fix(security): container/Fly REQUIRE_API_KEY posture + free-tier usage leak (#13679)

PR E of the #13679 insecure-defaults umbrella (items #6, #7; item #8 analyzed
as by-design, no change). The published Docker image and fly.toml shipped
without REQUIRE_API_KEY set, so a bare `docker run` (README/QUICK-START
one-liners, no --env-file) or a `fly deploy` combined "keyless" with
"world-reachable" for the anonymous /v1 LLM proxy. docker-compose.yml already
mitigates this via loopback-only binding (#12568) and correctly keeps
following the operator's own .env, so it is untouched. The npm/CLI
local-first REQUIRE_API_KEY=false default in featureFlagDefinitions.ts is
also untouched per the owner's decision.

/api/free-tier/summary ships an unconditional Access-Control-Allow-Origin: "*"
and always included the operator's own local usedThisMonth/remaining usage
regardless of auth — a low-severity info leak to any reachable origin. Both
fields are now withheld from unauthenticated callers while the intentionally
public catalog data stays served to everyone.

The gemini-SSE (openai-to-gemini-sse.ts) sub-finding needed no code change:
/v1beta/models/*:streamGenerateContent is already classified CLIENT_API and
fronted by clientApiPolicy through src/proxy.ts before the translator ever
runs, and its CORS-header echo was already hardened fail-closed by #12573.
REQUIRE_API_KEY=true (this PR's container/Fly default) closes the dependency
that finding cited. Added a locking regression test confirming this chain.

Regression tests:
- tests/unit/issue-13679-container-posture-require-api-key.test.ts
- tests/unit/issue-13679-free-tier-summary-usage-leak.test.ts
- tests/unit/issue-13679-gemini-sse-requires-api-key.test.ts (confirmation)

Refs #13679

.env.example

@@ -737,6 +737,12 @@ NEXT_PUBLIC_CLOUD_URL=
 ENABLE_SOCKS5_PROXY=true
 NEXT_PUBLIC_ENABLE_SOCKS5_PROXY=true
 
+# Opt-in feature flag (default off; a dashboard DB override wins over this value): proxy pools
+# and per-account rotation stop re-serving a member that just failed (TCP probe refused, or a
+# 429 received through it) for a period that doubles on each repeat, up to a cap. No proxy
+# status is written. "true" (or 1, yes) enables it; unset keeps plain selection.
+# PROXY_SKIP_RECENTLY_FAILED=false
+
 # Standard proxy variables (lowercase variants also supported).
 # HTTP_PROXY=http://127.0.0.1:7890
 # HTTPS_PROXY=http://127.0.0.1:7890
@@ -1686,6 +1692,8 @@ CURSOR_USER_AGENT="Cursor/3.4"
 # ── TLS client (wreq-js fingerprint proxy) ──
 # TLS_CLIENT_TIMEOUT_MS=600000       # Inherits from FETCH_TIMEOUT_MS by default
 # TLS_FIRST_BYTE_WATCHDOG_MS=10000   # #12656: bounds time-to-first-byte on the wreq body (0 disables)
+# OPENCODE_RESPONSES_STALL_ROTATION=false  # #13484 feature flag (Settings → Feature Flags wins): rotate once when a streamed Responses reply stalls before its first byte
+# RESPONSES_FIRST_BYTE_TIMEOUT_MS=15000  # #13484: OpenCode Responses first-byte window, only used when the OPENCODE_RESPONSES_STALL_ROTATION flag is on (0 disables)
 
 # ── API Bridge (/v1 proxy server) ──
 # API_BRIDGE_PROXY_TIMEOUT_MS=600000             # Proxy hop timeout (default: 10min)
@@ -2231,6 +2239,11 @@ APP_LOG_TO_FILE=true
 # proxy — only the operator sets active/inactive (a flaky probe must not strand an
 # assigned proxy; #6246). Set "true" to restore the legacy test-and-set behaviour.
 # PROXY_HEALTH_AUTO_DEACTIVATE=false
+# Opt-in feature flag (default off; a dashboard DB override wins over this value): show,
+# under a proxy pool in the dashboard, how many observed egress IPs served its members over
+# the last 24 h and how many connections used them (read-only, computed from the proxy log,
+# never used for routing). "true" (or 1, yes) enables it.
+# PROXY_POOL_EGRESS_OBSERVATION=false
 
 # Allow OAuth and provider validation flows to bypass a pinned proxy and connect
 # directly when proxy reachability pre-checks fail. Default: false.
@@ -2735,6 +2748,13 @@ APP_LOG_TO_FILE=true
 # tokens (accessToken / refreshToken / providerSpecificData). Default OFF —
 # only non-credential metadata is synced. See docs/security/SOCKET_DEV_FINDINGS.md §5.
 # OMNIROUTE_CLOUD_SYNC_SECRETS=false
+#
+# Set to "true" to reject an UNSIGNED Cloud sync response when no local secret
+# is configured (#13679). Default OFF keeps v3.8.x back-compat for peers that
+# have not rotated in a shared secret yet; v3.9 flips the default to enforced.
+# A signature that IS present is always verified, and always rejected when
+# OMNIROUTE_CLOUD_SYNC_SECRET is unset, regardless of this flag.
+# OMNIROUTE_CLOUD_SYNC_ENFORCE_SIGNATURE=false
 
 # ─── Zed import legacy compat (v3.8.6) ──────────────────────────────────────
 # Set to "true" to fall back to the v3.8.5 one-step "import everything from
@@ -3030,6 +3050,13 @@ QUOTA_STORE_DRIVER=sqlite
 # CHATGPT_WEB_CODEX_CHROME_PATH=/usr/bin/chromium
 # CHROME_PATH=/usr/bin/chromium
 # CHATGPT_WEB_CODEX_CDP_URL=http://chatgpt-web-codex-browser:9223
+# CDP_PROXY_TOKEN required by docker/chatgpt-web-codex-browser/cdp-proxy.mjs (#13679):
+# when set, every request to the CDP proxy sidecar must present it as an
+# `X-Omni-Cdp-Token` header. Left unset, the proxy keeps forwarding requests
+# unauthenticated (network isolation via docker-compose.yml's dedicated
+# `chatgpt-web-codex-net` is the default mitigation). Generate with:
+# `openssl rand -hex 32`
+# CDP_PROXY_TOKEN=
 # CHATGPT_WEB_CODEX_TUNNEL_ID=tunnel_0123456789abcdef0123456789abcdef
 # CHATGPT_WEB_CODEX_RUNTIME_KEY=
 # CHATGPT_WEB_CODEX_CONNECTOR_NAME=OmniRoute Codex v2

.github/workflows/ci.yml

@@ -511,9 +511,11 @@ jobs:
       - run: node scripts/i18n/check-ui-keys-coverage.mjs --threshold=65
       # Real-translation ratchet: a leaf copied verbatim from en.json passes key
       # parity above but is still English to the user (es shipped 55% English).
-      # Advisory in PR-0; flipped to blocking once the backlog is retranslated (PR-4).
-      - name: i18n real-translation ratio (advisory)
-        run: node scripts/i18n/check-translation-ratio.mjs --warn
+      # Blocking since PR-4 retranslated the verbatim-English backlog: the share of
+      # untranslated leaves per locale may only fall (ratchet baseline in
+      # config/quality/i18n-translation-baseline.json; `npm run i18n:check-ratio:update`).
+      - name: i18n real-translation ratio
+        run: node scripts/i18n/check-translation-ratio.mjs
       # #8463: a rewritten English value used to leave its 39 translations behind
       # silently (googleOAuthWarning shipped wrong copy in 39 locales for months).
       # Key parity above cannot see it — a stale translation counts as covered.
@@ -531,6 +533,20 @@ jobs:
         env:
           BASE_REF: ${{ github.base_ref && format('origin/{0}', github.base_ref) || '' }}
         run: node scripts/i18n/check-new-key-coverage.mjs
+      # Absolute complement of the two gates above: every locale must carry exactly the key
+      # set of en.json, whatever the age of the key. A locale batch is generated from the
+      # en.json of the day the branch is cut and translates for days while the base keeps
+      # adding keys — the batch PR adds no key itself, so the new-key gate stays silent and
+      # 43 absent keys out of ~13,000 still read 99.7 % coverage. Incident 2026-09-15:
+      # batch 1 (#13044) landed 43 keys short in nine locales, batch 2 (#13660) 10 keys short
+      # in eight. Fix is `sync-ui-keys --locale=<codes> --translate-markers`.
+      - name: i18n key completeness (every locale carries every en.json key)
+        run: node scripts/i18n/check-key-completeness.mjs
+      # Same gate for the CLI catalogs (bin/cli/locales). check:cli-i18n only compares
+      # pt-BR / zh-CN / zh-TW; 38 locales shipped with 1–24 of 830 keys for months
+      # (audit 2026-09-16) and the CLI silently fell back to English for them.
+      - name: i18n key completeness (CLI catalogs)
+        run: node scripts/i18n/check-key-completeness.mjs --catalog=cli
 
   # #8038: cheap glossary/protected-terms consistency gate —
   # complements i18n-ui-coverage (key parity) and the ICU `i18n` job below

.github/workflows/radar-export.yml

@@ -10,7 +10,11 @@ name: Radar Export
 on:
   workflow_dispatch: # o operador pode publicar sob demanda (de qualquer ref)
   push:
-    branches: [main] # produção: só o catálogo do main clobra o asset estável
+    # `main` e a release ativa (default branch) publicam no mesmo asset estável: o
+    # radar-server só consome o asset, então um merge de catálogo na release que ficasse
+    # à espera do cron semanal deixava o feed até 7 dias atrás do README (2026-09-14: a
+    # linha da Together removida em d6e62ae só saiu do feed com dispatch manual).
+    branches: [main, "release/**"]
     paths:
       - open-sse/config/freeModelCatalog.data.ts
       - open-sse/config/freeModelCatalog.ts
@@ -19,7 +23,9 @@ on:
       - scripts/release/radar-export.mjs
       - .github/workflows/radar-export.yml
   schedule:
-    - cron: "17 6 * * 1" # semanal (segunda 06:17 UTC): mantém geradoEm/proveniência frescos
+    # Diário 03:17 UTC — antes do `radar-feed.timer` do servidor (04:23 UTC), para o ciclo
+    # do dia já enxergar o export do dia; também mantém geradoEm/proveniência frescos.
+    - cron: "17 3 * * *"
 
 permissions:
   contents: read

.gitleaks.toml

@@ -97,4 +97,11 @@
       # credential; the generic-api-key rule flags the long hyphenated string.
       '''omniroute-cheaperinference-sponsor-banner-dismissed-v\d+''',
       '''SunbreakWebUI1''',
+      # Uzbek dashboard catalog (#13727, src/i18n/messages/uz.json `outputTokenDesc`):
+      # "Yakunlash/javob tokenlari" = "completion/response tokens". The rule reads the
+      # `...TokenDesc` key as a token assignment and the translated words as its value.
+      '''Yakunlash/javob''',
+      # Feature-flag id from #13439 (src/shared/constants/featureFlagDefinitions.ts):
+      # `key: "PROTECTED_PRIORITY_INFRA_502_ENABLED"` is a flag name, not a credential.
+      '''PROTECTED_PRIORITY_INFRA_502_ENABLED''',
     ]

