
-        join(
-          standaloneDir,
-          "node_modules",
-          "@atjsh",
-          "llmlingua-2",
-          "dist",
-          "index.js"
-        )
-      ),
-      "a partially traced package must be completed, not skipped as already present"
-    );
-  } finally {
-    rmSync(root, { recursive: true, force: true });
-  }
-});
-
-test("#9166 co-location is not skipped when every closure dir exists but one is partial", () => {
-  const root = mkdtempSync(
-    join(tmpdir(), "omniroute-docker-llmlingua-partial-all-9166-")
-  );
-
-  try {
-    buildLlmlinguaRoot(root);
-    const { distDir, standaloneDir } = createStandalone(root);
-    const standaloneNm = join(standaloneDir, "node_modules");
-
-    // Every closure package already has a directory in the standalone (so a
-    // directory-level "already co-located" early-exit would fire), but the
-    // llmlingua-2 one is the partial NFT-trace shell without its main.
-    for (const packageName of [
-      "es-toolkit",
-      "@tensorflow/tfjs",
-      "@tensorflow/tfjs-core",
-      "long",
-      "js-tiktoken",
-      "base64-js",
-      "@huggingface/transformers",
-      "onnxruntime-node",
-    ]) {
-      mkPkg(standaloneNm, packageName, { main: "index.js" }, {
-        "index.js": "export {};\n",
-      });
-    }
-    mkPkg(standaloneNm, "@atjsh/llmlingua-2", { main: "dist/index.js" });
-
-    assembleStandalone({
-      distDir,
-      outDir: standaloneDir,
-      projectRoot: root,
-      copyNatives: true,
-    });
-
-    assert.ok(
-      existsSync(
-        join(
-          standaloneDir,
-          "node_modules",
-          "@atjsh",
-          "llmlingua-2",
-          "dist",
-          "index.js"
-        )
-      ),
-      "the closure-wide early-exit must not fire while any member is partial"
-    );
-  } finally {
-    rmSync(root, { recursive: true, force: true });
-  }
-});
-
 test("#9166 Docker explicitly installs and validates LLMLingua optionals", () => {
  const dockerfile = readFileSync(
    new URL("../../Dockerfile", import.meta.url),
--- a/tests/unit/free-pool-frontend-repro.test.tsx
+++ b/tests/unit/free-pool-frontend-repro.test.tsx
@@ -8,7 +8,7 @@
 * This test verifies the payload normalization fix is present in the source code
 * and that the correct contract keys are read by loadData().
 *
- * Run: node --import tsx/esm --test tests/unit/free-pool-frontend-repro.test.ts
+ * Run: node --import tsx/esm --test tests/unit/free-pool-frontend-repro.test.tsx
 */