@omniroute/opencode-plugin-v2/README.md

@@ -56,8 +56,14 @@ explicitly:
 }
 ```
 
+The token can also come from the `OMNIROUTE_MANAGEMENT_API_KEY` environment
+variable (the option wins when both are set). Resolution order:
+`managementReadToken` option, then `OMNIROUTE_MANAGEMENT_API_KEY`, then the
+`apiKey` fallback.
+
 Left unset, `managementReadToken` falls back to `apiKey` for backwards
-compatibility. When a gateway rejects that fallback, the catalog still
+compatibility, and the plugin warns once at startup that the fallback is
+active. When a gateway rejects that fallback, the catalog still
 publishes — but with raw model ids instead of display names, no canonical
 alias dedupe, no pricing and no combos. The plugin warns once per endpoint
 when this happens, naming the endpoint and the consequence, so the degraded
@@ -65,25 +71,25 @@ catalog is never a mystery.
 
 ## Options
 
-| Key                              | Default                                        | Notes                                                                                                                 |
-| -------------------------------- | ---------------------------------------------- | --------------------------------------------------------------------------------------------------------------------- |
-| `providerId`                     | `"omniroute"`                                  | Provider id and integration id; models publish under `<providerId>/…`                                                 |
-| `baseURL`                        | required                                       | OmniRoute gateway root (no `/v1` suffix needed)                                                                       |
-| `apiKey`                         | connected credential, then `OMNIROUTE_API_KEY` | Chat key for `/v1/*` — see [Credentials](#credentials)                                                                |
-| `managementReadToken`            | falls back to `apiKey`                         | Management key for `/api/*` (combos, providers, enrichment) — usually **not** the same key                            |
-| `displayName`                    | `"OmniRoute"`                                  | Provider display name                                                                                                 |
-| `timeoutMs`                      | `10000`                                        | Per-endpoint fetch timeout (auto-combos use 5s)                                                                       |
-| `modelCacheTtlMs`                | `300000`                                       | Catalog cache TTL; disk snapshot warms cold starts                                                                    |
-| `timeouts`                       | per-endpoint override                          | `{ models, combos, autoCombos, enrichment }` in ms; falls back to `timeoutMs`                                         |
-| `enrichment`                     | `true`                                         | Fetch names + pricing (`/api/pricing*`, `/api/free-tier/summary`)                                                     |
-| `providerTag`                    | `true`                                         | Prefix a display name with the upstream provider it routes to                                                         |
-| `geminiSanitization`             | `true`                                         | Strip `$schema`/`additionalProperties` from tool schemas sent to Gemini models (`$ref` tools are forwarded untouched) |
-| `usableOnly`                     | `false`                                        | Filter to healthy provisioned providers (`/api/providers`)                                                            |
-| `visibleModels` / `hiddenModels` | `[]`                                           | Exact-or-suffix allowlists, deny wins                                                                                 |
-| `apiFormat.allowAnthropic`       | `false`                                        | Route allowlisted ids to the Anthropic API block                                                                      |
-| `apiFormat.anthropicModels`      | `[]`                                           | Full model ids routed to Anthropic                                                                                    |
-| `apiFormat.anthropicPrefixes`    | v1 defaults                                    | Deprecated, warns once — prefer `anthropicModels`                                                                     |
-| `logLevel` / `startupDebug`      | `warn` / `false`                               | Logger verbosity                                                                                                      |
+| Key                              | Default                                                    | Notes                                                                                                                 |
+| -------------------------------- | ---------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------- |
+| `providerId`                     | `"omniroute"`                                              | Provider id and integration id; models publish under `<providerId>/…`                                                 |
+| `baseURL`                        | required                                                   | OmniRoute gateway root (no `/v1` suffix needed)                                                                       |
+| `apiKey`                         | connected credential, then `OMNIROUTE_API_KEY`             | Chat key for `/v1/*` — see [Credentials](#credentials)                                                                |
+| `managementReadToken`            | option, then `OMNIROUTE_MANAGEMENT_API_KEY`, then `apiKey` | Management key for `/api/*` (combos, providers, enrichment) — usually **not** the same key                            |
+| `displayName`                    | `"OmniRoute"`                                              | Provider display name                                                                                                 |
+| `timeoutMs`                      | `10000`                                                    | Per-endpoint fetch timeout (auto-combos use 5s)                                                                       |
+| `modelCacheTtlMs`                | `300000`                                                   | Catalog cache TTL; disk snapshot warms cold starts                                                                    |
+| `timeouts`                       | per-endpoint override                                      | `{ models, combos, autoCombos, enrichment }` in ms; falls back to `timeoutMs`                                         |
+| `enrichment`                     | `true`                                                     | Fetch names + pricing (`/api/pricing*`, `/api/free-tier/summary`)                                                     |
+| `providerTag`                    | `true`                                                     | Prefix a display name with the upstream provider it routes to                                                         |
+| `geminiSanitization`             | `true`                                                     | Strip `$schema`/`additionalProperties` from tool schemas sent to Gemini models (`$ref` tools are forwarded untouched) |
+| `usableOnly`                     | `false`                                                    | Filter to healthy provisioned providers (`/api/providers`)                                                            |
+| `visibleModels` / `hiddenModels` | `[]`                                                       | Exact-or-suffix allowlists, deny wins                                                                                 |
+| `apiFormat.allowAnthropic`       | `false`                                                    | Route allowlisted ids to the Anthropic API block                                                                      |
+| `apiFormat.anthropicModels`      | `[]`                                                       | Full model ids routed to Anthropic                                                                                    |
+| `apiFormat.anthropicPrefixes`    | v1 defaults                                                | Deprecated, warns once — prefer `anthropicModels`                                                                     |
+| `logLevel` / `startupDebug`      | `warn` / `false`                                           | Logger verbosity                                                                                                      |
 
 ## Tool calling on Gemini models
 

@omniroute/opencode-plugin-v2/src/cache.ts

@@ -1,6 +1,6 @@
 import { createHash } from "node:crypto";
 import { homedir } from "node:os";
-import { mkdir, readFile, unlink, writeFile } from "node:fs/promises";
+import { mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 import type {
   OmniRouteEnrichmentEntry,
@@ -81,6 +81,12 @@ interface DiskSnapshotV2 {
  */
 const MAX_SNAPSHOT_BYTES = 32 * 1024 * 1024;
 
+// Suffix for the temp file each write publishes via rename. Monotone per
+// process: two writes for one provider (for example across a credential
+// rotation) must not share a temp name. Built after the empty-models and
+// size-cap guards, so only real attempts consume a value.
+let snapshotWriteCounter = 0;
+
 function trimTrailingSlashes(value: string): string {
   let i = value.length;
   while (i > 0 && value.charCodeAt(i - 1) === 0x2f) i -= 1;
@@ -133,7 +139,7 @@ export async function readDiskSnapshot(
     if (
       !parsed ||
       typeof parsed.v !== "number" ||
-      parsed.v < SNAPSHOT_FORMAT_VERSION ||
+      parsed.v !== SNAPSHOT_FORMAT_VERSION ||
       typeof parsed.identityFingerprint !== "string" ||
       parsed.identityFingerprint !== identityFingerprint
     ) {
@@ -179,8 +185,14 @@ export async function readDiskSnapshot(
 export async function writeDiskSnapshot(
   providerId: string,
   snapshot: CatalogSnapshot,
-  identityFingerprint: string
+  identityFingerprint: string,
+  logger?: { warn: (message: string) => void }
 ): Promise<void> {
+  // Monotone per-process suffix: two writes for one provider (for example
+  // across a credential rotation) must not share a temp name. Declared here
+  // so the catch below can clean it up; assigned after the guards so only
+  // real attempts consume a counter value.
+  let tmp = "";
   try {
     if (snapshot.models.length === 0) return;
     const file = diskSnapshotPath(providerId);
@@ -196,14 +208,33 @@ export async function writeDiskSnapshot(
       writtenAt: Date.now(),
     };
     let payload = JSON.stringify(envelope);
-    if (payload.length > MAX_SNAPSHOT_BYTES && envelope.enrichment !== undefined) {
+    if (
+      Buffer.byteLength(payload, "utf8") > MAX_SNAPSHOT_BYTES &&
+      envelope.enrichment !== undefined
+    ) {
       delete envelope.enrichment;
       payload = JSON.stringify(envelope);
     }
-    if (payload.length > MAX_SNAPSHOT_BYTES) return;
-    await writeFile(file, payload, { encoding: "utf8", mode: 0o600 });
-  } catch {
+    if (Buffer.byteLength(payload, "utf8") > MAX_SNAPSHOT_BYTES) {
+      logger?.warn(
+        `[omniroute-v2] snapshot for ${providerId} exceeds the size cap, skipping disk write`
+      );
+      return;
+    }
+    tmp = `${file}.${process.pid}.${snapshotWriteCounter++}`;
+    await writeFile(tmp, payload, { encoding: "utf8", mode: 0o600 });
+    await rename(tmp, file);
+  } catch (err) {
     // Best-effort: callers already hold the in-memory entry.
+    logger?.warn(
+      `[omniroute-v2] snapshot write failed for ${providerId}: ` +
+        `${err instanceof Error ? err.message : String(err)}, keeping the in-memory entry`
+    );
+    try {
+      await unlink(tmp);
+    } catch {
+      // Ignore: the temp file may not exist (mkdir failed first).
+    }
   }
 }
 

@omniroute/opencode-plugin-v2/src/index.ts

@@ -31,7 +31,14 @@ import { assertContext } from "./compat.js";
 import { type ApiKeyOrigin, resolveApiKey, warnIfMissing } from "./credentials.js";
 import { createSourceErrorReporter } from "./enrichment-report.js";
 import { sanitizeToolSchemasFor } from "./gemini-language.js";
-import { PLUGIN_ID, parsePluginOptions, resolveTimeouts, type PluginOptions } from "./options.js";
+import {
+  MANAGEMENT_TOKEN_ENV_VAR,
+  PLUGIN_ID,
+  parsePluginOptions,
+  resolveManagementReadToken,
+  resolveTimeouts,
+  type PluginOptions,
+} from "./options.js";
 
 /**
  * A fetch result that says whether it succeeded. Returning a bare `[]` on
@@ -61,7 +68,7 @@ function toResolvedOptions(parsed: PluginOptions): ResolvedOptions {
     providerId: parsed.providerId,
     baseURL: parsed.baseURL,
     apiKey: parsed.apiKey ?? process.env.OMNIROUTE_API_KEY ?? "",
-    managementReadToken: parsed.managementReadToken,
+    managementReadToken: resolveManagementReadToken(parsed.managementReadToken),
     timeoutMs: parsed.timeoutMs,
     timeouts: parsed.timeouts,
     logLevel: parsed.logLevel,
@@ -93,6 +100,16 @@ export default define({
     resolved.logLevel = parsed.logLevel;
     resolved.startupDebug = parsed.startupDebug;
     log.info(`[omniroute-v2] init providerId=${X}`);
+    // The inference key stands in below when no management token is set, and
+    // gateways usually reject that stand-in with 401/403. Say so once here,
+    // before any fetch, instead of letting the refusal surface per endpoint.
+    if (resolved.managementReadToken === undefined) {
+      log.warn(
+        `[omniroute-v2] no management token configured: management endpoints (/api/*) will reuse the inference key, ` +
+          `which gateways usually reject with 401/403. Set "managementReadToken" in the plugin options ` +
+          `or export ${MANAGEMENT_TOKEN_ENV_VAR}.`
+      );
+    }
 
     // v1 parity port: in-memory TTL + disk snapshot. The memory key
     // `baseURL::sha256(creds)` isolates credential tuples (prod vs
@@ -297,7 +314,7 @@ export default define({
       };
       if (models.length > 0) {
         state.entries.set(cacheKey, snapshot);
-        await writeDiskSnapshot(X, snapshot, identityFingerprint);
+        await writeDiskSnapshot(X, snapshot, identityFingerprint, log);
       }
       void optional.then(
         (parts) => upgradeWithOptional(snapshot, parts),
@@ -344,7 +361,7 @@ export default define({
       if (unchanged) return;
       state.entries.set(cacheKey, upgraded);
       if (upgraded.models.length > 0) {
-        await writeDiskSnapshot(X, upgraded, identityFingerprint);