 import test from "node:test";
--- a/tests/unit/gemini-web-capabilities-9356.test.ts
+++ b/tests/unit/gemini-web-capabilities-9356.test.ts
@@ -1,258 +0,0 @@
-// Capability enforcement for the Gemini Web executor (#9356).
-//
-// Reported: gemini-web silently ACCEPTS `reasoning_effort` and
-// `tool_choice: "required"` and answers with ordinary prose — HTTP 200, no
-// `reasoning_content`, `tool_calls: []`, `finish_reason: "stop"`. An
-// AgentChakra/OpenClaw agent then believes its reasoning and tool requirements
-// were honored when they were not.
-//
-// Why neither can be implemented for THIS provider: gemini-web is not an API
-// client. It launches Playwright, types a single flat prompt string into the
-// gemini.google.com `.ql-editor` contenteditable, presses Enter, and captures
-// the first `StreamGenerate` response off the page. There is no request payload
-// to carry a thinking budget, and no function-calling channel to force — the
-// tools support it does have is the prompt-emulation shim (`webTools.ts`, #7286),
-// which ASKS the model to emit `<tool>{...}</tool>` and cannot GUARANTEE it.
-//
-// So this suite pins the issue's option (b) for both controls: reject the
-// requests we cannot honor, and keep honoring the ones we can. The line drawn:
-//
-//   reasoning_effort  none | minimal        → allowed (gemini-web not thinking
-//                                             IS compliance with "spend little")
-//                     low | medium | high…  → 400, a positive request to think
-//   tool_choice       absent | auto | none  → allowed (emulation path, #7286)
-//                     required | any | {fn} → 400, a guarantee we cannot make
-//
-// The guard must run BEFORE Playwright launches, so every executor assertion
-// here completes without a browser.
-
-import test from "node:test";
-import assert from "node:assert/strict";
-
-const { GeminiWebExecutor } = await import("../../open-sse/executors/gemini-web.ts");
-const { checkGeminiWebUnsupportedControls, GEMINI_WEB_UNSUPPORTED_CONTROL_CODE } =
-  await import("../../open-sse/executors/gemini-web/capabilities.ts");
-const { gemini_webProvider } =
-  await import("../../open-sse/config/providers/registry/gemini/web/index.ts");
-const { supportsReasoning, supportsToolCalling } =
-  await import("../../src/lib/modelCapabilities.ts");
-const { providerSupportsEmulatedToolCalling } =
-  await import("../../open-sse/services/combo/comboStructure.ts");
-
-const GET_WEATHER_TOOL = {
-  type: "function",
-  function: {
-    name: "get_weather",
-    description: "Get the current weather for a city",
-    parameters: { type: "object", properties: { city: { type: "string" } }, required: ["city"] },
-  },
-};
-
-interface ErrorBodyLike {
-  error: { message: string; type: string; code: string };
-}
-
-/**
- * Run the executor with valid-looking credentials. Every case in this suite is
- * expected to short-circuit on the capability guard, so Playwright is never
- * reached — a test that hangs here means the guard did not fire.
- */
-async function run(body: Record<string, unknown>) {
-  return new GeminiWebExecutor().execute({
-    model: "gemini-3.6-flash",
-    body: { messages: [{ role: "user", content: "hi" }], stream: false, ...body },
-    stream: false,
-    credentials: { apiKey: "__Secure-1PSID=test-cookie" },
-    signal: AbortSignal.timeout(10_000),
-    log: null,
-  });
-}
-
-// ─── Pure checker: reasoning_effort ─────────────────────────────────────────
-
-test("#9356 reasoning_effort low/medium/high/xhigh are rejected as unsupported", () => {
-  for (const effort of ["low", "medium", "high", "xhigh"]) {
-    const violation = checkGeminiWebUnsupportedControls({ reasoning_effort: effort });
-    assert.equal(
-      violation?.param,
-      "reasoning_effort",
-      `reasoning_effort="${effort}" asks gemini-web to think harder, which a typed browser ` +
-        `prompt cannot express — it must be rejected, not silently dropped`
-    );
-    assert.match(violation!.message, /reasoning_effort/);
-  }
-});
-
-test("#9356 reasoning_effort none/minimal and absent stay allowed", () => {
-  assert.equal(checkGeminiWebUnsupportedControls({}), null);
-  assert.equal(checkGeminiWebUnsupportedControls({ reasoning_effort: null }), null);
-  assert.equal(checkGeminiWebUnsupportedControls({ reasoning_effort: "none" }), null);
-  assert.equal(
-    checkGeminiWebUnsupportedControls({ reasoning_effort: "minimal" }),
-    null,
-    '"minimal" means spend as little reasoning as possible — a non-thinking provider ' +
-      "already satisfies it, so rejecting it would be gratuitous"
-  );
-  assert.equal(checkGeminiWebUnsupportedControls({ reasoning_effort: "  NONE  " }), null);
-});
-
-// ─── Pure checker: tool_choice ──────────────────────────────────────────────
-
-test("#9356 tool_choice required/any is rejected as unsupported", () => {
-  for (const choice of ["required", "any"]) {
-    const violation = checkGeminiWebUnsupportedControls({
-      tools: [GET_WEATHER_TOOL],
-      tool_choice: choice,
-    });
-    assert.equal(
-      violation?.param,
-      "tool_choice",
-      `tool_choice="${choice}" is a guarantee the prompt-emulation shim cannot make`
-    );
-    assert.match(violation!.message, /tool_choice/);
-  }
-});
-
-test("#9356 a forced-function tool_choice object is rejected as unsupported", () => {
-  const violation = checkGeminiWebUnsupportedControls({
-    tools: [GET_WEATHER_TOOL],
-    tool_choice: { type: "function", function: { name: "get_weather" } },
-  });
-  assert.equal(violation?.param, "tool_choice");
-
-  // Anthropic-style forcing, which the translators also emit.
-  assert.equal(
-    checkGeminiWebUnsupportedControls({
-      tools: [GET_WEATHER_TOOL],
-      tool_choice: { type: "any" },
-    })?.param,
-    "tool_choice"
-  );
-});
-
-test("#9356 tool_choice auto/none and absent keep the #7286 emulation path open", () => {
-  assert.equal(checkGeminiWebUnsupportedControls({ tools: [GET_WEATHER_TOOL] }), null);
-  assert.equal(
-    checkGeminiWebUnsupportedControls({ tools: [GET_WEATHER_TOOL], tool_choice: "auto" }),
-    null
-  );
-  assert.equal(
-    checkGeminiWebUnsupportedControls({ tools: [GET_WEATHER_TOOL], tool_choice: "none" }),
-    null
-  );
-});
-
-test("#9356 forcing is rejected on its own terms, even with no tools[] array", () => {
-  // An agent that sets tool_choice without tools is already malformed, but the
-  // point stands: never report success for a forcing contract we ignore.
-  assert.equal(
-    checkGeminiWebUnsupportedControls({ tool_choice: "required" })?.param,
-    "tool_choice"
-  );
-});
-
-// ─── Executor wiring ────────────────────────────────────────────────────────
-
-test("#9356 executor returns 400 for reasoning_effort=high before launching a browser", async () => {
-  const result = await run({ reasoning_effort: "high" });
-
-  assert.equal(result.response.status, 400);
-  const body = (await result.response.json()) as ErrorBodyLike;
-  assert.equal(body.error.code, GEMINI_WEB_UNSUPPORTED_CONTROL_CODE);
-  assert.match(body.error.message, /reasoning_effort/);
-  assert.equal(
-    body.error.message.includes("at /"),
-    false,
-    "error bodies must stay sanitized — no stack traces"
-  );
-});
-
-test("#9356 executor returns 400 for tool_choice=required before launching a browser", async () => {
-  const result = await run({ tools: [GET_WEATHER_TOOL], tool_choice: "required" });
-
-  assert.equal(result.response.status, 400);
-  const body = (await result.response.json()) as ErrorBodyLike;
-  assert.equal(body.error.code, GEMINI_WEB_UNSUPPORTED_CONTROL_CODE);
-  assert.match(body.error.message, /tool_choice/);
-});
-
-test("#9356 the capability guard runs ahead of the credential check", async () => {
-  // A request that is BOTH uncredentialed and incompatible must report the
-  // incompatibility: adding a cookie would not make it work.
-  const result = await new GeminiWebExecutor().execute({
-    model: "gemini-3.6-flash",
-    body: { messages: [{ role: "user", content: "hi" }], reasoning_effort: "high" },
-    stream: false,
-    credentials: {},
-    signal: AbortSignal.timeout(10_000),
-    log: null,
-  });
-
-  assert.equal(result.response.status, 400);
-  const body = (await result.response.json()) as ErrorBodyLike;
-  assert.equal(body.error.code, GEMINI_WEB_UNSUPPORTED_CONTROL_CODE);
-});
-
-test("#9356 a supported request still falls through the guard untouched", async () => {
-  // tool_choice:"auto" + tools[] is the #7286 emulation contract. It must NOT
-  // be blocked — reaching the (missing) credential check proves the guard let
-  // it pass, without needing a browser to prove it.
-  const result = await new GeminiWebExecutor().execute({
-    model: "gemini-3.6-flash",
-    body: {
-      messages: [{ role: "user", content: "hi" }],
-      tools: [GET_WEATHER_TOOL],
-      tool_choice: "auto",
-    },
-    stream: false,
-    credentials: {},
-    signal: AbortSignal.timeout(10_000),
-    log: null,
-  });
-
-  assert.equal(result.response.status, 401, "should reach the cookie check, not the guard");
-});
-
-// ─── Catalog metadata ───────────────────────────────────────────────────────
-
-test("#9356 registry advertises no native tool calling and no reasoning for gemini-web", () => {
-  assert.ok(gemini_webProvider.models.length > 0);
-  for (const model of gemini_webProvider.models) {
-    assert.equal(
-      model.toolCalling,
-      false,
-      `${model.id} must not advertise native tool calling — /v1/models feeds agent routers`
-    );
-    assert.equal(
-      model.supportsReasoning,
-      false,
-      `${model.id} must advertise reasoning:false so agent routers stop selecting it for ` +
-        "reasoning work (the executor has no thinking control to drive)"
-    );
-  }
-});
-
-test("#9356 resolved capabilities — not just the raw registry — report no reasoning/tools", () => {
-  // The registry literal is only the input; `getResolvedModelCapabilities` is what
-  // the catalog, the combo compatibility filter and the thinking-budget translator
-  // actually read. Assert the resolved view so a downstream default cannot quietly
-  // re-advertise a capability the executor does not have.
-  for (const model of gemini_webProvider.models) {
-    const input = { provider: "gemini-web", model: model.id };
-    assert.equal(supportsReasoning(input), false, `${model.id} resolved reasoning must be false`);
-    assert.equal(
-      supportsToolCalling(input),
-      false,
-      `${model.id} resolved NATIVE tool calling must be false — prompt emulation is advertised ` +
-        'separately as toolCalling:"emulated" on the provider constant'
-    );
-  }
-});
-
-test("#9356 the provider still advertises emulated tool calling, so #7286 combos keep routing", () => {
-  // Guard against over-correcting: dropping the emulation advertisement here would
-  // make filterTargetsByRequestCompatibility fail these targets closed and break
-  // emulation-only combos (#5240 / #8488).
-  assert.equal(providerSupportsEmulatedToolCalling("gemini-web"), true);
-  assert.equal(providerSupportsEmulatedToolCalling("gweb"), true);
-});
--- a/tests/unit/lmarena-stream-readiness-repro-9306.test.ts
+++ b/tests/unit/lmarena-stream-readiness-repro-9306.test.ts
@@ -1,94 +0,0 @@
-/**
- * Regression test for #9306 — Arena AI streaming response must produce
- * Uint8Array chunks (not raw strings) so downstream consumers like
- * ensureStreamReadiness / TextDecoder.decode() do not throw TypeError.
- *
- * Run: node --import tsx/esm --test tests/unit/lmarena-stream-readiness-repro-9306.test.ts
- */
-
-import { describe, it } from "node:test";
-import assert from "node:assert/strict";
-import { ensureStreamReadiness } from "../../open-sse/utils/streamReadiness.ts";
-import { createOpenAIArenaStream } from "../../open-sse/executors/lmarena/response.ts";
-
-describe("Arena AI stream readiness (#9306)", () => {
-  it("produces Uint8Array chunks consumable by ensureStreamReadiness", async () => {
-    // Simulate the upstream Arena TLS reader returning Uint8Array chunks
-    const upstreamReader = new ReadableStream<Uint8Array>({
-      start(controller) {
-        controller.enqueue(new TextEncoder().encode('a0:{"text":"Hello"}\n'));
-        controller.enqueue(
-          new TextEncoder().encode('a0:{"text":", world!"}\nad:{}\n')
-        );
-        controller.close();
-      },
-    }).getReader();
-
-    const stream = createOpenAIArenaStream({
-      reader: upstreamReader,
-      model: "test-model",
-      signal: new AbortController().signal,
-    });
-
-    // Wrap in a Response so ensureStreamReadiness can consume it
-    const response = new Response(stream, {
-      status: 200,
-      headers: { "Content-Type": "text/event-stream" },
-    });
-
-    // This should not throw TypeError
-    const result = await ensureStreamReadiness(response, {
-      timeoutMs: 5000,
-      provider: "lmarena",
-      model: "test-model",
-    });
-
-    assert.ok(result.ok, "Stream readiness should succeed, not throw ERR_INVALID_ARG_TYPE");
-    if (result.ok) {
-      // Verify the stream body can be read
-      const reader = result.response.body?.getReader();
-      assert.ok(reader, "Should have a readable body");
-      const decoder = new TextDecoder();
-      let fullText = "";
-      while (true) {
-        const { done, value } = await reader!.read();
-        if (done) break;
-        fullText += decoder.decode(value, { stream: true });
-      }
-      fullText += decoder.decode();
-      // Should contain the SSE data we sent
-      assert.ok(fullText.includes("Hello"), "Stream should contain the SSE text");
-      assert.ok(fullText.includes("world"), "Stream should contain the SSE text");
-      assert.ok(fullText.includes("[DONE]"), "Stream should end with [DONE] marker");
-    }
-  });
-
-  it("does not throw TypeError when reading chunks directly", async () => {
-    const upstreamReader = new ReadableStream<Uint8Array>({
-      start(controller) {
-        controller.enqueue(new TextEncoder().encode('a0:{"text":"Hello"}\nad:{}\n'));
-        controller.close();
-      },
-    }).getReader();
-
-    const stream = createOpenAIArenaStream({
-      reader: upstreamReader,
-      model: "test-model",
-      signal: new AbortController().signal,
-    });
-
-    const reader = stream.getReader();
-    const chunks: Uint8Array[] = [];
-    while (true) {
-      const { done, value } = await reader.read();
-      if (done) break;
-      // If value is a string, this would throw
-      chunks.push(value);
-    }
-    // All chunks should be Uint8Array, not string
-    assert.ok(chunks.length > 0, "Should have produced at least one chunk");
-    for (const chunk of chunks) {
-      assert.ok(chunk instanceof Uint8Array, "Each chunk must be Uint8Array, not string");
-    }
-  });
-});
--- a/tests/unit/mcp-connect-scope.test.ts
+++ b/tests/unit/mcp-connect-scope.test.ts
@@ -56,14 +56,13 @@ test.after(() => {
  else process.env.INITIAL_PASSWORD = ORIGINAL_INITIAL;
 });