+        await writeDiskSnapshot(X, upgraded, identityFingerprint, log);
       }
       // Reload only when the optional tier actually moved: the catalog
       // fingerprint covers ids alone, so without this the host would rebuild

@omniroute/opencode-plugin-v2/src/options.ts

@@ -61,6 +61,21 @@ const pluginOptionsSchema = z
 
 export type PluginOptions = z.infer<typeof pluginOptionsSchema>;
 
+/** Environment source for the management token (option wins over this). */
+export const MANAGEMENT_TOKEN_ENV_VAR = "OMNIROUTE_MANAGEMENT_API_KEY";
+
+/**
+ * Resolve the management token: a non-empty option wins, then a non-empty
+ * environment value, else absent. Empty counts as absent on both inputs, the
+ * same rule the inference key follows; no trimming, the token is opaque.
+ */
+export function resolveManagementReadToken(optionValue: string | undefined): string | undefined {
+  if (optionValue !== undefined && optionValue.length > 0) return optionValue;
+  const fromEnv = process.env[MANAGEMENT_TOKEN_ENV_VAR];
+  if (fromEnv !== undefined && fromEnv.length > 0) return fromEnv;
+  return undefined;
+}
+
 /** Per-endpoint timeout defaults (v1 parity). `timeoutMs` is the global fallback. */
 export const DEFAULT_TIMEOUT_MS = 10_000 as const;
 /** Auto-combos keep the v1 5s budget; the field is resolved now for the P3 port. */

@omniroute/opencode-plugin-v2/tests/disk-snapshot-atomicity.test.ts

@@ -0,0 +1,251 @@
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import {
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readdirSync,
+  readFileSync,
+  rmSync,
+  statSync,
+  writeFileSync,
+} from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join } from "node:path";
+import {
+  diskSnapshotPath,
+  readDiskSnapshot,
+  writeDiskSnapshot,
+  type CatalogSnapshot,
+} from "../src/cache.js";
+
+function isolateDisk(): { dir: string; restore: () => void } {
+  const dir = mkdtempSync(join(tmpdir(), "omniroute-disk-atomic-"));
+  const prev = process.env.OPENCODE_DATA_DIR;
+  process.env.OPENCODE_DATA_DIR = dir;
+  return {
+    dir,
+    restore: () => {
+      if (prev === undefined) delete process.env.OPENCODE_DATA_DIR;
+      else process.env.OPENCODE_DATA_DIR = prev;
+    },
+  };
+}
+
+function makeSnapshot(models: string[] = ["m-a"]): CatalogSnapshot {
+  return {
+    models: models.map((id) => ({ id })),
+    combos: [],
+    autoCombos: [],
+    providers: [],
+    fetchedAt: Date.now(),
+  } as unknown as CatalogSnapshot;
+}
+
+function makeLogger() {
+  const messages: string[] = [];
+  return {
+    messages,
+    logger: { warn: (message: string) => void messages.push(message) },
+  };
+}
+
+// Entries next to the destination other than the destination itself: any
+// leftover temp file after a successful write shows up here.
+function strayEntries(file: string): string[] {
+  let entries: string[];
+  try {
+    entries = readdirSync(dirname(file));
+  } catch {
+    return [];
+  }
+  return entries.filter((entry) => entry !== file.split("/").pop());
+}
+
+// The writer names its temp file `${file}.${pid}.${counter}` with a
+// module-monotone counter starting at 0, built after the empty-models and
+// size-cap guards (an over-cap call consumes no counter value). Tests in this
+// file run sequentially in one process, so the attempt table below predicts
+// every temp path exactly:
+//   over-cap: no counter use | failed write A: 0, failed write B: 1 |
+//   interrupted overwrite A: 2, interrupted overwrite B: 3 | mkdir failure: 4 |
+//   truncated read: 5 | success: 6 | permissions: 7 | round-trip: 8, 9.
+function predictedTmp(file: string, counter: number): string {
+  return `${file}.${process.pid}.${counter}`;
+}
+
+describe("disk snapshot atomic write, strict version, traced give-ups", () => {
+  it("ignores a newer snapshot version without throwing", async () => {
+    const disk = isolateDisk();
+    try {
+      const file = diskSnapshotPath("t1-future");
+      mkdirSync(dirname(file), { recursive: true });
+      // A writer from the future persists version 3; this reader must
+      // treat it as "no snapshot" instead of trusting unknown data.
+      writeFileSync(
+        file,
+        JSON.stringify({
+          v: 3,
+          identityFingerprint: "fp-1",
+          models: [{ id: "m-future" }],
+          combos: [],
+          writtenAt: Date.now(),
+        })
+      );
+      const back = await readDiskSnapshot("t1-future", "fp-1");
+      assert.equal(back, undefined);
+    } finally {
+      disk.restore();
+      rmSync(disk.dir, { recursive: true, force: true });
+    }
+  });
+
+  it("traces an over-cap write and leaves no destination behind", async () => {
+    const disk = isolateDisk();
+    try {
+      const { messages, logger } = makeLogger();
+      const bigId = `huge-${"x".repeat(33 * 1024 * 1024)}`;
+      await writeDiskSnapshot("t2-cap", makeSnapshot([bigId]), "fp-1", logger);
+      const file = diskSnapshotPath("t2-cap");
+      assert.equal(existsSync(file), false);
+      assert.deepEqual(strayEntries(file), []);
+      assert.match(messages.join("\n"), /exceeds|too large|size cap/i);
+    } finally {
+      disk.restore();
+      rmSync(disk.dir, { recursive: true, force: true });
+    }
+  });
+
+  it("a failed write leaves no destination behind and is traced", async () => {
+    const disk = isolateDisk();
+    const file = diskSnapshotPath("t3a-fail");
+    const blocker = predictedTmp(file, 1);
+    try {
+      const { messages, logger } = makeLogger();
+      await writeDiskSnapshot("t3a-fail", makeSnapshot(["m-before"]), "fp-1", logger);
+      // Plant a directory at the next temp path: the write fails with
+      // EISDIR before any rename, deterministically, on every platform.
+      mkdirSync(dirname(file), { recursive: true });
+      mkdirSync(blocker, { recursive: true });
+      await writeDiskSnapshot("t3a-fail", makeSnapshot(["m-after"]), "fp-1", logger);
+      assert.equal(existsSync(file), true);
+      const back = await readDiskSnapshot("t3a-fail", "fp-1");
+      assert.deepEqual(
+        (back?.models ?? []).map((entry) => entry.id),
+        ["m-before"]
+      );
+      assert.match(messages.join("\n"), /failed|EISDIR|error/i);
+    } finally {
+      rmSync(blocker, { recursive: true, force: true });
+      disk.restore();
+      rmSync(disk.dir, { recursive: true, force: true });
+    }
+  });
+
+  it("an interrupted overwrite keeps the previous snapshot", async () => {
+    const disk = isolateDisk();
+    const file = diskSnapshotPath("t3b-keep");
+    const blocker = predictedTmp(file, 3);
+    try {
+      const { messages, logger } = makeLogger();
+      await writeDiskSnapshot("t3b-keep", makeSnapshot(["m-before"]), "fp-1", logger);
+      const before = readFileSync(file, "utf8");
+      mkdirSync(blocker, { recursive: true });
+      await writeDiskSnapshot("t3b-keep", makeSnapshot(["m-after"]), "fp-1", logger);
+      assert.equal(readFileSync(file, "utf8"), before);
+      const back = await readDiskSnapshot("t3b-keep", "fp-1");
+      assert.deepEqual(
+        (back?.models ?? []).map((entry) => entry.id),
+        ["m-before"]
+      );
+      assert.match(messages.join("\n"), /failed|EISDIR|error/i);
+    } finally {
+      rmSync(blocker, { recursive: true, force: true });
+      disk.restore();
+      rmSync(disk.dir, { recursive: true, force: true });
+    }
+  });
+
+  it("a mkdir failure is traced and writes nothing", async () => {
+    const disk = isolateDisk();
+    try {
+      const { messages, logger } = makeLogger();
+      // A file planted at the plugins path makes mkdir fail
+      // deterministically (EEXIST on mkdir, ENOTDIR on direct writeFile).
+      writeFileSync(join(disk.dir, "plugins"), "blocker");
+      await writeDiskSnapshot("t3b-bis", makeSnapshot(["m-a"]), "fp-1", logger);
+      assert.equal(existsSync(diskSnapshotPath("t3b-bis")), false);
+      assert.match(messages.join("\n"), /failed|EEXIST|ENOTDIR|error/i);
+    } finally {
+      disk.restore();
+      rmSync(disk.dir, { recursive: true, force: true });
+    }
+  });
+
+  it("a truncated file reads as no snapshot without throwing", async () => {
+    const disk = isolateDisk();
+    try {
+      const { logger } = makeLogger();
+      await writeDiskSnapshot("t4-truncated", makeSnapshot(["m-a"]), "fp-1", logger);
+      const file = diskSnapshotPath("t4-truncated");
+      const full = readFileSync(file, "utf8");
+      writeFileSync(file, full.slice(0, Math.floor(full.length / 2)));
+      const back = await readDiskSnapshot("t4-truncated", "fp-1");
+      assert.equal(back, undefined);
+    } finally {
+      disk.restore();
+      rmSync(disk.dir, { recursive: true, force: true });
+    }
+  });
+
+  it("a successful write leaves no entry but the destination", async () => {
+    const disk = isolateDisk();
+    try {
+      await writeDiskSnapshot("t5-clean", makeSnapshot(["m-a"]), "fp-1");
+      const file = diskSnapshotPath("t5-clean");
+      assert.deepEqual(strayEntries(file), []);
+    } finally {
+      disk.restore();
+      rmSync(disk.dir, { recursive: true, force: true });
+    }
+  });
+
+  it("the replaced snapshot stays owner-only", async (t) => {
+    if (process.platform === "win32") {
+      t.skip("file mode semantics are POSIX-only");
+      return;
+    }
+    const disk = isolateDisk();
+    try {
+      await writeDiskSnapshot("t6-mode", makeSnapshot(["m-a"]), "fp-1");
+      const file = diskSnapshotPath("t6-mode");
+      assert.equal((statSync(file).mode & 0o077) === 0, true);
+    } finally {
+      disk.restore();
+      rmSync(disk.dir, { recursive: true, force: true });
+    }
+  });
+
+  it("round-trips a valid snapshot with and without a logger", async () => {
+    const disk = isolateDisk();
+    try {
+      const { logger } = makeLogger();
+      const snapshot = makeSnapshot(["m-a"]);
+      await writeDiskSnapshot("t7-roundtrip", snapshot, "fp-1");
+      const plain = await readDiskSnapshot("t7-roundtrip", "fp-1");
+      assert.deepEqual(
+        (plain?.models ?? []).map((entry) => entry.id),
+        ["m-a"]
+      );
+      await writeDiskSnapshot("t7-roundtrip", snapshot, "fp-1", logger);
+      const logged = await readDiskSnapshot("t7-roundtrip", "fp-1", logger);
+      assert.deepEqual(
+        (logged?.models ?? []).map((entry) => entry.id),
+        ["m-a"]
+      );
+    } finally {
+      disk.restore();
+      rmSync(disk.dir, { recursive: true, force: true });
+    }
+  });
+});

@omniroute/opencode-plugin-v2/tests/management-token-env.test.ts

@@ -0,0 +1,371 @@
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import plugin from "../src/index.js";
+import { publishCatalog } from "../src/catalog.js";
+import type { CatalogDraft } from "@opencode-ai/plugin/v2/promise";
+import type { ModelV2Info, ProviderV2Info } from "@opencode-ai/sdk/v2/types";
+
+const MODELS_URL = "https://gw.example.com/v1/models";
+const COMBOS_URL = "https://gw.example.com/api/combos";
+const PRICING_MODELS_URL = "https://gw.example.com/api/pricing/models";
+
+const MGMT_ENV_VAR = "OMNIROUTE_MANAGEMENT_API_KEY";
+const INFERENCE_ENV_VAR = "OMNIROUTE_API_KEY";
+
+function okJson(body: unknown) {
+  return { ok: true, status: 200, statusText: "OK", json: async () => body };
+}
+
+interface Harness {
+  seen: Map<string, string>;
+  warns: string[];
+  restore: () => void;
+}
+
+function installHarness(combos: unknown[]): Harness {
+  const seen = new Map<string, string>();
+  const warns: string[] = [];
+  const origFetch = globalThis.fetch;
+  const origWarn = console.warn;
+  const origLog = console.log;
+  const origError = console.error;
+  console.warn = (...args: unknown[]) => {
+    warns.push(String(args[0]));
+  };
+  console.log = () => {};
+  console.error = (...args: unknown[]) => {
+    warns.push(String(args[0]));
+  };
+  globalThis.fetch = (async (url: unknown, init?: { headers?: Record<string, string> }) => {
+    const href = String(url);
+    seen.set(href, String(init?.headers?.Authorization ?? ""));
+    if (href.includes("/api/combos/auto")) return okJson({ combos: [] });
+    if (href.includes("/api/pricing/models")) {
+      return okJson({
+        providers: {
+          demo: {
+            id: "demo",
+            name: "Demo",
+            models: [{ id: "team-combo", name: "Team Combo" }],
+          },
+        },
+      });
+    }
+    if (href.includes("/api/pricing")) return okJson({});
+    if (href.includes("/api/free-tier/summary")) return okJson({ perModel: [] });
+    if (href.includes("/api/combos")) return okJson({ combos });
+    return okJson({ data: [{ id: "m1" }] });
+  }) as typeof fetch;
+  return {
+    seen,
+    warns,
+    restore() {
+      globalThis.fetch = origFetch;
+      console.warn = origWarn;
+      console.log = origLog;
+      console.error = origError;
+    },
+  };
+}
+
+async function withIsolatedEnv<T>(
+  mgmt: string | undefined,
+  inference: string | undefined,
+  fn: () => Promise<T>
+): Promise<T> {
+  const prevMgmt = process.env[MGMT_ENV_VAR];
+  const prevInference = process.env[INFERENCE_ENV_VAR];
+  // Like tests/management-token.test.ts:176-180: a fresh OPENCODE_DATA_DIR
+  // per case keeps the real disk snapshot out of the run, so a filtered 'it'
+  // never gets a warm snapshot served without fetch.
+  const prevDataDir = process.env.OPENCODE_DATA_DIR;
+  process.env.OPENCODE_DATA_DIR = mkdtempSync(join(tmpdir(), "omniroute-mgmt-env-"));
+  if (mgmt === undefined) delete process.env[MGMT_ENV_VAR];
+  else process.env[MGMT_ENV_VAR] = mgmt;
+  if (inference === undefined) delete process.env[INFERENCE_ENV_VAR];
+  else process.env[INFERENCE_ENV_VAR] = inference;
+  try {
+    return await fn();
+  } finally {
+    if (prevDataDir === undefined) delete process.env.OPENCODE_DATA_DIR;
+    else process.env.OPENCODE_DATA_DIR = prevDataDir;
+    if (prevMgmt === undefined) delete process.env[MGMT_ENV_VAR];
+    else process.env[MGMT_ENV_VAR] = prevMgmt;
+    if (prevInference === undefined) delete process.env[INFERENCE_ENV_VAR];
+    else process.env[INFERENCE_ENV_VAR] = prevInference;
+  }
+}
+
+function setupHarness(options: Record<string, unknown>) {
+  const catalogCallbacks: Array<(draft: unknown) => Promise<void>> = [];
+  const ctx = {
+    options,
+    catalog: {
+      transform: (cb: (draft: unknown) => Promise<void>) => {
+        catalogCallbacks.push(cb);
+        return Promise.resolve({ dispose: async () => {} });
+      },
+    },
+    integration: {
+      transform: () => Promise.resolve({ dispose: async () => {} }),
+    },
+  };
+  return { catalogCallbacks, ctx };
+}
+
+function stubDraft() {
+  const published = new Map<string, Record<string, unknown>>();
+  const draft = {
+    provider: { update: (_id: string, fn: (p: Record<string, unknown>) => void) => fn({}) },
+    model: {