-function mgmtCtx(headers: Headers, method = "GET", pathname = "/api/keys", peerAddress?: string) {
+function mgmtCtx(headers: Headers, method = "GET", pathname = "/api/keys") {
  return {
    request: {
      method,
      headers,
      url: `http://localhost${pathname}`,
      nextUrl: { pathname },
-      socket: peerAddress ? { remoteAddress: peerAddress } : undefined,
    },
    classification: {
      routeClass: "MANAGEMENT" as const,
@@ -269,37 +268,3 @@ test("mcp:connect key is still rejected for the non-bypassable /api/cli-tools/ru
    assert.equal(out.code, "LOCAL_ONLY");
  }
 });
-
-// ─── 7. #9159 — loopback/LAN mcp:connect with requireLogin ──────────────────
-
-test("#9159 mcp:connect-only key must pass /api/mcp/ from loopback when login is required", async () => {
-  await seedAuthRequired();
-  const created = await apiKeysDb.createApiKey("mcp-loopback-only", "machine-mcp-loopback", [
-    MCP_CONNECT_SCOPE,
-  ]);
-  const out = await managementPolicy.evaluate(
-    mgmtCtx(
-      new Headers({ authorization: `Bearer ${created.key}` }),
-      "POST",
-      "/api/mcp/stream",
-      "127.0.0.1"
-    )
-  );
-  assert.equal(out.allow, true, JSON.stringify(out));
-});
-
-test("#9159 mcp:connect-only key must pass /api/mcp/ from private LAN when login is required", async () => {
-  await seedAuthRequired();
-  const created = await apiKeysDb.createApiKey("mcp-lan-only", "machine-mcp-lan", [
-    MCP_CONNECT_SCOPE,
-  ]);
-  const out = await managementPolicy.evaluate(
-    mgmtCtx(
-      new Headers({ authorization: `Bearer ${created.key}` }),
-      "POST",
-      "/api/mcp/stream",
-      "192.168.1.20"
-    )
-  );
-  assert.equal(out.allow, true, JSON.stringify(out));
-});
--- a/tests/unit/mcp-stdio-json-purity.test.ts
+++ b/tests/unit/mcp-stdio-json-purity.test.ts
@@ -20,10 +20,11 @@ const ROOT = new URL("../..", import.meta.url).pathname.replace(/^\/([A-Za-z]:)/
 */
 describe("omniroute --mcp stdio transport", () => {
  it("writes only valid JSON-RPC to stdout — no DB init or other startup logging leaks through", async () => {
-    const child = spawn(process.execPath, [join(ROOT, "bin", "omniroute.mjs"), "--mcp"], {
-      cwd: ROOT,
-      env: process.env,
-    });
+    const child = spawn(
+      process.execPath,
+      [join(ROOT, "bin", "omniroute.mjs"), "--mcp"],
+      { cwd: ROOT, env: process.env }
+    );