+      update: (pid: string, mid: string, fn: (m: Record<string, unknown>) => void) => {
+        const key = pid + "/" + mid;
+        let entry = published.get(key);
+        if (entry === undefined) {
+          entry = { id: mid, providerID: pid };
+          published.set(key, entry);
+        }
+        fn(entry);
+      },
+    },
+  };
+  return { draft, published };
+}
+
+function fallbackWarns(warns: string[]): string[] {
+  return warns.filter((w) => w.includes("managementReadToken"));
+}
+
+async function runSetup(ctx: unknown): Promise<void> {
+  await (plugin as unknown as { setup: (ctx: unknown) => Promise<void> }).setup(ctx);
+}
+
+describe("plugin-v2 management token environment source", () => {
+  it("uses the managementReadToken option for /api/* while models keep apiKey", async () => {
+    await withIsolatedEnv(undefined, undefined, async () => {
+      const h = installHarness([]);
+      try {
+        const { catalogCallbacks, ctx } = setupHarness({
+          baseURL: "https://gw.example.com",
+          providerId: "omniroute",
+          apiKey: "chat-key",
+          managementReadToken: "mgmt-option-token",
+        });
+        await runSetup(ctx);
+        assert.deepEqual(fallbackWarns(h.warns), []);
+        const { draft } = stubDraft();
+        await catalogCallbacks[0](draft);
+        assert.equal(h.seen.get(COMBOS_URL), "Bearer mgmt-option-token");
+        assert.equal(h.seen.get(MODELS_URL), "Bearer chat-key");
+      } finally {
+        h.restore();
+      }
+    });
+  });
+
+  it("reads the management token from the environment when the option is absent", async () => {
+    await withIsolatedEnv("mgmt-env-token", undefined, async () => {
+      const h = installHarness([]);
+      try {
+        const { catalogCallbacks, ctx } = setupHarness({
+          baseURL: "https://gw.example.com",
+          providerId: "omniroute",
+          apiKey: "chat-key",
+        });
+        await runSetup(ctx);
+        assert.deepEqual(fallbackWarns(h.warns), []);
+        const { draft } = stubDraft();
+        await catalogCallbacks[0](draft);
+        assert.equal(h.seen.get(COMBOS_URL), "Bearer mgmt-env-token");
+        assert.equal(h.seen.get(MODELS_URL), "Bearer chat-key");
+      } finally {
+        h.restore();
+      }
+    });
+  });
+
+  it("prefers the option over the environment", async () => {
+    await withIsolatedEnv("mgmt-env-token", undefined, async () => {
+      const h = installHarness([]);
+      try {
+        const { catalogCallbacks, ctx } = setupHarness({
+          baseURL: "https://gw.example.com",
+          providerId: "omniroute",
+          apiKey: "chat-key",
+          managementReadToken: "mgmt-option-token",
+        });
+        await runSetup(ctx);
+        assert.deepEqual(fallbackWarns(h.warns), []);
+        const { draft } = stubDraft();
+        await catalogCallbacks[0](draft);
+        assert.equal(h.seen.get(COMBOS_URL), "Bearer mgmt-option-token");
+      } finally {
+        h.restore();
+      }
+    });
+  });
+
+  it("falls back to the inference key with a single early warning when neither is set", async () => {
+    await withIsolatedEnv(undefined, undefined, async () => {
+      const h = installHarness([]);
+      try {
+        const { catalogCallbacks, ctx } = setupHarness({
+          baseURL: "https://gw.example.com",
+          providerId: "omniroute",
+          apiKey: "chat-key",
+        });
+        await runSetup(ctx);
+        const atSetup = fallbackWarns(h.warns);
+        assert.equal(
+          atSetup.length,
+          1,
+          `expected exactly one early fallback warning, got: ${JSON.stringify(h.warns)}`
+        );
+        assert.match(atSetup[0] ?? "", /managementReadToken/);
+        assert.match(atSetup[0] ?? "", new RegExp(MGMT_ENV_VAR));
+        assert.ok(!(atSetup[0] ?? "").includes("chat-key"), "warning must not leak the key");
+        const { draft } = stubDraft();
+        await catalogCallbacks[0](draft);
+        assert.equal(h.seen.get(COMBOS_URL), "Bearer chat-key");
+        assert.equal(
+          fallbackWarns(h.warns).length,
+          1,
+          "the fallback warning stays a single setup-time notice"
+        );
+      } finally {
+        h.restore();
+      }
+    });
+  });
+
+  it("treats an empty option as absent so the environment wins", async () => {
+    await withIsolatedEnv("mgmt-env-token", undefined, async () => {
+      const h = installHarness([]);
+      try {
+        const { catalogCallbacks, ctx } = setupHarness({
+          baseURL: "https://gw.example.com",
+          providerId: "omniroute",
+          apiKey: "chat-key",
+          managementReadToken: "",
+        });
+        await runSetup(ctx);
+        assert.deepEqual(fallbackWarns(h.warns), []);
+        const { draft } = stubDraft();
+        await catalogCallbacks[0](draft);
+        assert.equal(h.seen.get(COMBOS_URL), "Bearer mgmt-env-token");
+      } finally {
+        h.restore();
+      }
+    });
+  });
+
+  it("treats an empty environment value as absent so the option wins", async () => {
+    await withIsolatedEnv("", undefined, async () => {
+      const h = installHarness([]);
+      try {
+        const { catalogCallbacks, ctx } = setupHarness({
+          baseURL: "https://gw.example.com",
+          providerId: "omniroute",
+          apiKey: "chat-key",
+          managementReadToken: "mgmt-option-token",
+        });
+        await runSetup(ctx);
+        assert.deepEqual(fallbackWarns(h.warns), []);
+        const { draft } = stubDraft();
+        await catalogCallbacks[0](draft);
+        assert.equal(h.seen.get(COMBOS_URL), "Bearer mgmt-option-token");
+      } finally {
+        h.restore();
+      }
+    });
+  });
+
+  it("falls back with a warning when both the option and the environment are empty", async () => {
+    await withIsolatedEnv("", undefined, async () => {
+      const h = installHarness([]);
+      try {
+        const { catalogCallbacks, ctx } = setupHarness({
+          baseURL: "https://gw.example.com",
+          providerId: "omniroute",
+          apiKey: "chat-key",
+          managementReadToken: "",
+        });
+        await runSetup(ctx);
+        assert.equal(fallbackWarns(h.warns).length, 1);
+        const { draft } = stubDraft();
+        await catalogCallbacks[0](draft);
+        assert.equal(h.seen.get(COMBOS_URL), "Bearer chat-key");
+      } finally {
+        h.restore();
+      }
+    });
+  });
+
+  it("enriches the catalog from the environment token alone", async () => {
+    const providers = new Map<string, ProviderV2Info>();
+    const models = new Map<string, ModelV2Info>();
+    const draft = {
+      provider: {
+        list: () => [],
+        get: (id: string) => providers.get(id) as never,
+        update: (id: string, fn: (p: ProviderV2Info) => void) => {
+          const p = (providers.get(id) ?? { id }) as ProviderV2Info;
+          fn(p);
+          providers.set(id, p);
+        },
+        remove: () => {},
+      },
+      model: {
+        get: () => undefined,
+        update: (pid: string, mid: string, fn: (m: ModelV2Info) => void) => {
+          const k = pid + "/" + mid;
+          const m = (models.get(k) ?? { id: mid, providerID: pid }) as ModelV2Info;
+          fn(m);
+          models.set(k, m);
+        },
+        remove: () => {},
+        default: { get: () => undefined, set: () => {} },
+      },
+    } as unknown as CatalogDraft;
+    let seenCombos = "";
+    let seenPricing = "";
+    const res = await withIsolatedEnv("mgmt-env-token", undefined, async () =>
+      publishCatalog(
+        draft,
+        {
+          providerId: "omniroute",
+          baseURL: "https://gw.example.com",
+          apiKey: "chat-key",
+          managementReadToken: process.env[MGMT_ENV_VAR],
+          timeoutMs: 1000,
+          modelCacheTtlMs: 300000,
+          usableOnly: false,
+        },
+        {
+          fetcher: async () => [{ id: "m1" }],
+          combosFetcher: async (_base, token) => {
+            seenCombos = token;
+            return [{ id: "team-combo", models: [{ kind: "model", model: "m1" }] }];
+          },
+          enrichmentFetcher: async (_base, token) => {
+            seenPricing = token;
+            // The process env is the source under test: the resolver output
+            // flows in through the option above, so report success only when
+            // the flow under test actually carried it.
+            if (token !== "mgmt-env-token") return new Map();
+            return new Map([["team-combo", { name: "Team Combo" }]]);
+          },
+        }
+      )
+    );
+    assert.deepEqual(res, { models: 1, combos: 1, autoCombos: 0 });
+    assert.equal(seenCombos, "mgmt-env-token");
+    assert.equal(seenPricing, "mgmt-env-token");
+    const entry = models.get("omniroute/team-combo");
+    assert.ok(entry, "expected the combo entry in the published catalog");
+    assert.equal(entry?.name, "Team Combo");
+  });
+});

@omniroute/opencode-plugin/package.json

@@ -23,7 +23,7 @@
   "scripts": {
     "build": "tsup",
     "clean": "rm -rf dist",
-    "test": "node --import tsx/esm --test tests/scaffold.test.ts tests/auth.test.ts tests/options-schema.test.ts tests/multi-instance.test.ts tests/fetch-interceptor.test.ts tests/telemetry.test.ts tests/provider.test.ts tests/gemini-sanitize.test.ts tests/combos.test.ts tests/config-shim.test.ts tests/features.test.ts tests/feature-defaults.test.ts tests/usable-combo.test.ts tests/disk-snapshot-perms.test.ts tests/fork-features.test.ts tests/auto-combo-context.test.ts tests/provider-id-routing.test.ts tests/management-read-token.test.ts tests/auto-sync.test.ts tests/model-allowlist.test.ts tests/log-level.test.ts tests/effort-tier-variants.test.ts tests/naming.test.ts tests/free-budget-magnitude.test.ts tests/models-fetcher.test.ts",
+    "test": "node --import tsx/esm --test tests/scaffold.test.ts tests/auth.test.ts tests/options-schema.test.ts tests/multi-instance.test.ts tests/fetch-interceptor.test.ts tests/telemetry.test.ts tests/provider.test.ts tests/gemini-sanitize.test.ts tests/combos.test.ts tests/config-shim.test.ts tests/features.test.ts tests/feature-defaults.test.ts tests/usable-combo.test.ts tests/disk-snapshot-perms.test.ts tests/fork-features.test.ts tests/auto-combo-context.test.ts tests/provider-id-routing.test.ts tests/management-read-token.test.ts tests/auto-sync.test.ts tests/model-allowlist.test.ts tests/log-level.test.ts tests/effort-tier-variants.test.ts tests/naming.test.ts tests/free-budget-magnitude.test.ts tests/models-fetcher.test.ts tests/issue-13000-cold-start-combo-limit.test.ts",
     "prepublishOnly": "npm run clean && npm run build && npm test"
   },
   "keywords": [

@omniroute/opencode-plugin/src/index.ts

@@ -4631,9 +4631,21 @@ export function buildStaticProviderEntry(
           .map((m) => m.max_output_tokens)
           .filter((v): v is number => typeof v === "number" && v > 0);
 
-        if (contextValues.length > 0 && outputValues.length > 0) {
+        // Prefer the server-computed aggregate (accounts for explicit
+        // context_length overrides and members outside memberEntries, e.g.
+        // not yet resolved in /v1/models) over the raw Math.min(member)
+        // lower bound. Mirrors mapComboToModelV2's limit.context logic
+        // (#13000) so the static catalog and the dynamic hook agree.
+        const preferredContext =
+          typeof combo.computed_context_length === "number" && combo.computed_context_length > 0
+            ? combo.computed_context_length
+            : contextValues.length > 0
+              ? Math.min(...contextValues)
+              : undefined;
+
+        if (preferredContext !== undefined && outputValues.length > 0) {
           entry.limit = {
-            context: Math.min(...contextValues),
+            context: preferredContext,
             output: Math.min(...outputValues),
           };
         }
@@ -5511,6 +5523,32 @@ export function createOmniRouteConfigHook(
 
         const modelsFetchOk = !modelsFetchThrew && localRawModels.length > 0;
 
+        // Snapshot backfill for computed_context_length: a live /api/combos
+        // response can come back without this field (server hasn't finished
+        // recomputing it yet, e.g. just after a restart) even though the
+        // combo's members and identity are otherwise unchanged. When that
+        // happens, prefer the last-known-good value from the warm disk
+        // snapshot over the Math.min(member) fallback in
+        // mapComboToModelV2() — never overwrite any other combo field
+        // (models/name/etc.) with stale data, only this one derived number.
+        if (warmSnapshot) {
+          const snapshotComboById = new Map(warmSnapshot.rawCombos.map((c) => [c.id, c]));
+          for (const combo of localRawCombos) {
+            const hasLive =
+              typeof combo.computed_context_length === "number" &&
+              combo.computed_context_length > 0;
+            if (hasLive) continue;
+            const stale = snapshotComboById.get(combo.id);
+            if (
+              stale &&
+              typeof stale.computed_context_length === "number" &&
+              stale.computed_context_length > 0
+            ) {
+              combo.computed_context_length = stale.computed_context_length;
+            }
+          }
+        }
+
         // Disk-cache fallback (cold first run, no warm snapshot): when the
         // live fetch returned no models AND features.diskCache !== false,
         // hydrate from the last-known-good snapshot so OC still surfaces a

@omniroute/opencode-plugin/tests/issue-13000-cold-start-combo-limit.test.ts

@@ -0,0 +1,221 @@
+/**
+ * Repro for #13000: combo context limits fall back to Math.min(member)
+ * instead of using computed_context_length after cold start — no disk
+ * snapshot fallback.
+ *
+ * Scenario (mirrors the report): a warm disk snapshot holds the combo with
+ * its correct server-computed `computed_context_length` (245000, from all 6
+ * members). After a restart, the live refresh's combos fetch returns the
+ * SAME combo but without `computed_context_length` (e.g. the value hasn't
+ * propagated yet), and the live models fetch only resolves 2 of the 6
+ * members (the rest not yet in /v1/models). The background refresh then
+ * republishes the provider block built from this degraded live data,
+ * downgrading a previously-known-good 245000 limit to Math.min(163840,
+ * 1_000_000) = 163840 — exactly the member-minimum described in the issue.
+ */
+
+import test from "node:test";
+import assert from "node:assert/strict";
+import type { Config } from "@opencode-ai/plugin";
+
+import {
+  createOmniRouteConfigHook,
+  _resetInflightRefresh,
+  type OmniRouteAutoCombosFetcher,
+  type OmniRouteCombosFetcher,
+  type OmniRouteCompressionMetaFetcher,
+  type OmniRouteEnrichmentFetcher,
+  type OmniRouteFetchCache,
+  type OmniRouteModelsFetcher,
+  type OmniRouteProvidersFetcher,
+  type OmniRouteRawCombo,
+  type OmniRouteRawModelEntry,
+  type OmniRouteReadAuthJson,
+  type OmniRouteStaticProviderEntry,
+  type OmniRouteDiskSnapshotReader,
+  type OmniRouteDiskSnapshotWriter,
+} from "../src/index.js";
+
+test.beforeEach(() => {
+  _resetInflightRefresh();
+});
+
+function stubReadAuthJson(value: Record<string, unknown>): OmniRouteReadAuthJson {
+  return async () => value as never;
+}
+
+function authStub() {
+  return stubReadAuthJson({
+    "opencode-omniroute": {
+      type: "api",
+      key: "sk-test",
+      baseURL: "https://or.example.com/v1",
+    },
+  });
+}
+
+function makeInput(): Config {
+  return { provider: {} } as unknown as Config;
+}
+
+// The two members resolvable in the degraded live /v1/models response.
+const MEMBER_DEEPSEEK: OmniRouteRawModelEntry = {
+  id: "deepseek-v4-pro",
+  capabilities: { tool_calling: true, reasoning: true, vision: false, thinking: false },
+  context_length: 163_840,
+  max_output_tokens: 64_000,
+  input_modalities: ["text"],
+  output_modalities: ["text"],
+};
+
+const MEMBER_GLM: OmniRouteRawModelEntry = {
+  id: "glm-5.2",
+  capabilities: { tool_calling: true, reasoning: true, vision: false, thinking: false },
+  context_length: 1_000_000,
+  max_output_tokens: 16_384,
+  input_modalities: ["text"],
+  output_modalities: ["text"],
+};
+
+// The other member that IS present once the server is fully warm.
+const MEMBER_GLM_53_HIGH: OmniRouteRawModelEntry = {
+  id: "GLM-5.3-high",
+  capabilities: { tool_calling: true, reasoning: true, vision: false, thinking: false },
+  context_length: 245_000,
+  max_output_tokens: 128_000,
+  input_modalities: ["text"],
+  output_modalities: ["text"],
+};
+
+const COMBO_MODELS: OmniRouteRawCombo["models"] = [
+  { kind: "model", model: "deepseek-v4-pro", weight: 25 },
+  { kind: "model", model: "glm-5.2", weight: 25 },
+  { kind: "model", model: "GLM-5.3-high", weight: 50 },
+];
+
+test("issue #13000: warm combo limit (245000) survives a degraded post-restart refresh instead of downgrading to Math.min(member)", async () => {
+  const warmSnapshot: Omit<import("../src/index.js").OmniRouteFetchCacheEntry, "expiresAt"> = {
+    rawModels: [MEMBER_DEEPSEEK, MEMBER_GLM, MEMBER_GLM_53_HIGH],
+    rawCombos: [
+      {
+        id: "orchestrator",
+        name: "orchestrator",
+        models: COMBO_MODELS,
+        computed_context_length: 245_000,
+      },
+    ],
+    rawAutoCombos: [],
+    rawEnrichment: new Map(),
+    rawCompressionCombos: [],
+    rawConnections: [],
+  };
+
+  const fetcher: OmniRouteModelsFetcher = async () => [MEMBER_DEEPSEEK, MEMBER_GLM];
+  const combosFetcher: OmniRouteCombosFetcher = async () => [
+    {
+      id: "orchestrator",
+      name: "orchestrator",
+      models: COMBO_MODELS,
+      // computed_context_length intentionally omitted.
+    },
+  ];
+  const autoCombosFetcher: OmniRouteAutoCombosFetcher = async () => [];
+  const enrichmentFetcher: OmniRouteEnrichmentFetcher = async () => new Map();
+  const compressionMetaFetcher: OmniRouteCompressionMetaFetcher = async () => [];
+  const providersFetcher: OmniRouteProvidersFetcher = async () => [];
+
+  const diskSnapshotReader: OmniRouteDiskSnapshotReader = async () => warmSnapshot;
+  const diskSnapshotWriter: OmniRouteDiskSnapshotWriter = async () => {};
+
+  const sharedCache: OmniRouteFetchCache = new Map();
+
+  const hook = createOmniRouteConfigHook(
+    { providerId: "omniroute", modelCacheTtl: 60_000 },
+    {
+      readAuthJson: authStub(),
+      fetcher,
+      combosFetcher,
+      autoCombosFetcher,
+      enrichmentFetcher,
+      compressionMetaFetcher,
+      providersFetcher,
+      diskSnapshotReader,
+      diskSnapshotWriter,
+      cache: sharedCache,
+    }
+  );
+
+  const input = makeInput();
+  await hook(input);
+
+  // Let the detached background refresh (degraded live data) complete and
+  // republish the block.
+  await new Promise((r) => setTimeout(r, 100));
+
+  const entryAfter = (input as { provider: Record<string, OmniRouteStaticProviderEntry> }).provider[
+    "opencode-omniroute"
+  ];
+  const comboModelAfter = entryAfter.models["orchestrator"];
+  assert.ok(comboModelAfter, "combo model still published after refresh");
+
+  assert.equal(
+    comboModelAfter.limit.context,
+    245_000,
+    `expected the combo limit to stay at the known-good 245000, but got ${comboModelAfter.limit.context} ` +
+      `(Math.min(member) fallback — the exact bug described in #13000)`
+  );
+});
+
+test("issue #13000 (control): no warm snapshot exists — Math.min(member) fallback is still used (expected, documented behavior)", async () => {
+  const fetcher: OmniRouteModelsFetcher = async () => [MEMBER_DEEPSEEK, MEMBER_GLM];
+  const combosFetcher: OmniRouteCombosFetcher = async () => [
+    {
+      id: "orchestrator",
+      name: "orchestrator",
+      models: COMBO_MODELS,
+      // computed_context_length intentionally omitted.
+    },
+  ];
+  const autoCombosFetcher: OmniRouteAutoCombosFetcher = async () => [];
+  const enrichmentFetcher: OmniRouteEnrichmentFetcher = async () => new Map();
+  const compressionMetaFetcher: OmniRouteCompressionMetaFetcher = async () => [];
+  const providersFetcher: OmniRouteProvidersFetcher = async () => [];
+
+  // No prior snapshot on disk.
+  const diskSnapshotReader: OmniRouteDiskSnapshotReader = async () => undefined;
+  const diskSnapshotWriter: OmniRouteDiskSnapshotWriter = async () => {};
+
+  const sharedCache: OmniRouteFetchCache = new Map();
+
+  const hook = createOmniRouteConfigHook(
+    { providerId: "omniroute", modelCacheTtl: 60_000 },
+    {
+      readAuthJson: authStub(),
+      fetcher,
+      combosFetcher,
+      autoCombosFetcher,
+      enrichmentFetcher,
+      compressionMetaFetcher,
+      providersFetcher,
+      diskSnapshotReader,
+      diskSnapshotWriter,
+      cache: sharedCache,
+    }
+  );
+
+  const input = makeInput();
+  await hook(input);
+
+  const entryAfter = (input as { provider: Record<string, OmniRouteStaticProviderEntry> }).provider[
+    "opencode-omniroute"
+  ];
+  const comboModelAfter = entryAfter.models["orchestrator"];
+  assert.ok(comboModelAfter, "combo model published on cold first run");
+
+  // No snapshot to backfill from — Math.min(163840, 1_000_000) = 163840.
+  assert.equal(
+    comboModelAfter.limit.context,
+    163_840,
+    "pure cold start with no snapshot must keep using the Math.min(member) fallback"
+  );
+});

AGENTS.md

@@ -46,7 +46,7 @@ Repository map and Reference Documentation sections below.
 
 ## Project at a Glance
 
-**OmniRoute** — unified AI proxy/router. One endpoint, 358 LLM providers, auto-fallback.
+**OmniRoute** — unified AI proxy/router. One endpoint, 359 LLM providers, auto-fallback.
 
 | Layer         | Location                | Purpose                                                                                                                                                                   |
 | ------------- | ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
@@ -56,7 +56,7 @@ Repository map and Reference Documentation sections below.
 | Translators   | `open-sse/translator/`  | Format conversion (OpenAI↔Claude↔Gemini)                                                                                                                                  |
 | Transformer   | `open-sse/transformer/` | Responses API ↔ Chat Completions                                                                                                                                          |
 | Services      | `open-sse/services/`    | Combo routing, rate limits, caching, etc                                                                                                                                  |
-| Database      | `src/lib/db/`           | SQLite domain modules (175 migrations)                                                                                                                                    |
+| Database      | `src/lib/db/`           | SQLite domain modules (176 migrations)                                                                                                                                    |
 | Domain/Policy | `src/domain/`           | Policy engine, cost rules, fallback logic                                                                                                                                 |
 | MCP Server    | `open-sse/mcp-server/`  | 110 tools (45 canonical + memory/skill/GitHub/pool/gamification/plugin/Notion/Obsidian/local-corpus/RTK modules), 3 transports (stdio / SSE / Streamable HTTP), 33 scopes |
 | A2A Server    | `src/lib/a2a/`          | JSON-RPC 2.0 agent protocol                                                                                                                                               |

Dockerfile

@@ -227,6 +227,18 @@ ENV NODE_OPTIONS="--max-old-space-size=${OMNIROUTE_MEMORY_MB}"
 ENV DATA_DIR=/app/data
 RUN mkdir -p /app/data
 
+# #13679: default the PUBLISHED image to requiring an API key. A bare
+# `docker run -p 20128:20128 … diegosouzapw/omniroute` (README/QUICK-START
+# one-liners) does not pass `--env-file .env`, so without this default the
+# anonymous /v1 LLM proxy would be both keyless AND world-reachable on the
+# published container. This does NOT change the npm/CLI local-dev default
+# (`REQUIRE_API_KEY` stays `"false"` in featureFlagDefinitions.ts) — only the
+# shipped deployment artifact's posture. docker-compose.yml is unaffected: it
+# loads the operator's own `.env` (env_file:) which overrides this ENV, and
+# already binds loopback-only by default (#12568). Override with
+# `-e REQUIRE_API_KEY=false` for an intentionally keyless deployment.
+ENV REQUIRE_API_KEY=true
+
 # `npm run build` (build-next-isolated → assembleStandalone) bundles ALL runtime
 # files into .build/next/standalone/ — .next, node_modules, migrations, scripts,
 # docs, and the previously hand-COPY'd modules below (@swc/helpers, pino-*, split2,

README.md

@@ -7,7 +7,7 @@
 
 # 🚀 OmniRoute — The Free AI Gateway
 
-<img src="./docs/diagrams/readme-hero.svg" width="100%" alt="OmniRoute — Never stop coding. Every AI tool → 358 providers — 150+ free — through one endpoint. Claude Code, Codex, Cursor, Cline, Copilot & Antigravity into FREE Claude / GPT / Gemini with auto-fallback. RTK + Caveman stacked compression saves 15–95% tokens (~89% avg) — never hit limits. 358 AI providers · 150+ free tiers · ~1.47B free tokens/mo · 19 routing strategies · $0 to start."/>
+<img src="./docs/diagrams/readme-hero.svg" width="100%" alt="OmniRoute — Never stop coding. Every AI tool → 359 providers — 150+ free — through one endpoint. Claude Code, Codex, Cursor, Cline, Copilot & Antigravity into FREE Claude / GPT / Gemini with auto-fallback. RTK + Caveman stacked compression saves 15–95% tokens (~89% avg) — never hit limits. 359 AI providers · 150+ free tiers · ~1.47B free tokens/mo · 19 routing strategies · $0 to start."/>
 
 </div>
 
@@ -17,9 +17,9 @@
 
 </div>
 
-> Stacking free tiers by hand is painful — dozens of SDKs, dozens of rate limits, and no idea how much you actually have. OmniRoute catalogs **443 free-tier entries across 34 recurring pool keys** and computes the token headline from the **16 pools with a published positive monthly budget plus five per-model Groq caps**, deduplicated by shared pool. Quotas that only open after a regional identity check (today: ModelScope) are shown apart, +~6M behind regional identity verification, and never summed into the headline. The result stays visible on the dashboard (`/dashboard/free-tiers`).
+> Stacking free tiers by hand is painful — dozens of SDKs, dozens of rate limits, and no idea how much you actually have. OmniRoute catalogs **446 free-tier entries across 34 recurring pool keys** and computes the token headline from the **16 pools with a published positive monthly budget plus five per-model Groq caps**, deduplicated by shared pool. Quotas that only open after a regional identity check (today: ModelScope) are shown apart, +~6M behind regional identity verification, and never summed into the headline. The result stays visible on the dashboard (`/dashboard/free-tiers`).
 
-<img src="./docs/diagrams/free-tier-budget.svg" width="100%" alt="OmniRoute free-tier budget card: ~1.47B free tokens per month steady, up to ~2.07B in the first month with signup credits, from 34 documented recurring pool keys covering 443 cataloged free-tier entries behind one endpoint. Honest pool-deduped math — each shared pool counted once, including 16 recurring pools with a published positive monthly token budget plus five per-model Groq caps; 13 providers are marked avoid in the terms-risk catalog so you decide. Budget bar includes Mistral 1B, Nara 210M, LLM7 150M, Groq 30M (five per-model caps) and smaller pools, plus first-month signup credits and permanently-free no-token-cap providers surfaced separately so they never inflate the headline. Live used/remaining on /dashboard/free-tiers."/>
+<img src="./docs/diagrams/free-tier-budget.svg" width="100%" alt="OmniRoute free-tier budget card: ~1.47B free tokens per month steady, up to ~2.07B in the first month with signup credits, from 34 documented recurring pool keys covering 446 cataloged free-tier entries behind one endpoint. Honest pool-deduped math — each shared pool counted once, including 16 recurring pools with a published positive monthly token budget plus five per-model Groq caps; 13 providers are marked avoid in the terms-risk catalog so you decide. Budget bar includes Mistral 1B, Nara 210M, LLM7 150M, Groq 30M (five per-model caps) and smaller pools, plus first-month signup credits and permanently-free no-token-cap providers surfaced separately so they never inflate the headline. Live used/remaining on /dashboard/free-tiers."/>
 
 > Animated summary of the live `/dashboard/free-tiers` page. Full methodology (pool dedupe, credit tiers, provider terms): **[docs/reference/FREE_TIERS.md](docs/reference/FREE_TIERS.md)**.
 >
@@ -233,7 +233,7 @@ curl http://localhost:20128/v1/chat/completions \
 
 </div>
 
-<img src="./docs/diagrams/promise-pillars.svg" width="100%" alt="The Promise — One endpoint and 358 providers. Automatic fallback keeps routing while another healthy target is available. Six pillars: resilient fallback across 358 providers · up to 95% token savings on eligible workloads · $0 to start with 150+ free tiers and 52 recurring/keyless free-forever providers · 36 CLI/agent integrations through one config · OpenAI, Claude, Gemini and Responses API compatibility at /v1 · production controls including circuit breakers, TLS stealth, MCP 110 tools, A2A, memory, guardrails, evals and 39,000+ static test declarations across 5,100+ tracked test files."/>