    let stdout = "";
    let stderr = "";
@@ -47,23 +48,11 @@ describe("omniroute --mcp stdio transport", () => {
      })}\n`
    );

-    // The full chain (omniroute.mjs CLI startup + spawned MCP child, each paying a tsx
-    // import + the child's DB init/migrations) takes ~10s on a warm dev box and longer on
-    // loaded CI runners — a fixed 4s sleep made this test red from birth. Poll for the
-    // first stdout line instead, then give the stream a short settle window so any
-    // late startup logging that WOULD corrupt the protocol still gets caught.
-    const deadline = Date.now() + 60_000;
-    while (!stdout.includes("\n") && Date.now() < deadline) {
-      await new Promise((resolve) => setTimeout(resolve, 100));
-    }
-    await new Promise((resolve) => setTimeout(resolve, 1000));
+    await new Promise((resolve) => setTimeout(resolve, 4000));
    child.kill();

    const stdoutLines = stdout.split("\n").filter((line) => line.trim().length > 0);
-    assert.ok(
-      stdoutLines.length > 0,
-      "expected at least one line on stdout (the initialize response)"
-    );
+    assert.ok(stdoutLines.length > 0, "expected at least one line on stdout (the initialize response)");

    for (const line of stdoutLines) {
      assert.doesNotThrow(
@@ -72,7 +61,9 @@ describe("omniroute --mcp stdio transport", () => {
      );
    }

-    const initResponse = stdoutLines.map((line) => JSON.parse(line)).find((msg) => msg.id === 1);
+    const initResponse = stdoutLines
+      .map((line) => JSON.parse(line))
+      .find((msg) => msg.id === 1);
    assert.ok(initResponse, "expected an initialize response with id 1 on stdout");
    assert.equal(initResponse.jsonrpc, "2.0");