+<img src="./docs/diagrams/promise-pillars.svg" width="100%" alt="The Promise — One endpoint and 359 providers. Automatic fallback keeps routing while another healthy target is available. Six pillars: resilient fallback across 359 providers · up to 95% token savings on eligible workloads · $0 to start with 150+ free tiers and 53 recurring/keyless free-forever providers · 36 CLI/agent integrations through one config · OpenAI, Claude, Gemini and Responses API compatibility at /v1 · production controls including circuit breakers, TLS stealth, MCP 110 tools, A2A, memory, guardrails, evals and 39,000+ static test declarations across 5,100+ tracked test files."/>
 
 <br/>
 <br/>
@@ -486,7 +486,7 @@ All **19** strategies — mix & match per combo step:
 
 </div>
 
-<img src="./docs/diagrams/comparison-table.svg" width="100%" alt="What sets OmniRoute apart — a dated feature snapshot vs 9router, OpenRouter, CLIProxyAPI and LiteLLM across 13 capabilities. OmniRoute: 358 providers, 150+ free tiers built in, 19 routing strategies, 12-engine token compression, built-in MCP server with 110 tools, A2A agent protocol, persistent memory, guardrails, cloud agents, TLS fingerprint stealth, Desktop/Termux/PWA and 42 i18n UI locales. OmniRoute is MIT-licensed and self-hostable. Competitor capabilities and counts may change; see the linked methodology."/>
+<img src="./docs/diagrams/comparison-table.svg" width="100%" alt="What sets OmniRoute apart — a dated feature snapshot vs 9router, OpenRouter, CLIProxyAPI and LiteLLM across 13 capabilities. OmniRoute: 359 providers, 150+ free tiers built in, 19 routing strategies, 12-engine token compression, built-in MCP server with 110 tools, A2A agent protocol, persistent memory, guardrails, cloud agents, TLS fingerprint stealth, Desktop/Termux/PWA and 42 i18n UI locales. OmniRoute is MIT-licensed and self-hostable. Competitor capabilities and counts may change; see the linked methodology."/>
 
 <sub>📊 Full methodology &amp; per-feature detail vs 9router, OpenRouter, CLIProxyAPI &amp; LiteLLM → [`docs/comparison/OMNIROUTE_VS_ALTERNATIVES.md`](docs/comparison/OMNIROUTE_VS_ALTERNATIVES.md)</sub>
 
@@ -672,7 +672,7 @@ of your shell history. → [CLI Integrations](docs/guides/CLI-INTEGRATIONS.md)
 
 </div>
 
-> **352 registered providers** across the canonical chat, media, search, local, cloud-agent and system collections, including **152 carrying `hasFree: true` discovery metadata**. The chat model registry covers **229 providers / 2,554 distinct provider-model pairs / 1,283 raw model IDs**; the separate free-budget catalog has **443 per-model rows**, **34 recurring pools** and **52 recurring/keyless free-forever providers**. These are different denominators by design; definitions and pool-deduped calculations live in the [Provider Reference](docs/reference/PROVIDER_REFERENCE.md) and [Free Tiers](docs/reference/FREE_TIERS.md).
+> **352 registered providers** across the canonical chat, media, search, local, cloud-agent and system collections, including **152 carrying `hasFree: true` discovery metadata**. The chat model registry covers **229 providers / 2,554 distinct provider-model pairs / 1,283 raw model IDs**; the separate free-budget catalog has **443 per-model rows**, **34 recurring pools** and **53 recurring/keyless free-forever providers**. These are different denominators by design; definitions and pool-deduped calculations live in the [Provider Reference](docs/reference/PROVIDER_REFERENCE.md) and [Free Tiers](docs/reference/FREE_TIERS.md).
 
 <div align="center">
 
@@ -1268,7 +1268,7 @@ Métricas canônicas em 2026-08-24: **1.029 vídeos únicos** · **11.132.922 vi
   <tr><td nowrap><b>Runtime</b></td><td>Node.js 22.x / 24.x LTS — <code>&gt;=22.22.2 &lt;23 || &gt;=24.0.0 &lt;27</code></td></tr>
   <tr><td nowrap><b>Language</b></td><td>TypeScript 6.0 — <b>100% TypeScript</b> across <code>src/</code> and <code>open-sse/</code> (zero <code>any</code> in core since v2.0)</td></tr>
   <tr><td nowrap><b>Framework</b></td><td>Next.js 16 + React 19 + Tailwind CSS 4</td></tr>
-  <tr><td nowrap><b>Database</b></td><td>better-sqlite3 (SQLite, WAL journaling) + LowDB (JSON legacy) — 122 domain modules, 175 migrations</td></tr>
+  <tr><td nowrap><b>Database</b></td><td>better-sqlite3 (SQLite, WAL journaling) + LowDB (JSON legacy) — 122 domain modules, 176 migrations</td></tr>
   <tr><td nowrap><b>Memory</b></td><td>SQLite FTS5 full-text + int8-quantized vector embeddings, typed decay</td></tr>
   <tr><td nowrap><b>Schemas</b></td><td>Zod 4 — MCP tool I/O validation + API contracts</td></tr>
   <tr><td nowrap><b>Protocols</b></td><td>MCP (stdio / HTTP / SSE) + A2A v0.3 (JSON-RPC 2.0 + SSE)</td></tr>
@@ -1331,7 +1331,7 @@ Métricas canônicas em 2026-08-24: **1.029 vídeos únicos** · **11.132.922 vi
   <tr><td nowrap><b><a href="docs/architecture/RESILIENCE_GUIDE.md">Resilience Guide</a></b></td><td>Circuit breakers, cooldowns, queue, anti-thundering herd, TLS spoofing</td></tr>
   <tr><td nowrap><b><a href="docs/routing/AUTO-COMBO.md">Auto-Combo Engine</a></b></td><td>16-factor scoring, mode packs, self-healing</td></tr>
   <tr><td nowrap><b><a href="docs/ops/PROXY_GUIDE.md">Proxy Guide</a></b></td><td>3-level proxy system, 1proxy marketplace, registry CRUD</td></tr>
-  <tr><td nowrap><b><a href="docs/reference/FREE_TIERS.md">Free Tiers</a></b></td><td>Consolidated directory: 34 documented recurring pools / 443 cataloged free-tier entries</td></tr>
+  <tr><td nowrap><b><a href="docs/reference/FREE_TIERS.md">Free Tiers</a></b></td><td>Consolidated directory: 34 documented recurring pools / 446 cataloged free-tier entries</td></tr>
   <tr><td nowrap><b><a href="docs/guides/FEATURES.md">Features Gallery</a></b></td><td>Visual dashboard tour with screenshots</td></tr>
   <tr><td nowrap><b><a href="docs/architecture/CODEBASE_DOCUMENTATION.md">Codebase Documentation</a></b></td><td>Beginner-friendly codebase walkthrough</td></tr>
 </table>

bin/cli/commands/mcp.mjs

@@ -9,6 +9,8 @@ function truncate(v, len = 60) {
   return s.length > len ? s.slice(0, len - 1) + "…" : s;
 }
 
+const VALID_MCP_TRANSPORTS = ["stdio", "sse", "streamable-http"];
+
 const mcpToolSchema = [
   { key: "name", header: "Tool", width: 36 },
   {
@@ -43,6 +45,25 @@ export function registerMcp(program) {
       if (exitCode !== 0) process.exit(exitCode);
     });
 
+  mcp
+    .command("enable")
+    .description(t("mcp.enable.description"))
+    .option("--transport <transport>", t("mcp.enable.transport"))
+    .action(async (opts, cmd) => {
+      const globalOpts = cmd.parent.optsWithGlobals();
+      const exitCode = await runMcpEnableCommand({ ...opts, output: globalOpts.output });
+      if (exitCode !== 0) process.exit(exitCode);
+    });
+
+  mcp
+    .command("disable")
+    .description(t("mcp.disable.description"))
+    .action(async (opts, cmd) => {
+      const globalOpts = cmd.parent.optsWithGlobals();
+      const exitCode = await runMcpDisableCommand({ ...opts, output: globalOpts.output });
+      if (exitCode !== 0) process.exit(exitCode);
+    });
+
   // 5.1 — mcp call + mcp scopes
   mcp
     .command("call <tool> [argsJson]")
@@ -61,10 +82,15 @@ export function registerMcp(program) {
             ? JSON.parse(argsPositional)
             : {};
 
-      const exitCode = await runMcpCallCommand(tool, args, {
-        ...opts,
-        stream: opts.stream,
-      }, globalOpts);
+      const exitCode = await runMcpCallCommand(
+        tool,
+        args,
+        {
+          ...opts,
+          stream: opts.stream,
+        },
+        globalOpts
+      );
 
       if (exitCode !== 0) process.exit(exitCode);
     });
@@ -127,7 +153,9 @@ async function mcpJsonRpcCall(tool, args, { stream = false, globalOpts = {} } =
 
   if (!initRes.ok) {
     const text = await initRes.text().catch(() => "");
-    process.stderr.write(`MCP initialize failed: HTTP ${initRes.status}${text ? ` — ${text}` : ""}\n`);
+    process.stderr.write(
+      `MCP initialize failed: HTTP ${initRes.status}${text ? ` — ${text}` : ""}\n`
+    );
     return 1;
   }
 
@@ -227,6 +255,7 @@ export async function runMcpStatusCommand(opts = {}) {
     });
     if (!res.ok) {
       console.log(t("mcp.stopped"));
+      console.log(t("mcp.stoppedHint"));
       return 0;
     }
 
@@ -240,6 +269,9 @@ export async function runMcpStatusCommand(opts = {}) {
     const transport = status.transport || "stdio";
     const online = status.online ?? status.running;
     console.log(online ? t("mcp.running", { transport }) : t("mcp.stopped"));
+    if (!online && status.enabled === false) {
+      console.log(t("mcp.stoppedHint"));
+    }
     if (status.toolsCount !== undefined) console.log(`  Tools: ${status.toolsCount}`);
     if (status.scopes?.length) {
       console.log("  Scopes:");
@@ -270,10 +302,76 @@ export async function runMcpRestartCommand(opts = {}) {
       console.log(t("mcp.restarted"));
       return 0;
     }
-    console.error(t("common.error", { message: `HTTP ${res.status}` }));
+    const body = await res.json().catch(() => null);
+    const message = body?.error || `HTTP ${res.status}`;
+    console.error(t("common.error", { message }));
     return 1;
   } catch (err) {
     console.error(t("common.error", { message: err instanceof Error ? err.message : String(err) }));
     return 1;
   }
 }
+
+export async function runMcpEnableCommand(opts = {}) {
+  const serverUp = await isServerUp();
+  if (!serverUp) {
+    console.error(t("common.serverOffline"));
+    return 1;
+  }
+
+  if (opts.transport && !VALID_MCP_TRANSPORTS.includes(opts.transport)) {
+    console.error(
+      t("common.error", {
+        message: `Invalid transport '${opts.transport}'. Valid: ${VALID_MCP_TRANSPORTS.join(", ")}`,
+      })
+    );
+    return 1;
+  }
+
+  try {
+    const body = { mcpEnabled: true };
+    if (opts.transport) body.mcpTransport = opts.transport;
+
+    const res = await apiFetch("/api/settings", {
+      method: "PATCH",
+      body,
+      retry: false,
+      acceptNotOk: true,
+    });
+    if (!res.ok) {
+      console.error(t("common.error", { message: `HTTP ${res.status}` }));
+      return 1;
+    }
+    console.log(t("mcp.enabled"));
+    return 0;
+  } catch (err) {
+    console.error(t("common.error", { message: err instanceof Error ? err.message : String(err) }));
+    return 1;
+  }
+}
+
+export async function runMcpDisableCommand(opts = {}) {
+  const serverUp = await isServerUp();
+  if (!serverUp) {
+    console.error(t("common.serverOffline"));
+    return 1;
+  }
+
+  try {
+    const res = await apiFetch("/api/settings", {
+      method: "PATCH",
+      body: { mcpEnabled: false },
+      retry: false,
+      acceptNotOk: true,
+    });
+    if (!res.ok) {
+      console.error(t("common.error", { message: `HTTP ${res.status}` }));
+      return 1;
+    }
+    console.log(t("mcp.disabled"));
+    return 0;
+  } catch (err) {
+    console.error(t("common.error", { message: err instanceof Error ? err.message : String(err) }));
+    return 1;
+  }
+}

bin/cli/locales/am.json

@@ -30,7 +30,7 @@
     "opencode": "ከOpenCode ጋር የተካተተውን @omniroute/opencode-plugin ጫን እና አዋቅር"
   },
   "doctor": {
-    "title": "OmniRoute Doctor",
+    "title": "OmniRoute ዶክተር",
     "dbOk": "የውሂብ ጎታ፦ ደህና ({path})",
     "dbMissing": "የውሂብ ጎታ፦ አልተጀመረም — `omniroute setup` ያስኪዱ",
     "portOk": "ወደብ {port}፦ ይገኛል",
@@ -256,6 +256,7 @@
     "max_restarts": "ከመተው በፊት በ30s ውስጥ የሚፈቀደው ከፍተኛ የብልሽት ዳግም መጀመር ብዛት (ነባሪ፦ 2)",
     "tray": "በስርዓት ትሪ ውስጥ አስጀምር (ለዴስክቶፕ ብቻ፣ በፈቃድ)",
     "no_tray": "የስርዓት ትሪ አዶን አሰናክል",
+    "ready_timeout": "የዝግጁነት ምርመራ ጊዜ ማብቂያ በሚሊሰከንድ (እንዲሁም OMNIROUTE_READY_TIMEOUT_MS፣ ነባሪ 60000)",
     "tls_cert": "HTTPSን ለማቅረብ የTLS ሰርተፍኬት (PEM) ዱካ (OMNIROUTE_TLS_CERTም ጭምር)",
     "tls_key": "HTTPSን ለማቅረብ የTLS የግል ቁልፍ (PEM) ዱካ (OMNIROUTE_TLS_KEYም ጭምር)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP ሰርቨር እየሰራ ነው ({transport})",
     "stopped": "MCP ሰርቨር ቆሟል።",
     "restarted": "MCP ሰርቨር እንደገና ተጀምሯል።",
+    "stoppedHint": "ለማብራት `omniroute mcp enable`ን ያሂዱ።",
+    "enabled": "MCP አገልጋይ ነቅቷል።",
+    "disabled": "MCP አገልጋይ ተሰናክሏል።",
+    "enable": {
+      "description": "MCP አገልጋዩን አንቃ",
+      "transport": "ጥቅም ላይ የሚውል ማጓጓዣ፦ stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "MCP አገልጋዩን አሰናክል"
+    },
     "call": {
       "description": "የMCP መሣሪያን በቀጥታ ይጥሩ",
       "args": "የJSON ነጋሪ እሴቶች ኦብጀክት (በቦታው)",

bin/cli/locales/el.json

@@ -256,6 +256,7 @@
     "max_restarts": "Μέγιστος αριθμός επανεκκινήσεων λόγω σφάλματος εντός 30 δευτερολέπτων πριν την οριστική διακοπή (προεπιλογή: 2)",
     "tray": "Εκκίνηση στην περιοχή ειδοποιήσεων (μόνο για επιτραπέζιους υπολογιστές, προαιρετικό)",
     "no_tray": "Απενεργοποίηση εικονιδίου περιοχής ειδοποιήσεων",
+    "ready_timeout": "Χρονικό όριο λήξης του ελέγχου ετοιμότητας σε ms (επίσης OMNIROUTE_READY_TIMEOUT_MS, προεπιλογή 60000)",
     "tls_cert": "Διαδρομή προς πιστοποιητικό TLS (PEM) για εξυπηρέτηση HTTPS (επίσης OMNIROUTE_TLS_CERT)",
     "tls_key": "Διαδρομή προς το ιδιωτικό κλειδί TLS (PEM) για εξυπηρέτηση HTTPS (επίσης OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "Ο διακομιστής MCP εκτελείται ({transport})",
     "stopped": "Ο διακομιστής MCP διακόπηκε.",
     "restarted": "Ο διακομιστής MCP επανεκκινήθηκε.",
+    "stoppedHint": "Εκτελέστε `omniroute mcp enable` για να το ενεργοποιήσετε.",
+    "enabled": "Ο διακομιστής MCP ενεργοποιήθηκε.",
+    "disabled": "Ο διακομιστής MCP απενεργοποιήθηκε.",
+    "enable": {
+      "description": "Ενεργοποίηση του διακομιστή MCP",
+      "transport": "Μέθοδος μεταφοράς προς χρήση: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Απενεργοποίηση του διακομιστή MCP"
+    },
     "call": {
       "description": "Άμεση κλήση εργαλείου MCP",
       "args": "Αντικείμενο ορισμάτων JSON (ενσωματωμένο)",
@@ -1093,7 +1104,7 @@
     }
   },
   "combo": {
-    "title": "Combos",
+    "title": "Συνδυασμοί",
     "switched": "Ενεργό combo: {name}",
     "created": "Δημιουργήθηκε combo: {name}",
     "deleted": "Διαγράφηκε combo: {name}",

bin/cli/locales/en.json

@@ -256,6 +256,7 @@
     "max_restarts": "Max crash restarts within 30s before giving up (default: 2)",
     "tray": "Start in the system tray (desktop only, opt-in)",
     "no_tray": "Disable system tray icon",
+    "ready_timeout": "Readiness probe timeout in ms (also OMNIROUTE_READY_TIMEOUT_MS, default 60000)",
     "tls_cert": "Path to a TLS certificate (PEM) to serve HTTPS (also OMNIROUTE_TLS_CERT)",
     "tls_key": "Path to the TLS private key (PEM) to serve HTTPS (also OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP server running ({transport})",
     "stopped": "MCP server stopped.",
     "restarted": "MCP server restarted.",
+    "stoppedHint": "Run `omniroute mcp enable` to turn it on.",
+    "enabled": "MCP server enabled.",