--- a/tests/unit/muse-code-models.test.ts
+++ b/tests/unit/muse-code-models.test.ts
@@ -0,0 +1,81 @@
+/**
+ * Tests for Muse Code CLI model catalog endpoint.
+ *
+ * Verifies GET /v1/muse-code/models returns the proprietary Muse format.
+ */
+
+import test from "node:test";
+import assert from "node:assert/strict";
+
+import { muse_codeProvider } from "../../open-sse/config/providers/registry/muse-code/index.ts";
+
+// ── Model catalog shape ─────────────────────────────────────────────────────
+
+test("muse-code provider has at least one model", () => {
+  assert.ok(muse_codeProvider.models.length >= 1);
+});
+
+test("muse-code models have unique ids", () => {
+  const ids = muse_codeProvider.models.map((m) => m.id);
+  const unique = new Set(ids);
+  assert.equal(unique.size, ids.length, "model IDs must be unique");
+});
+
+test("muse-code models include llama-4-maverick", () => {
+  const ids = muse_codeProvider.models.map((m) => m.id);
+  assert.ok(ids.includes("llama-4-maverick"), "must include llama-4-maverick");
+});
+
+test("muse-code models include llama-4-scout", () => {
+  const ids = muse_codeProvider.models.map((m) => m.id);
+  assert.ok(ids.includes("llama-4-scout"), "must include llama-4-scout");
+});
+
+test("muse-code models include llama-3.3-70b", () => {
+  const ids = muse_codeProvider.models.map((m) => m.id);
+  assert.ok(ids.includes("llama-3.3-70b"), "must include llama-3.3-70b");
+});
+
+test("llama-4 models have supportsXHighEffort", () => {
+  const maverick = muse_codeProvider.models.find((m) => m.id === "llama-4-maverick");
+  assert.ok(maverick, "llama-4-maverick must exist");
+  assert.equal(maverick.supportsXHighEffort, true);
+
+  const scout = muse_codeProvider.models.find((m) => m.id === "llama-4-scout");
+  assert.ok(scout, "llama-4-scout must exist");
+  assert.equal(scout.supportsXHighEffort, true);
+});
+
+test("llama-3.3-70b does not support reasoning", () => {
+  const model = muse_codeProvider.models.find((m) => m.id === "llama-3.3-70b");
+  assert.ok(model, "llama-3.3-70b must exist");
+  assert.equal(model.supportsReasoning, false);
+});
+
+test("non-reasoning models do not declare supportsXHighEffort", () => {
+  for (const model of muse_codeProvider.models) {
+    if (!model.supportsReasoning) {
+      assert.equal(
+        model.supportsXHighEffort,
+        undefined,
+        `${model.id} is not a reasoning model but has supportsXHighEffort`
+      );
+    }
+  }
+});
+
+// ── Vision models ───────────────────────────────────────────────────────────
+
+test("vision models have supportsVision: true", () => {
+  const expectedVision = [
+    "llama-4-maverick",
+    "llama-4-scout",
+    "llama-3.2-90b-vision",
+    "llama-3.2-11b-vision",
+  ];
+  for (const model of muse_codeProvider.models) {
+    if (expectedVision.includes(model.id)) {
+      assert.equal(model.supportsVision, true, `${model.id} should have supportsVision`);
+    }
+  }
+});
--- a/tests/unit/muse-code-provider.test.ts
+++ b/tests/unit/muse-code-provider.test.ts
@@ -0,0 +1,91 @@
+/**
+ * Tests for Muse Code CLI provider registry entry.
+ *
+ * Verifies the provider entry loads correctly with expected config.
+ */
+
+import test from "node:test";
+import assert from "node:assert/strict";
+
+import { muse_codeProvider } from "../../open-sse/config/providers/registry/muse-code/index.ts";
+import { getRegistryEntry } from "../../open-sse/config/providerRegistry.ts";
+
+// ── Registry entry structure ────────────────────────────────────────────────
+
+test("muse-code provider entry has id", () => {
+  assert.equal(muse_codeProvider.id, "muse-code");
+});
+
+test("muse-code provider entry has alias", () => {
+  assert.equal(muse_codeProvider.alias, "mc");
+});
+
+test("muse-code provider uses openai format", () => {
+  assert.equal(muse_codeProvider.format, "openai");
+});
+
+test("muse-code provider uses apikey auth", () => {
+  assert.equal(muse_codeProvider.authType, "apikey");
+  assert.equal(muse_codeProvider.authHeader, "bearer");
+});
+
+test("muse-code provider has passthroughModels enabled", () => {
+  assert.equal(muse_codeProvider.passthroughModels, true);
+});
+
+// ── Model entries ───────────────────────────────────────────────────────────
+
+test("muse-code provider has curated models", () => {
+  assert.ok(muse_codeProvider.models.length > 0);
+});
+
+test("all muse-code models have contextLength", () => {
+  for (const model of muse_codeProvider.models) {
+    assert.ok(
+      typeof model.contextLength === "number" && model.contextLength > 0,
+      `${model.id} must have positive contextLength`
+    );
+  }
+});
+
+test("all muse-code models have toolCalling: true", () => {
+  for (const model of muse_codeProvider.models) {
+    assert.equal(model.toolCalling, true, `${model.id} must have toolCalling enabled`);
+  }
+});
+
+test("all muse-code models have targetFormat: openai-responses", () => {
+  for (const model of muse_codeProvider.models) {
+    assert.equal(
+      model.targetFormat,
+      "openai-responses",
+      `${model.id} must use openai-responses target format`
+    );
+  }
+});
+
+test("reasoning models have supportsXHighEffort", () => {
+  for (const model of muse_codeProvider.models) {
+    if (model.supportsReasoning) {
+      assert.equal(
+        model.supportsXHighEffort,
+        true,
+        `${model.id} is a reasoning model but missing supportsXHighEffort`
+      );
+    }
+  }
+});
+
+// ── Registry discovery ──────────────────────────────────────────────────────
+
+test("muse-code is discoverable via getRegistryEntry", () => {
+  const entry = getRegistryEntry("muse-code");
+  assert.ok(entry, "getRegistryEntry must return muse-code entry");
+  assert.equal(entry.id, "muse-code");
+});
+
+test("muse-code is discoverable via alias", () => {
+  const entry = getRegistryEntry("mc");
+  assert.ok(entry, "getRegistryEntry must find muse-code by alias mc");
+  assert.equal(entry.id, "muse-code");
+});
--- a/tests/unit/pack-artifact-policy.test.ts
+++ b/tests/unit/pack-artifact-policy.test.ts
@@ -154,7 +154,6 @@ test("findMissingArtifactPaths flags missing root runtime files in the tarball",
    "bin/cli/utils/storageKeyProvision.mjs",
    "bin/cli/utils/versionFastPath.mjs",
    "bin/mcp-server.mjs",
-    "bin/mcpStdioConsoleGuard.mjs",
    "bin/nodeRuntimeSupport.mjs",
    "dist/head-response-guard.cjs",
    "dist/http-method-guard.cjs",
--- a/tests/unit/plugins-route-error-sanitization.test.ts
+++ b/tests/unit/plugins-route-error-sanitization.test.ts
@@ -42,10 +42,6 @@ const PLUGIN_ROUTES: Array<{ rel: string; label: string }> = [
    rel: "src/app/api/plugins/marketplace/route.ts",
    label: "GET /api/plugins/marketplace",
  },
-  {
-    rel: "src/app/api/plugins/marketplace/install/route.ts",
-    label: "POST /api/plugins/marketplace/install",
-  },
 ];

 for (const { rel, label } of PLUGIN_ROUTES) {
--- a/tests/unit/plugins-welcome-banner-e2e.test.ts
+++ b/tests/unit/plugins-welcome-banner-e2e.test.ts
@@ -51,8 +51,9 @@ function createFixturePlugin(name: string, opts?: { onResponse?: boolean; onRequ
 // ── Manifest validation ──

 test("plugin manifest validation", async (t) => {
-  const { validateManifest, safeValidateManifest, applyDefaults } =
-    await import("../../src/lib/plugins/manifest.ts");
+  const { validateManifest, safeValidateManifest, applyDefaults } = await import(
+    "../../src/lib/plugins/manifest.ts"
+  );

  await t.test("valid manifest parses with defaults", () => {
    const result = validateManifest({
@@ -135,22 +136,8 @@ test("plugin hooks system", async (t) => {

  await t.test("registerHook registers and sorts by priority", () => {
    const calls: string[] = [];
-    registerHook(
-      "onRequest",
-      "plugin-b",
-      () => {
-        calls.push("b");
-      },
-      200
-    );
-    registerHook(
-      "onRequest",
-      "plugin-a",
-      () => {
-        calls.push("a");
-      },
-      100
-    );
+    registerHook("onRequest", "plugin-b", () => { calls.push("b"); }, 200);
+    registerHook("onRequest", "plugin-a", () => { calls.push("a"); }, 100);
    const hooks = getHooks("onRequest");
    assert.equal(hooks.length, 2);
    assert.equal(hooks[0].pluginName, "plugin-a");
@@ -187,30 +174,9 @@ test("plugin hooks system", async (t) => {

  await t.test("emitHook calls all handlers in order", async () => {
    const order: number[] = [];
-    registerHook(
-      "onTest",
-      "h1",
-      () => {
-        order.push(1);
-      },
-      100
-    );
-    registerHook(
-      "onTest",
-      "h2",
-      () => {
-        order.push(2);
-      },
-      200
-    );
-    registerHook(
-      "onTest",
-      "h3",
-      () => {
-        order.push(3);
-      },
-      150
-    );
+    registerHook("onTest", "h1", () => { order.push(1); }, 100);
+    registerHook("onTest", "h2", () => { order.push(2); }, 200);
+    registerHook("onTest", "h3", () => { order.push(3); }, 150);
    await emitHook("onTest", {});
    assert.deepEqual(order, [1, 3, 2]);
    resetHooks();
@@ -218,22 +184,8 @@ test("plugin hooks system", async (t) => {

  await t.test("emitHook swallows handler errors", async () => {
    const calls: string[] = [];
-    registerHook(
-      "onErr",
-      "bad",
-      () => {
-        throw new Error("boom");
-      },
-      100
-    );
-    registerHook(
-      "onErr",
-      "good",
-      () => {
-        calls.push("ok");
-      },
-      200
-    );
+    registerHook("onErr", "bad", () => { throw new Error("boom"); }, 100);
+    registerHook("onErr", "good", () => { calls.push("ok"); }, 200);
    await emitHook("onErr", {});
    assert.deepEqual(calls, ["ok"]);
    resetHooks();
@@ -251,14 +203,7 @@ test("plugin hooks system", async (t) => {
  await t.test("emitHookBlocking returns early on blocked", async () => {
    const calls: string[] = [];
    registerHook("onBlock2", "blocker", () => ({ blocked: true, response: { error: "no" } }), 100);
-    registerHook(
-      "onBlock2",
-      "after",
-      () => {
-        calls.push("after");
-      },
-      200
-    );
+    registerHook("onBlock2", "after", () => { calls.push("after"); }, 200);
    const result = await emitHookBlocking("onBlock2", {});
    assert.equal(result.blocked, true);
    assert.equal(calls.length, 0);
@@ -267,13 +212,7 @@ test("plugin hooks system", async (t) => {

  await t.test("runOnRequest delegates to emitHookBlocking", async () => {
    registerHook("onRequest", "req", () => ({ metadata: { seen: true } }), 100);
-    const result = await runOnRequest({
-      requestId: "1",
-      body: {},
-      model: "gpt-4",
-      provider: "openai",
-      metadata: {},
-    });
+    const result = await runOnRequest({ requestId: "1", body: {}, model: "gpt-4", provider: "openai", metadata: {} });
    assert.deepEqual(result.metadata, { seen: true });
    resetHooks();
  });
@@ -291,14 +230,7 @@ test("plugin hooks system", async (t) => {

  await t.test("runOnError is fire-and-forget", async () => {
    let called = false;
-    registerHook(
-      "onError",
-      "err-handler",
-      () => {
-        called = true;
-      },
-      100
-    );
+    registerHook("onError", "err-handler", () => { called = true; }, 100);
    await runOnError(
      { requestId: "1", body: {}, model: "gpt-4", provider: "openai", metadata: {} },
      new Error("test")
@@ -325,8 +257,6 @@ test("plugin hooks system", async (t) => {
      "onActivate",
      "onDeactivate",
      "onUninstall",
-      // #9668: fire-and-forget stream telemetry hook (runOnStreamCompleteHooks)
-      "onStreamComplete",
    ]);
    resetHooks();
  });
@@ -379,7 +309,9 @@ test("welcome banner PoC plugin lifecycle", async (t) => {
  await t.test("onResponse injects banner into response", async () => {
    const mod = await import(join(pluginDir, "index.mjs"));
    const response = {
-      choices: [{ message: { role: "assistant", content: "Hello!" } }],
+      choices: [
+        { message: { role: "assistant", content: "Hello!" } },
+      ],
    };
    const result = await mod.plugin.onResponse({}, response);
    assert.ok(result.choices[0].message.content.includes("[Welcome to OmniRoute"));
@@ -389,7 +321,9 @@ test("welcome banner PoC plugin lifecycle", async (t) => {
  await t.test("onResponse handles streaming delta", async () => {
    const mod = await import(join(pluginDir, "index.mjs"));
    const response = {
-      choices: [{ delta: { content: "stream chunk" } }],
+      choices: [
+        { delta: { content: "stream chunk" } },
+      ],
    };
    const result = await mod.plugin.onResponse({}, response);
    assert.ok(result.choices[0].delta.content.includes("[Welcome to OmniRoute"));
--- a/tests/unit/provider-models-route-codex.test.ts
+++ b/tests/unit/provider-models-route-codex.test.ts
@@ -181,11 +181,10 @@ test("provider models route merges live Codex models with the local catalog then
  // merge conservatively — the smaller of live vs. pinned wins, never the
  // larger, so a stale/inflated live number can never make OmniRoute promise
  // more context than the account can actually serve (#7012). Here the pinned
-  // GPT-5.6 Codex contract (922000/128000, see GPT_5_6_CODEX_CAPABILITIES —
-  // raised from 272000 in #9432) is smaller than the live payload's
-  // 999999/999999, so the pinned value wins.
+  // GPT-5.6 Codex contract (272000/128000, see GPT_5_6_CODEX_CAPABILITIES) is
+  // smaller than the live payload's 999999/999999, so the pinned value wins.
  assert.equal(liveModel?.name, "GPT 5.6 Sol Live");
-  assert.equal(liveModel?.inputTokenLimit, 922000);
+  assert.equal(liveModel?.inputTokenLimit, 272000);
  assert.equal(liveModel?.outputTokenLimit, 128000);
  assert.equal(liveModel?.apiFormat, "responses");
  assert.deepEqual(liveModel?.supportedEndpoints, ["responses"]);
--- a/tests/unit/provider-registry-github-copilot-targetformat.test.ts
+++ b/tests/unit/provider-registry-github-copilot-targetformat.test.ts
@@ -67,9 +67,6 @@ for (const id of [
  "gpt-5.4-mini",
  "gpt-5.4",
  "gpt-5.5",
-  "gpt-5.6-sol",
-  "gpt-5.6-terra",
-  "gpt-5.6-luna",
  "mai-code-1-flash",
  "gpt-5-mini",
  "oswe-vscode-prime",
--- a/tests/unit/quality-rail-gate-membership.test.ts
+++ b/tests/unit/quality-rail-gate-membership.test.ts
@@ -48,15 +48,19 @@ test("lint-guard carries the quality-ratchet engine (collect → ratchet → req