+    "disabled": "MCP server disabled.",
+    "enable": {
+      "description": "Enable the MCP server",
+      "transport": "Transport to use: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Disable the MCP server"
+    },
     "call": {
       "description": "Invoke an MCP tool directly",
       "args": "JSON arguments object (inline)",

bin/cli/locales/et.json

@@ -30,7 +30,7 @@
     "opencode": "Installi ja seadista OpenCode'i jaoks kaasas olev @omniroute/opencode-plugin"
   },
   "doctor": {
-    "title": "OmniRoute Doctor",
+    "title": "OmniRoute'i diagnostika",
     "dbOk": "Andmebaas: korras ({path})",
     "dbMissing": "Andmebaas: pole lähtestatud — käivita `omniroute setup`",
     "portOk": "Port {port}: saadaval",
@@ -256,6 +256,7 @@
     "max_restarts": "Maksimaalne krahhijärgsete taaskäivituste arv 30 sekundi jooksul enne alla andmist (vaikimisi: 2)",
     "tray": "Käivita süsteemisalves (ainult töölaual, valikuline)",
     "no_tray": "Keela süsteemisalve ikoon",
+    "ready_timeout": "Valmisolekukontrolli ajalõpp millisekundites (ka OMNIROUTE_READY_TIMEOUT_MS, vaikimisi 60000)",
     "tls_cert": "TLS-sertifikaadi (PEM) tee HTTPS-i teenindamiseks (ka OMNIROUTE_TLS_CERT)",
     "tls_key": "TLS privaatvõtme (PEM) tee HTTPS-i teenindamiseks (ka OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP server töötab ({transport})",
     "stopped": "MCP server peatatud.",
     "restarted": "MCP server taaskäivitatud.",
+    "stoppedHint": "Selle sisselülitamiseks käivitage `omniroute mcp enable`.",
+    "enabled": "MCP-server on lubatud.",
+    "disabled": "MCP-server on keelatud.",
+    "enable": {
+      "description": "Luba MCP-server",
+      "transport": "Kasutatav transport: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Keela MCP-server"
+    },
     "call": {
       "description": "Käivita MCP tööriist otse",
       "args": "JSON argumentide objekt (otseselt sisestatud)",

bin/cli/locales/ga.json

@@ -256,6 +256,7 @@
     "max_restarts": "Uaslíon atosuithe titim laistigh de 30 sula bhfágann tú suas (réamhshocrú: 2)",
     "tray": "Tosaigh i mbosca córas (leicsitheoir amháin, roghnach)",
     "no_tray": "Díchumasaigh deilbhín bosca córas",
+    "ready_timeout": "Teorainn ama an tseiceála ullmhachta i ms (OMNIROUTE_READY_TIMEOUT_MS freisin, réamhshocrú 60000)",
     "tls_cert": "Cosán go dtí deimhniú TLS (PEM) chun HTTPS a sheirbhísiú (freisin OMNIROUTE_TLS_CERT)",
     "tls_key": "Cosán go dtí eochair phríobháideach TLS (PEM) chun HTTPS a sheirbhísiú (freisin OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "Tá freastalaí MCP ag rith ({transport})",
     "stopped": "Tá freastalaí MCP stoptha.",
     "restarted": "Tá freastalaí MCP atosaíte.",
+    "stoppedHint": "Rith `omniroute mcp enable` chun é a chur ar siúl.",
+    "enabled": "Freastalaí MCP cumasaithe.",
+    "disabled": "Freastalaí MCP díchumasaithe.",
+    "enable": {
+      "description": "Cumasaigh an freastalaí MCP",
+      "transport": "Iompar le húsáid: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Díchumasaigh an freastalaí MCP"
+    },
     "call": {
       "description": "Glaoigh ar uirlis MCP go díreach",
       "args": "Réimse argóintí JSON (inlíne)",

bin/cli/locales/ha.json

@@ -256,6 +256,7 @@
     "max_restarts": "Matsakaicin sake farawa bayan rushewa cikin daƙiƙa 30 kafin a haƙura (tsoho: 2)",
     "tray": "Fara a tiren tsarin (na kwamfutar tebur kawai, sai an zaɓa)",
     "no_tray": "Kashe gunkin tiren tsarin",
+    "ready_timeout": "Lokacin ƙarewar gwajin shiri a ms (har ila yau OMNIROUTE_READY_TIMEOUT_MS, tsoho 60000)",
     "tls_cert": "Hanyar zuwa takardar shaidar TLS (PEM) don samar da HTTPS (haka kuma OMNIROUTE_TLS_CERT)",
     "tls_key": "Hanyar zuwa maɓallin sirri na TLS (PEM) don samar da HTTPS (haka kuma OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "Sabar MCP tana aiki ({transport})",
     "stopped": "An dakatar da sabar MCP.",
     "restarted": "An sake kunna sabar MCP.",
+    "stoppedHint": "Gudanar da `omniroute mcp enable` don kunna shi.",
+    "enabled": "An kunna sabar MCP.",
+    "disabled": "An kashe sabar MCP.",
+    "enable": {
+      "description": "Kunna sabar MCP",
+      "transport": "Hanyar jigilar da za a yi amfani da ita: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Kashe sabar MCP"
+    },
     "call": {
       "description": "Kira kayan aikin MCP kai tsaye",
       "args": "Abun hujjojin JSON (a cikin layi)",
@@ -475,7 +486,7 @@
     }
   },
   "tunnel": {
-    "title": "Tunnels",
+    "title": "Ramuka",
     "listDescription": "Jera tunnels masu aiki",
     "createDescription": "Ƙirƙiri tunnel",
     "created": "An ƙirƙiri tunnel: {url}",

bin/cli/locales/hr.json

@@ -256,6 +256,7 @@
     "max_restarts": "Maksimalni broj ponovnih pokretanja nakon pada unutar 30 s prije odustajanja (zadano: 2)",
     "tray": "Pokretanje u programskoj traci (samo za stolna računala, po izboru)",
     "no_tray": "Onemogući ikonu programske trake",
+    "ready_timeout": "Vremensko ograničenje provjere spremnosti u ms (također OMNIROUTE_READY_TIMEOUT_MS, zadano 60000)",
     "tls_cert": "Putanja do TLS certifikata (PEM) za posluživanje HTTPS-a (također OMNIROUTE_TLS_CERT)",
     "tls_key": "Putanja do TLS privatnog ključa (PEM) za posluživanje HTTPS-a (također OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP poslužitelj je pokrenut ({transport})",
     "stopped": "MCP poslužitelj je zaustavljen.",
     "restarted": "MCP poslužitelj je ponovo pokrenut.",
+    "stoppedHint": "Pokrenite `omniroute mcp enable` da biste ga uključili.",
+    "enabled": "MCP poslužitelj omogućen.",
+    "disabled": "MCP poslužitelj onemogućen.",
+    "enable": {
+      "description": "Omogući MCP poslužitelj",
+      "transport": "Prijenos koji će se koristiti: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Onemogući MCP poslužitelj"
+    },
     "call": {
       "description": "Izravno pozovi MCP alat",
       "args": "JSON objekt argumenata (unutarnji)",

bin/cli/locales/hy.json

@@ -256,6 +256,7 @@
     "max_restarts": "Վթարից հետո վերագործարկումների առավելագույն քանակը 30 վրկ-ի ընթացքում՝ մինչև փորձերը դադարեցնելը (լռելյայն՝ 2)",
     "tray": "Գործարկել համակարգային սկուտեղում (միայն աշխատասեղանի տարբերակում, ըստ ցանկության)",
     "no_tray": "Անջատել համակարգային սկուտեղի պատկերակը",
+    "ready_timeout": "Պատրաստության ստուգման սպասաժամը՝ մվ-ով (նաև OMNIROUTE_READY_TIMEOUT_MS, լռելյայն՝ 60000)",
     "tls_cert": "HTTPS սպասարկելու համար TLS վկայագրի (PEM) ուղին (նաև՝ OMNIROUTE_TLS_CERT)",
     "tls_key": "HTTPS սպասարկելու համար TLS գաղտնի բանալու (PEM) ուղին (նաև՝ OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP սերվերը գործարկված է ({transport})",
     "stopped": "MCP սերվերը կանգնեցվել է։",
     "restarted": "MCP սերվերը վերագործարկվել է։",
+    "stoppedHint": "Այն միացնելու համար գործարկեք `omniroute mcp enable` հրամանը։",
+    "enabled": "MCP սերվերը միացված է։",
+    "disabled": "MCP սերվերն անջատված է։",
+    "enable": {
+      "description": "Միացնել MCP սերվերը",
+      "transport": "Օգտագործվող փոխադրման եղանակը՝ stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Անջատել MCP սերվերը"
+    },
     "call": {
       "description": "Անմիջապես կանչել MCP գործիք",
       "args": "JSON արգումենտների օբյեկտ (ներտողային)",

bin/cli/locales/ig.json

@@ -256,6 +256,7 @@
     "max_restarts": "Ọnụọgụ mmalitegharị kachasị elu mgbe ọ dara n'ime 30s tupu ịkwụsị mbọ (ndabara: 2)",
     "tray": "Malite na tray sistemụ (naanị na desktọpụ, ma ọ bụrụ na ahọrọ ya)",
     "no_tray": "Gbanyụọ akara ngosi tray sistemụ",
+    "ready_timeout": "Oge njedebe nyocha ịdị njikere na ms (yana OMNIROUTE_READY_TIMEOUT_MS, ndabara bụ 60000)",
     "tls_cert": "Ụzọ gaa na asambodo TLS (PEM) iji nye HTTPS (nakwa OMNIROUTE_TLS_CERT)",
     "tls_key": "Ụzọ gaa na igodo nzuzo TLS (PEM) iji nye HTTPS (nakwa OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "Sava MCP na-arụ ọrụ ({transport})",
     "stopped": "Sava MCP akwụsịla.",
     "restarted": "Amalitegharịrị sava MCP.",
+    "stoppedHint": "Gbaa `omniroute mcp enable` iji gbanye ya.",
+    "enabled": "Agbanyela sava MCP.",
+    "disabled": "Agbanyụọla sava MCP.",
+    "enable": {
+      "description": "Gbanye sava MCP",
+      "transport": "Usoro mbufe a ga-eji: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Gbanyụọ sava MCP"
+    },
     "call": {
       "description": "Kpọọ ngwa MCP ozugbo",
       "args": "Ihe arụmụka JSON (n'ime ahịrị)",

bin/cli/locales/ka.json

@@ -256,6 +256,7 @@
     "max_restarts": "30 წამში ავარიული გათიშვის შემდეგ ხელახალი გაშვებების მაქსიმალური რაოდენობა დანებებამდე (ნაგულისხმევი: 2)",
     "tray": "სისტემურ უჯრაში გაშვება (მხოლოდ დესკტოპისთვის, სურვილისამებრ)",
     "no_tray": "სისტემური უჯრის ხატულის გამორთვა",
+    "ready_timeout": "მზადყოფნის შემოწმების მოლოდინის დრო მილიწამებში (ასევე OMNIROUTE_READY_TIMEOUT_MS, ნაგულისხმევად 60000)",
     "tls_cert": "HTTPS-ისთვის TLS სერტიფიკატის (PEM) გზა (ასევე OMNIROUTE_TLS_CERT)",
     "tls_key": "HTTPS-ისთვის TLS პირადი გასაღების (PEM) გზა (ასევე OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP სერვერი მუშაობს ({transport})",
     "stopped": "MCP სერვერი გაჩერდა.",
     "restarted": "MCP სერვერი გადაიტვირთა.",
+    "stoppedHint": "მის ჩასართავად გაუშვით `omniroute mcp enable`.",
+    "enabled": "MCP სერვერი ჩართულია.",
+    "disabled": "MCP სერვერი გამორთულია.",
+    "enable": {
+      "description": "MCP სერვერის ჩართვა",
+      "transport": "გამოსაყენებელი ტრანსპორტი: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "MCP სერვერის გამორთვა"
+    },
     "call": {
       "description": "MCP ხელსაწყოს პირდაპირ გამოძახება",
       "args": "JSON არგუმენტების ობიექტი (ჩაშენებული)",

bin/cli/locales/km.json

@@ -86,7 +86,7 @@
     }
   },
   "keys": {
-    "title": "API Keys",
+    "title": "សោ API",
     "addDescription": "បន្ថែម ឬធ្វើបច្ចុប្បន្នភាព API key សម្រាប់អ្នកផ្តល់សេវា",
     "listDescription": "រាយ API keys ដែលបានកំណត់រចនាសម្ព័ន្ធទាំងអស់",
     "removeDescription": "លុប API key សម្រាប់អ្នកផ្តល់សេវា",
@@ -226,7 +226,7 @@
     "description": "ផ្ញើ chat prompt មួយលើកទៅ OmniRoute",
     "file": "អាន prompt ពីឯកសារ",
     "stdin": "អាន prompt ពី stdin",
-    "system": "System prompt",
+    "system": "ប្រូមប្រព័ន្ធ",
     "model": "Model ID (លំនាំដើម៖ auto)",
     "max_tokens": "ចំនួន token អតិបរមាក្នុងការឆ្លើយតប",
     "temperature": "សីតុណ្ហភាព sampling (0–2)",
@@ -256,6 +256,7 @@
     "max_restarts": "ចំនួនអតិបរមានៃការចាប់ផ្តើមឡើងវិញបន្ទាប់ពីគាំងក្នុងរយៈពេល 30s មុនពេលបោះបង់ (លំនាំដើម៖ 2)",
     "tray": "ចាប់ផ្ដើមក្នុងថាសប្រព័ន្ធ (សម្រាប់កុំព្យូទ័រលើតុប៉ុណ្ណោះ និងត្រូវជ្រើសរើសបើក)",
     "no_tray": "បិទរូបតំណាងថាសប្រព័ន្ធ",
+    "ready_timeout": "រយៈពេលអស់ពេលនៃការត្រួតពិនិត្យភាពរួចរាល់ គិតជាមិល្លីវិនាទី (ក៏អាចប្រើ OMNIROUTE_READY_TIMEOUT_MS ផងដែរ, លំនាំដើម 60000)",
     "tls_cert": "ផ្លូវទៅកាន់វិញ្ញាបនបត្រ TLS (PEM) សម្រាប់បម្រើ HTTPS (ក៏ជា OMNIROUTE_TLS_CERT ផងដែរ)",
     "tls_key": "ផ្លូវទៅកាន់សោឯកជន TLS (PEM) សម្រាប់បម្រើ HTTPS (ក៏ជា OMNIROUTE_TLS_KEY ផងដែរ)"
   },
@@ -347,6 +348,16 @@
     "running": "ម៉ាស៊ីនមេ MCP កំពុងដំណើរការ ({transport})",
     "stopped": "ម៉ាស៊ីនមេ MCP បានឈប់ដំណើរការ។",
     "restarted": "ម៉ាស៊ីនមេ MCP បានចាប់ផ្តើមឡើងវិញ។",
+    "stoppedHint": "ដំណើរការ `omniroute mcp enable` ដើម្បីបើកវា។",
+    "enabled": "ម៉ាស៊ីនមេ MCP ត្រូវបានបើក។",
+    "disabled": "ម៉ាស៊ីនមេ MCP ត្រូវបានបិទ។",
+    "enable": {
+      "description": "បើកម៉ាស៊ីនមេ MCP",
+      "transport": "មធ្យោបាយបញ្ជូនដែលត្រូវប្រើ៖ stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "បិទម៉ាស៊ីនមេ MCP"
+    },
     "call": {
       "description": "ហៅប្រើឧបករណ៍ MCP ដោយផ្ទាល់",
       "args": "អាប់ជិចអាគុយម៉ង់ JSON (ក្នុងបន្ទាត់)",

bin/cli/locales/kn.json

@@ -256,6 +256,7 @@
     "max_restarts": "ಬಿಟ್ಟುಕೊಡುವ ಮೊದಲು 30s ಒಳಗೆ ಕ್ರ್ಯಾಶ್ನಿಂದ ಗರಿಷ್ಠ ಮರುಪ್ರಾರಂಭಗಳ ಸಂಖ್ಯೆ (ಡೀಫಾಲ್ಟ್: 2)",
     "tray": "ಸಿಸ್ಟಮ್ ಟ್ರೇಯಲ್ಲಿ ಪ್ರಾರಂಭಿಸಿ (ಡೆಸ್ಕ್ಟಾಪ್ ಮಾತ್ರ, ಆಯ್ಕೆ ಮಾಡಿದಲ್ಲಿ)",
     "no_tray": "ಸಿಸ್ಟಮ್ ಟ್ರೇ ಐಕಾನ್ ನಿಷ್ಕ್ರಿಯಗೊಳಿಸಿ",
+    "ready_timeout": "ಸಿದ್ಧತಾ ಪ್ರೋಬ್ ಕಾಲಮಿತಿ ಮಿಲಿಸೆಕೆಂಡುಗಳಲ್ಲಿ (OMNIROUTE_READY_TIMEOUT_MS ಕೂಡ, ಡೀಫಾಲ್ಟ್ 60000)",
     "tls_cert": "HTTPS ಒದಗಿಸಲು TLS ಪ್ರಮಾಣಪತ್ರದ (PEM) ಪಥ (OMNIROUTE_TLS_CERT ಸಹ)",
     "tls_key": "HTTPS ಒದಗಿಸಲು TLS ಖಾಸಗಿ ಕೀಲಿಯ (PEM) ಪಥ (OMNIROUTE_TLS_KEY ಸಹ)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP ಸರ್ವರ್ ಚಾಲನೆಯಲ್ಲಿದೆ ({transport})",
     "stopped": "MCP ಸರ್ವರ್ ನಿಲ್ಲಿಸಲಾಗಿದೆ.",
     "restarted": "MCP ಸರ್ವರ್ ಮರುಪ್ರಾರಂಭಿಸಲಾಗಿದೆ.",
+    "stoppedHint": "ಇದನ್ನು ಸಕ್ರಿಯಗೊಳಿಸಲು `omniroute mcp enable` ಅನ್ನು ಚಲಾಯಿಸಿ.",
+    "enabled": "MCP ಸರ್ವರ್ ಸಕ್ರಿಯಗೊಳಿಸಲಾಗಿದೆ.",
+    "disabled": "MCP ಸರ್ವರ್ ನಿಷ್ಕ್ರಿಯಗೊಳಿಸಲಾಗಿದೆ.",
+    "enable": {
+      "description": "MCP ಸರ್ವರ್ ಅನ್ನು ಸಕ್ರಿಯಗೊಳಿಸಿ",
+      "transport": "ಬಳಸಬೇಕಾದ ಟ್ರಾನ್ಸ್ಪೋರ್ಟ್: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "MCP ಸರ್ವರ್ ಅನ್ನು ನಿಷ್ಕ್ರಿಯಗೊಳಿಸಿ"
+    },
     "call": {
       "description": "MCP ಟೂಲ್ ಅನ್ನು ನೇರವಾಗಿ ಆಹ್ವಾನಿಸಿ",
       "args": "JSON ಆರ್ಗ್ಯುಮೆಂಟ್ಗಳ ಆಬ್ಜೆಕ್ಟ್ (ಇನ್ಲೈನ್)",

bin/cli/locales/lt.json

@@ -256,6 +256,7 @@
     "max_restarts": "Didžiausias paleidimų iš naujo po strigties skaičius per 30 s prieš nutraukiant bandymus (numatyta: 2)",
     "tray": "Paleisti sistemos dėkle (tik darbalaukio programoje, pasirenkama)",
     "no_tray": "Išjungti sistemos dėklo piktogramą",
+    "ready_timeout": "Parengties patikros skirtasis laikas ms (taip pat OMNIROUTE_READY_TIMEOUT_MS, numatytoji reikšmė 60000)",
     "tls_cert": "Kelias į TLS sertifikatą (PEM), skirtą HTTPS teikti (taip pat OMNIROUTE_TLS_CERT)",
     "tls_key": "Kelias į privatųjį TLS raktą (PEM), skirtą HTTPS teikti (taip pat OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP serveris veikia ({transport})",
     "stopped": "MCP serveris sustabdytas.",
     "restarted": "MCP serveris paleistas iš naujo.",
+    "stoppedHint": "Norėdami jį įjungti, paleiskite `omniroute mcp enable`.",
+    "enabled": "MCP serveris įjungtas.",
+    "disabled": "MCP serveris išjungtas.",
+    "enable": {
+      "description": "Įjungti MCP serverį",
+      "transport": "Naudotinas perdavimo būdas: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Išjungti MCP serverį"
+    },
     "call": {
       "description": "Tiesiogiai iškviesti MCP įrankį",
       "args": "JSON argumentų objektas (įterptasis)",

bin/cli/locales/lv.json

@@ -256,6 +256,7 @@
     "max_restarts": "Maksimālās avāriju restartēšanas 30 sekunžu laikā pirms padoties (noklusējums: 2)",
     "tray": "Sākt sistēmas tray (tikai darbvirsmas, izvēlēties)",
     "no_tray": "Atspējot sistēmas tray ikonu",
+    "ready_timeout": "Gatavības pārbaudes taimauts milisekundēs (arī OMNIROUTE_READY_TIMEOUT_MS, noklusējuma vērtība 60000)",
     "tls_cert": "Ceļš uz TLS sertifikātu (PEM) HTTPS apkalpošanai (arī OMNIROUTE_TLS_CERT)",
     "tls_key": "Ceļš uz TLS privāto atslēgu (PEM) HTTPS apkalpošanai (arī OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP serveris darbojas ({transport})",