 test("fast-gates carries the deterministic ratchets and security scanners from the main rail", () => {
  const block = jobBlock("fast-gates");
-  // #8542: all gates run inside a single aggregation step's bash loop.
-  // Check that the gate names appear in the arrays or the loop body.
  for (const needle of [
-    "cycles lockfile duplication dead-code type-coverage compression-budget",
-    "secrets vuln-ratchet workflows openapi-breaking",
-    "typecheck:core",
-    "check:dashboard-typecheck",
+    "npm run check:cycles",
+    "npm run check:lockfile",
+    "npm run check:duplication",
+    "npm run check:dead-code",
+    "npm run check:type-coverage",
+    "npm run check:compression-budget",
+    "npm run check:secrets -- --ratchet",
+    "npm run check:vuln-ratchet -- --ratchet",
+    "npm run check:workflows -- --ratchet",
+    "npm run check:openapi-breaking -- --ratchet",
  ]) {
-    assert.ok(block.includes(needle), `fast-gates must contain "${needle}"`);
+    assert.ok(block.includes(needle), `fast-gates must run "${needle}"`);
  }
  assert.ok(
    block.includes(
@@ -82,7 +86,7 @@ test("fast-gates carries the deterministic ratchets and security scanners from t

 test("the complexity ratchet stays on the release rail (G0's written validation criterion)", () => {
  assert.ok(
-    jobBlock("fast-gates").includes("complexity-ratchets"),
+    jobBlock("fast-gates").includes("npm run check:complexity-ratchets"),
    "a complexity regression in a PR→release/** must be blocked by fast-gates"
  );
 });
--- a/tests/unit/quota-pool-connections.test.ts
+++ b/tests/unit/quota-pool-connections.test.ts
@@ -57,7 +57,9 @@ test.after(async () => {
 // ── D1.1: Migration file ────────────────────────────────────────────────────

 test("migration 086 file exists and contains quota_pool_connections DDL", () => {
-  const migrationPath = path.resolve("src/lib/db/migrations/087_quota_pool_connections.sql");
+  const migrationPath = path.resolve(
+    "src/lib/db/migrations/087_quota_pool_connections.sql"
+  );
  assert.ok(fs.existsSync(migrationPath), `migration file not found: ${migrationPath}`);

  const sql = fs.readFileSync(migrationPath, "utf8");
@@ -151,14 +153,14 @@ test("updatePool without connectionIds leaves join rows untouched", () => {

 // ── D1.4: deletePool removes join rows ────────────────────────────────────

-test("deletePool removes quota_pool_connections rows", async () => {
+test("deletePool removes quota_pool_connections rows", () => {
  const pool = poolsDb.createPool({
    connectionId: "del-a",
    name: "To Delete",
    connectionIds: ["del-a", "del-b"],
  });

-  const deleted = await poolsDb.deletePool(pool.id);
+  const deleted = poolsDb.deletePool(pool.id);
  assert.equal(deleted, true, "deletePool should return true");

  // Pool should be gone.
--- a/tests/unit/quota-pool-delete-prune.test.ts
+++ b/tests/unit/quota-pool-delete-prune.test.ts
@@ -23,7 +23,8 @@ import path from "node:path";
 // ── DB harness (same pattern as quota-exclusivity-reconcile.test.ts) ─────────
 const TEST_DATA_DIR = fs.mkdtempSync(path.join(os.tmpdir(), "omniroute-pool-delete-prune-"));
 process.env.DATA_DIR = TEST_DATA_DIR;
-process.env.API_KEY_SECRET = process.env.API_KEY_SECRET || "delete-prune-test-secret-32chars!!";
+process.env.API_KEY_SECRET =
+  process.env.API_KEY_SECRET || "delete-prune-test-secret-32chars!!";

 const core = await import("../../src/lib/db/core.ts");
 const poolsDb = await import("../../src/lib/db/quotaPools.ts");
@@ -61,8 +62,9 @@ test.after(async () => {
 // ── Helper: get allowed_quotas for a key by id from DB ───────────────────────
 function getAllowedQuotasById(keyId: string): string[] {
  const db = core.getDbInstance();
-  const row = (db as any).prepare("SELECT allowed_quotas FROM api_keys WHERE id = ?").get(keyId) as
-    { allowed_quotas: string } | undefined;
+  const row = (db as any)
+    .prepare("SELECT allowed_quotas FROM api_keys WHERE id = ?")
+    .get(keyId) as { allowed_quotas: string } | undefined;
  if (!row) return [];
  try {
    const parsed = JSON.parse(row.allowed_quotas ?? "[]");
@@ -83,7 +85,7 @@ test("deletePool prunes its id from api_key allowed_quotas", async () => {
  const before = getAllowedQuotasById(keyObj.id);
  assert.ok(before.includes(pool.id), `pool.id should be in allowed_quotas before delete`);

-  await poolsDb.deletePool(pool.id);
+  poolsDb.deletePool(pool.id);

  const after = getAllowedQuotasById(keyObj.id);
  assert.ok(!after.includes(pool.id), `pool.id should NOT be in allowed_quotas after delete`);
@@ -101,7 +103,7 @@ test("deletePool preserves unrelated pool ids in allowed_quotas", async () => {
    allowedQuotas: [poolToDelete.id, otherPool.id, unrelatedId],
  });

-  await poolsDb.deletePool(poolToDelete.id);
+  poolsDb.deletePool(poolToDelete.id);

  const after = getAllowedQuotasById(keyObj.id);
  assert.ok(!after.includes(poolToDelete.id), "deleted pool id should be removed");
@@ -119,7 +121,7 @@ test("deletePool does not modify keys that don't reference the deleted pool", as
  // This key only references otherPool, not poolToDelete
  await apiKeysDb.updateApiKeyPermissions(keyObj.id, { allowedQuotas: [otherPool.id] });

-  await poolsDb.deletePool(poolToDelete.id);
+  poolsDb.deletePool(poolToDelete.id);

  const after = getAllowedQuotasById(keyObj.id);
  assert.deepEqual(after, [otherPool.id], "key referencing only other pool should be unchanged");
@@ -132,7 +134,7 @@ test("deletePool: key with empty allowed_quotas stays empty", async () => {
  const keyObj = await apiKeysDb.createApiKey("Prune Key 4", "machine-prune-4");
  // Don't set allowedQuotas — default is []

-  await poolsDb.deletePool(pool.id);
+  poolsDb.deletePool(pool.id);

  const after = getAllowedQuotasById(keyObj.id);
  assert.deepEqual(after, [], "empty allowed_quotas should remain empty after delete");
@@ -154,7 +156,7 @@ test("deletePool prunes pool id from ALL keys that reference it", async () => {
    await apiKeysDb.updateApiKeyPermissions(k.id, { allowedQuotas: [pool.id, otherPoolId] });
  }

-  await poolsDb.deletePool(pool.id);
+  poolsDb.deletePool(pool.id);

  for (const k of keys) {
    const after = getAllowedQuotasById(k.id);
@@ -165,31 +167,23 @@ test("deletePool prunes pool id from ALL keys that reference it", async () => {

 // ── 6. deletePool still returns true/false correctly ─────────────────────────

-test("deletePool returns true for existing pool, false for non-existent", async () => {
+test("deletePool returns true for existing pool, false for non-existent", () => {
  const pool = poolsDb.createPool({ connectionId: "conn-ret-1", name: "Return Test" });
-  assert.equal(await poolsDb.deletePool(pool.id), true, "should return true for existing pool");
-  assert.equal(
-    await poolsDb.deletePool(pool.id),
-    false,
-    "should return false for already-deleted pool"
-  );
-  assert.equal(
-    await poolsDb.deletePool("nonexistent-id"),
-    false,
-    "should return false for unknown id"
-  );
+  assert.equal(poolsDb.deletePool(pool.id), true, "should return true for existing pool");
+  assert.equal(poolsDb.deletePool(pool.id), false, "should return false for already-deleted pool");
+  assert.equal(poolsDb.deletePool("nonexistent-id"), false, "should return false for unknown id");
 });

 // ── 7. Pool row and allocation rows are gone after delete (regression guard) ──

-test("deletePool removes pool and allocation rows from DB", async () => {
+test("deletePool removes pool and allocation rows from DB", () => {
  const pool = poolsDb.createPool({
    connectionId: "conn-reg-1",
    name: "Regression Pool",
    allocations: [{ apiKeyId: "key-reg-1", weight: 50, policy: "hard" }],
  });

-  await poolsDb.deletePool(pool.id);
+  poolsDb.deletePool(pool.id);

  assert.equal(poolsDb.getPool(pool.id), null, "getPool should return null after delete");
  const { items: allPools } = poolsDb.listPools();
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
diegosouzapw	bf1681727e	Merge remote-tracking branch 'origin/release/v3.8.50' into feat/9544-muse-code-cli-provider	2026-08-08 08:47:38 -03:00
diegosouzapw	b80a11e98a	fix(providers): register muse-code canonical provider + golden snapshot - Add muse-code to APIKEY_PROVIDERS_FRONTIER so check:provider-consistency passes - Regenerate translate-path golden snapshot to include the muse-code entry (20 additive lines, no other providers changed)	2026-08-08 08:47:18 -03:00
diegosouzapw	ea7866ae80	Merge remote-tracking branch 'origin/release/v3.8.50' into feat/9544-muse-code-cli-provider	2026-08-07 17:01:16 -03:00
diegosouzapw	ef236934c0	feat(providers): add Muse Code CLI provider preset (#9544 )	2026-08-06 21:29:32 -03:00
				`@@ -0,0 +1 @@`
				`- feat(providers): add Muse Code CLI provider preset (#9544)`
				`@@ -1 +0,0 @@`
				`- fix(ci): aggregate all fast-gates into non-fail-fast loop so one red gate no longer masks later gates (#8542)`
				`@@ -1 +0,0 @@`
				`- fix(build): include better-sqlite3 prebuilds in standalone bun bundle`
				`@@ -1 +0,0 @@`
				`- fix(quota): Deleting a quota pool now removes its scoped managed combos without racing in-flight pool mutations ([#8906](https://github.com/diegosouzapw/OmniRoute/pull/8906)) — thanks @xiaoyaner0201`
				`@@ -1 +0,0 @@`
				`- fix(github): add targetFormat to GPT-5.6 Sol/Terra/Luna models (#8951)`
				`@@ -1 +0,0 @@`
				- fix(translator): the Responses-to-Chat promotion path called `normalizeResponsesReasoningEffort` without the model argument, so GPT-5.6 Sol/Terra/Luna requests with `reasoning.effort: "max""` were downgraded to `"xhigh"`. The model is now threaded through, preserving `max` for GPT-5.6 while keeping the legacy downgrade for older models ([#8997](https://github.com/diegosouzapw/OmniRoute/pull/8997))
				`@@ -1 +0,0 @@`
				`- fix(api): use configured prefix instead of raw node UUID for alias-backed model id in /v1/models (#9034)`
				`@@ -1 +0,0 @@`
				`- fix(api): auto/* routing aliases bypass API-key allowedConnections/disableNonPublicModels (#9057)`
				`@@ -1 +0,0 @@`
				`- fix(providers): admit audio-speech/audio-transcriptions apiType in audio route provider-node filters (#9096)`