     "stopped": "MCP serveris apturēts.",
     "restarted": "MCP serveris restartēts.",
+    "stoppedHint": "Lai to ieslēgtu, palaidiet `omniroute mcp enable`.",
+    "enabled": "MCP serveris ir iespējots.",
+    "disabled": "MCP serveris ir atspējots.",
+    "enable": {
+      "description": "Iespējot MCP serveri",
+      "transport": "Izmantojamais transports: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Atspējot MCP serveri"
+    },
     "call": {
       "description": "Izsaukt MCP rīku tieši",
       "args": "JSON argumentu objekts (iekšējais)",

bin/cli/locales/ml.json

@@ -256,6 +256,7 @@
     "max_restarts": "ഉപേക്ഷിക്കുന്നതിന് മുമ്പ് 30s-നുള്ളിൽ അനുവദിക്കുന്ന പരമാവധി ക്രാഷ് പുനരാരംഭങ്ങൾ (ഡിഫോൾട്ട്: 2)",
     "tray": "സിസ്റ്റം ട്രേയിൽ ആരംഭിക്കുക (ഡെസ്ക്ടോപ്പിൽ മാത്രം, സ്വമേധയാ തിരഞ്ഞെടുക്കാവുന്നത്)",
     "no_tray": "സിസ്റ്റം ട്രേ ഐക്കൺ പ്രവർത്തനരഹിതമാക്കുക",
+    "ready_timeout": "റെഡിനസ് പ്രോബ് സമയപരിധി ms-ൽ (OMNIROUTE_READY_TIMEOUT_MS എന്നതും, സ്ഥിരസ്ഥിതി 60000)",
     "tls_cert": "HTTPS നൽകുന്നതിനുള്ള TLS സർട്ടിഫിക്കറ്റിന്റെ (PEM) പാത (OMNIROUTE_TLS_CERT-ലും)",
     "tls_key": "HTTPS നൽകുന്നതിനുള്ള TLS സ്വകാര്യ കീയുടെ (PEM) പാത (OMNIROUTE_TLS_KEY-ലും)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP സെർവർ പ്രവർത്തിക്കുന്നു ({transport})",
     "stopped": "MCP സെർവർ നിർത്തി.",
     "restarted": "MCP സെർവർ പുനരാരംഭിച്ചു.",
+    "stoppedHint": "ഇത് പ്രവർത്തനക്ഷമമാക്കാൻ `omniroute mcp enable` പ്രവർത്തിപ്പിക്കുക.",
+    "enabled": "MCP സെർവർ പ്രവർത്തനക്ഷമമാക്കി.",
+    "disabled": "MCP സെർവർ പ്രവർത്തനരഹിതമാക്കി.",
+    "enable": {
+      "description": "MCP സെർവർ പ്രവർത്തനക്ഷമമാക്കുക",
+      "transport": "ഉപയോഗിക്കേണ്ട ട്രാൻസ്പോർട്ട്: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "MCP സെർവർ പ്രവർത്തനരഹിതമാക്കുക"
+    },
     "call": {
       "description": "ഒരു MCP ടൂൾ നേരിട്ട് പ്രവർത്തിപ്പിക്കുക",
       "args": "JSON ആർഗ്യുമെന്റുകളുടെ ഒബ്ജക്റ്റ് (ഇൻലൈൻ)",

bin/cli/locales/mt.json

@@ -256,6 +256,7 @@
     "max_restarts": "L-ogħla numru ta' restarts wara crash fi żmien 30s qabel ma jċedi (default: 2)",
     "tray": "Bda' fil-caffettar tal-pajjiż (biss desktop, għażla)",
     "no_tray": "Iddiżattiva l-ikona tal-caffettar tal-pajjiż",
+    "ready_timeout": "Limitu taż-żmien tal-verifika tat-tħejjija f'ms (ukoll OMNIROUTE_READY_TIMEOUT_MS, valur predefinit 60000)",
     "tls_cert": "Triq għal ċertifikat TLS (PEM) biex isservi HTTPS (ukoll OMNIROUTE_TLS_CERT)",
     "tls_key": "Triq għas-sieqa privata tal-TLS (PEM) biex isservi HTTPS (ukoll OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "Servier MCP qed jaħdem ({transport})",
     "stopped": "Servier MCP waqaf.",
     "restarted": "Servier MCP restartat.",
+    "stoppedHint": "Ħaddem `omniroute mcp enable` biex tattivah.",
+    "enabled": "Is-server MCP huwa attivat.",
+    "disabled": "Is-server MCP huwa diżattivat.",
+    "enable": {
+      "description": "Attiva s-server MCP",
+      "transport": "Trasport li għandu jintuża: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Iddiżattiva s-server MCP"
+    },
     "call": {
       "description": "Sejjaħ għodda MCP direttament",
       "args": "Oġġett argomenti JSON (internament)",

bin/cli/locales/my.json

@@ -26,7 +26,7 @@
     "testFailed": "Provider စမ်းသပ်မှု မအောင်မြင်ပါ: {error}",
     "loginEnabled": "လော့ဂ်အင်: ဖွင့်ထားသည် (စကားဝှက်ကို အပ်ဒိတ်လုပ်ပြီး)",
     "loginDisabled": "လော့ဂ်အင်: ပိတ်ထားသည်",
-    "providerInfo": "Provider: {info}",
+    "providerInfo": "ပံ့ပိုးသူ: {info}",
     "opencode": "OpenCode အတွက် တွဲဖက်ပါရှိသော @omniroute/opencode-plugin ကို ထည့်သွင်းပြီး စီစဉ်သတ်မှတ်ရန်"
   },
   "doctor": {
@@ -41,7 +41,7 @@
     "warnings": "သတိပေးချက် {count} ခု — အပေါ်တွင် ကြည့်ပါ။"
   },
   "providers": {
-    "title": "Providers",
+    "title": "ပံ့ပိုးသူများ",
     "noProviders": "မည်သည့် provider ကိုမျှ စီစဉ်သတ်မှတ်မထားပါ။ လုပ်ဆောင်ရန်: omniroute setup",
     "testing": "{name} ကို စမ်းသပ်နေသည်...",
     "available": "အသုံးပြုနိုင်သော provider {count} ခု",
@@ -86,7 +86,7 @@
     }
   },
   "keys": {
-    "title": "API Keys",
+    "title": "API သော့များ",
     "addDescription": "ဝန်ဆောင်မှုပေးသူတစ်ခုအတွက် API key ကို ထည့်ရန် သို့မဟုတ် အပ်ဒိတ်လုပ်ရန်",
     "listDescription": "ပြင်ဆင်သတ်မှတ်ထားသော API key အားလုံးကို စာရင်းပြုစုရန်",
     "removeDescription": "ဝန်ဆောင်မှုပေးသူတစ်ခုအတွက် API key ကို ဖယ်ရှားရန်",
@@ -152,7 +152,7 @@
     "file": "ဖိုင်မှ prompt ကို ဖတ်ပါ",
     "stdin": "stdin မှ prompt ကို ဖတ်ပါ",
     "model": "Model ID (မူလသတ်မှတ်ချက်: auto)",
-    "system": "System prompt",
+    "system": "စနစ်ညွှန်ကြားချက်",
     "combo": "သတ်မှတ်ထားသော combo တစ်ခုကို အမည်ဖြင့် မဖြစ်မနေ အသုံးပြုပါ",
     "max_tokens": "Response အတွင်း အများဆုံး token အရေအတွက်",
     "responses_api": "/v1/chat/completions အစား /v1/responses ကို အသုံးပြုပါ",
@@ -226,7 +226,7 @@
     "description": "OmniRoute သို့ တစ်ကြိမ်တည်းသုံး chat prompt ပို့ရန်",
     "file": "ဖိုင်မှ prompt ကို ဖတ်ရန်",
     "stdin": "stdin မှ prompt ကို ဖတ်ရန်",
-    "system": "System prompt",
+    "system": "စနစ်ညွှန်ကြားချက်",
     "model": "Model ID (မူလသတ်မှတ်ချက်: auto)",
     "max_tokens": "တုံ့ပြန်ချက်တွင် ပါဝင်မည့် token အရေအတွက် အများဆုံး",
     "temperature": "နမူနာရွေးချယ်မှု temperature (0–2)",
@@ -256,6 +256,7 @@
     "max_restarts": "လက်လျှော့မတိုင်မီ 30s အတွင်း ပျက်သွား၍ ပြန်လည်စတင်နိုင်သည့် အများဆုံးအကြိမ်ရေ (မူလသတ်မှတ်ချက်: 2)",
     "tray": "စနစ် tray တွင် စတင်ပါ (desktop အတွက်သာ၊ ရွေးချယ်ဖွင့်သုံးရန်)",
     "no_tray": "စနစ် tray အိုင်ကွန်ကို ပိတ်ပါ",
+    "ready_timeout": "အဆင်သင့်ဖြစ်မှု စစ်ဆေးချက်၏ အချိန်ကုန်ဆုံးကာလကို ms ဖြင့် သတ်မှတ်ပါ (OMNIROUTE_READY_TIMEOUT_MS လည်းဖြစ်ပြီး မူလတန်ဖိုးမှာ 60000 ဖြစ်သည်)",
     "tls_cert": "HTTPS ဖြင့် ဝန်ဆောင်မှုပေးရန် TLS certificate (PEM) သို့ လမ်းကြောင်း (OMNIROUTE_TLS_CERT လည်းဖြစ်သည်)",
     "tls_key": "HTTPS ဖြင့် ဝန်ဆောင်မှုပေးရန် TLS private key (PEM) သို့ လမ်းကြောင်း (OMNIROUTE_TLS_KEY လည်းဖြစ်သည်)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP ဆာဗာ လည်ပတ်နေသည် ({transport})",
     "stopped": "MCP ဆာဗာ ရပ်တန့်သွားပါပြီ။",
     "restarted": "MCP ဆာဗာကို ပြန်လည်စတင်ပြီးပါပြီ။",
+    "stoppedHint": "၎င်းကို ဖွင့်ရန် `omniroute mcp enable` ကို လုပ်ဆောင်ပါ။",
+    "enabled": "MCP ဆာဗာကို ဖွင့်ထားသည်။",
+    "disabled": "MCP ဆာဗာကို ပိတ်ထားသည်။",
+    "enable": {
+      "description": "MCP ဆာဗာကို ဖွင့်ရန်",
+      "transport": "အသုံးပြုမည့် ပို့ဆောင်မှုနည်းလမ်း: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "MCP ဆာဗာကို ပိတ်ရန်"
+    },
     "call": {
       "description": "MCP ကိရိယာတစ်ခုကို တိုက်ရိုက် ခေါ်ယူအသုံးပြုရန်",
       "args": "JSON အငြင်းပွားဖွယ်ရာ အရာဝတ္ထု (စာကြောင်းအတွင်း)",
@@ -633,7 +644,7 @@
       "content": "Memory စာသားအကြောင်းအရာ",
       "file": "ဖိုင်မှ အကြောင်းအရာကို ဖတ်ရန်",
       "type": "Memory အမျိုးအစား (မူလသတ်မှတ်ချက်: user)",
-      "metadata": "JSON metadata object",
+      "metadata": "JSON မက်တာဒေတာ အရာဝတ္ထု",
       "api_key": "API key နှင့် ချိတ်ဆက်ရန်"
     },
     "clear": {
@@ -667,7 +678,7 @@
     },
     "start": {
       "description": "provider တစ်ခုအတွက် OAuth ခွင့်ပြုချက် flow ကို စတင်ရန်",
-      "provider": "Provider ID (gemini, copilot, cursor, …)",
+      "provider": "ပံ့ပိုးသူ ID (gemini, copilot, cursor, …)",
       "no_browser": "URL ကိုသာ ဖော်ပြရန် — browser ကို မဖွင့်ပါနှင့်",
       "import_system": "စက်တွင်း system config မှ အထောက်အထားများကို အလိုအလျောက် ထည့်သွင်းရန်",
       "social": "Social login provider (google|github) — kiro အတွက် လိုအပ်သည်",
@@ -704,7 +715,7 @@
         "prompt_file": "ဖိုင်မှ prompt ကို ဖတ်ရန်",
         "repo": "လုပ်ဆောင်စရာအတွက် clone ပြုလုပ်မည့် repository URL",
         "branch": "အသုံးပြုမည့် branch အမည်",
-        "metadata": "JSON metadata object"
+        "metadata": "JSON မက်တာဒေတာ အရာဝတ္ထု"
       },
       "list": {
         "description": "agent လုပ်ဆောင်စရာများကို စာရင်းပြုရန်",
@@ -1268,7 +1279,7 @@
     "description": "LLM ဖြင့် အပြန်အလှန် ဆွေးနွေးမှုအကြိမ်များစွာ ပြုလုပ်နိုင်သော REPL",
     "model": "အသုံးပြုမည့် မော်ဒယ် (ပုံသေ- auto)",
     "combo": "အသုံးပြုမည့် Combo အမည်",
-    "system": "System prompt",
+    "system": "စနစ်ညွှန်ကြားချက်",
     "resume": "သိမ်းဆည်းထားသော session ကို အမည်ဖြင့် ပြန်လည်စတင်ရန်"
   },
   "plugin": {

bin/cli/locales/ne.json

@@ -226,11 +226,11 @@
     "description": "OmniRoute मा एकपटकको chat prompt पठाउनुहोस्",
     "file": "file बाट prompt पढ्नुहोस्",
     "stdin": "stdin बाट prompt पढ्नुहोस्",
-    "system": "System prompt",
+    "system": "प्रणाली प्रम्प्ट",
     "model": "Model ID (पूर्वनिर्धारित: auto)",
     "max_tokens": "response मा अधिकतम tokens",
     "temperature": "sampling temperature (0–2)",
-    "top_p": "Top-p nucleus sampling",
+    "top_p": "Top-p न्युक्लियस नमुना चयन",
     "reasoning_effort": "तर्क प्रयासको स्तर (low|medium|high)",
     "thinking_budget": "विस्तारित सोचाइको token बजेट",
     "combo": "नामद्वारा कुनै विशिष्ट combo प्रयोग गर्न बाध्य पार्नुहोस्",
@@ -256,6 +256,7 @@
     "max_restarts": "प्रयास छोड्नुअघि 30s भित्र क्र्यासपछि पुनः सुरु गर्ने अधिकतम सङ्ख्या (पूर्वनिर्धारित: 2)",
     "tray": "सिस्टम ट्रेमा सुरु गर्नुहोस् (डेस्कटपमा मात्र, स्वैच्छिक)",
     "no_tray": "सिस्टम ट्रे आइकन असक्षम गर्नुहोस्",
+    "ready_timeout": "मिलिसेकेन्डमा तत्परता प्रोबको समयसीमा (OMNIROUTE_READY_TIMEOUT_MS पनि, पूर्वनिर्धारित 60000)",
     "tls_cert": "HTTPS सेवा दिन TLS प्रमाणपत्र (PEM) को पथ (OMNIROUTE_TLS_CERT पनि)",
     "tls_key": "HTTPS सेवा दिन TLS निजी कुञ्जी (PEM) को पथ (OMNIROUTE_TLS_KEY पनि)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP सर्भर चलिरहेको छ ({transport})",
     "stopped": "MCP सर्भर रोकियो।",
     "restarted": "MCP सर्भर पुनः सुरु गरियो।",
+    "stoppedHint": "यसलाई सक्रिय गर्न `omniroute mcp enable` चलाउनुहोस्।",
+    "enabled": "MCP सर्भर सक्रिय गरियो।",
+    "disabled": "MCP सर्भर निष्क्रिय गरियो।",
+    "enable": {
+      "description": "MCP सर्भर सक्रिय गर्नुहोस्",
+      "transport": "प्रयोग गर्ने ट्रान्सपोर्ट: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "MCP सर्भर निष्क्रिय गर्नुहोस्"
+    },
     "call": {
       "description": "MCP उपकरणलाई सिधै आह्वान गर्नुहोस्",
       "args": "JSON आर्गुमेन्ट अब्जेक्ट (इनलाइन)",

bin/cli/locales/or.json

@@ -256,6 +256,7 @@
     "max_restarts": "ହାର ମାନିବା ପୂର୍ବରୁ 30s ମଧ୍ୟରେ ସର୍ବାଧିକ କ୍ରାଶ୍ ପୁନଃଆରମ୍ଭ ସଂଖ୍ୟା (ଡିଫଲ୍ଟ: 2)",
     "tray": "ସିଷ୍ଟମ୍ ଟ୍ରେରେ ଆରମ୍ଭ କରନ୍ତୁ (କେବଳ ଡେସ୍କଟପ୍, ଇଚ୍ଛାଧୀନ)",
     "no_tray": "ସିଷ୍ଟମ୍ ଟ୍ରେ ଆଇକନ୍ ଅକ୍ଷମ କରନ୍ତୁ",
+    "ready_timeout": "ମିଲିସେକେଣ୍ଡରେ ପ୍ରସ୍ତୁତି ପ୍ରୋବ୍ର ସମୟସୀମା (OMNIROUTE_READY_TIMEOUT_MS ମଧ୍ୟ, ଡିଫଲ୍ଟ 60000)",
     "tls_cert": "HTTPS ପରିବେଷଣ ପାଇଁ TLS ସର୍ଟିଫିକେଟ୍ (PEM)ର ପଥ (OMNIROUTE_TLS_CERT ମଧ୍ୟ)",
     "tls_key": "HTTPS ପରିବେଷଣ ପାଇଁ TLS ବ୍ୟକ୍ତିଗତ କୀ (PEM)ର ପଥ (OMNIROUTE_TLS_KEY ମଧ୍ୟ)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP ସର୍ଭର ଚାଲୁଛି ({transport})",
     "stopped": "MCP ସର୍ଭର ବନ୍ଦ ହୋଇଛି।",
     "restarted": "MCP ସର୍ଭର ପୁନଃଚାଲୁ ହୋଇଛି।",
+    "stoppedHint": "ଏହାକୁ ସକ୍ରିୟ କରିବା ପାଇଁ `omniroute mcp enable` ଚଲାନ୍ତୁ।",
+    "enabled": "MCP ସର୍ଭର୍ ସକ୍ରିୟ ହୋଇଛି।",
+    "disabled": "MCP ସର୍ଭର୍ ନିଷ୍କ୍ରିୟ ହୋଇଛି।",
+    "enable": {
+      "description": "MCP ସର୍ଭର୍କୁ ସକ୍ରିୟ କରନ୍ତୁ",
+      "transport": "ବ୍ୟବହାର କରିବାକୁ ଥିବା ପରିବହନ: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "MCP ସର୍ଭର୍କୁ ନିଷ୍କ୍ରିୟ କରନ୍ତୁ"
+    },
     "call": {
       "description": "ସିଧାସଳଖ ଏକ MCP ଟୁଲ୍ ଆହ୍ୱାନ କରନ୍ତୁ",
       "args": "JSON ଆର୍ଗୁମେଣ୍ଟ ଅବଜେକ୍ଟ (ଇନ୍‌ଲାଇନ୍)",

bin/cli/locales/pa.json

@@ -256,6 +256,7 @@
     "max_restarts": "ਹਾਰ ਮੰਨਣ ਤੋਂ ਪਹਿਲਾਂ 30s ਦੇ ਅੰਦਰ ਕ੍ਰੈਸ਼ ਤੋਂ ਬਾਅਦ ਮੁੜ-ਚਾਲੂ ਕਰਨ ਦੀ ਵੱਧ ਤੋਂ ਵੱਧ ਗਿਣਤੀ (ਡਿਫਾਲਟ: 2)",
     "tray": "ਸਿਸਟਮ ਟਰੇ ਵਿੱਚ ਸ਼ੁਰੂ ਕਰੋ (ਸਿਰਫ਼ ਡੈਸਕਟਾਪ, ਚੋਣਵਾਂ)",
     "no_tray": "ਸਿਸਟਮ ਟਰੇ ਆਈਕਨ ਅਸਮਰੱਥ ਕਰੋ",
+    "ready_timeout": "ਰੈਡੀਨੈੱਸ ਪ੍ਰੋਬ ਦਾ ਟਾਈਮਆਉਟ ਮਿਲੀਸਕਿੰਟਾਂ ਵਿੱਚ (OMNIROUTE_READY_TIMEOUT_MS ਵੀ, ਡਿਫਾਲਟ 60000)",
     "tls_cert": "HTTPS ਸਰਵ ਕਰਨ ਲਈ TLS ਸਰਟੀਫਿਕੇਟ (PEM) ਦਾ ਪਾਥ (OMNIROUTE_TLS_CERT ਵੀ)",
     "tls_key": "HTTPS ਸਰਵ ਕਰਨ ਲਈ TLS ਨਿੱਜੀ ਕੁੰਜੀ (PEM) ਦਾ ਪਾਥ (OMNIROUTE_TLS_KEY ਵੀ)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP ਸਰਵਰ ਚੱਲ ਰਿਹਾ ਹੈ ({transport})",
     "stopped": "MCP ਸਰਵਰ ਰੋਕਿਆ ਗਿਆ।",
     "restarted": "MCP ਸਰਵਰ ਮੁੜ ਚਾਲੂ ਕੀਤਾ ਗਿਆ।",
+    "stoppedHint": "ਇਸਨੂੰ ਚਾਲੂ ਕਰਨ ਲਈ `omniroute mcp enable` ਚਲਾਓ।",
+    "enabled": "MCP ਸਰਵਰ ਚਾਲੂ ਹੈ।",
+    "disabled": "MCP ਸਰਵਰ ਬੰਦ ਹੈ।",
+    "enable": {
+      "description": "MCP ਸਰਵਰ ਚਾਲੂ ਕਰੋ",
+      "transport": "ਵਰਤਣ ਲਈ ਟ੍ਰਾਂਸਪੋਰਟ: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "MCP ਸਰਵਰ ਬੰਦ ਕਰੋ"
+    },
     "call": {
       "description": "ਕਿਸੇ MCP ਟੂਲ ਨੂੰ ਸਿੱਧੇ ਚਲਾਓ",
       "args": "JSON ਆਰਗੂਮੈਂਟ ਆਬਜੈਕਟ (ਇਨਲਾਈਨ)",

bin/cli/locales/pt-BR.json

@@ -30,7 +30,7 @@
     "opencode": "Instala e configura o plugin @omniroute/opencode-plugin incluído para o OpenCode"
   },
   "doctor": {
-    "title": "OmniRoute Doctor",
+    "title": "Diagnóstico do OmniRoute",
     "dbOk": "Banco de dados: OK ({path})",
     "dbMissing": "Banco de dados: não inicializado — execute `omniroute setup`",
     "portOk": "Porta {port}: disponível",
@@ -256,6 +256,7 @@
     "max_restarts": "Máximo de reinícios em 30s antes de desistir (padrão: 2)",
     "tray": "Mostrar ícone na bandeja do sistema (apenas desktop, opt-in)",
     "no_tray": "Desabilitar ícone na bandeja do sistema",
+    "ready_timeout": "Tempo limite da verificação de prontidão em ms (também OMNIROUTE_READY_TIMEOUT_MS, padrão 60000)",
     "tls_cert": "Caminho para um certificado TLS (PEM) para servir HTTPS (também OMNIROUTE_TLS_CERT)",
     "tls_key": "Caminho para a chave privada TLS (PEM) para servir HTTPS (também OMNIROUTE_TLS_KEY)"
   },
@@ -301,7 +302,7 @@
     "noServer": "Servidor não está em execução. Inicie com: omniroute serve",
     "title": "Saúde",
     "status": "Status: {status}",
-    "uptime": "Uptime: {uptime}",
+    "uptime": "Tempo de atividade: {uptime}",
     "requests": "Requisições (24h): {count}",
     "cost": "Custo (24h): ${cost}"
   },
@@ -344,6 +345,19 @@
   },
   "mcp": {
     "title": "Servidor MCP",
+    "running": "Servidor MCP em execução ({transport})",
+    "stopped": "Servidor MCP parado.",
+    "restarted": "Servidor MCP reiniciado.",
+    "stoppedHint": "Execute `omniroute mcp enable` para ativá-lo.",
+    "enabled": "Servidor MCP ativado.",
+    "disabled": "Servidor MCP desativado.",
+    "enable": {
+      "description": "Ativar o servidor MCP",
+      "transport": "Transporte a ser usado: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Desativar o servidor MCP"
+    },
     "call": {
       "description": "Invocar uma ferramenta MCP diretamente",
       "args": "Objeto JSON de argumentos (inline)",
@@ -371,10 +385,7 @@
     },
     "audit": {
       "description": "Log de auditoria MCP (alias para audit --source mcp)"
-    },
-    "running": "Servidor MCP em execução ({transport})",
-    "stopped": "Servidor MCP parado.",
-    "restarted": "Servidor MCP reiniciado."
+    }
   },
   "a2a": {
     "skills": {
@@ -1093,7 +1104,7 @@
     }
   },
   "combo": {
-    "title": "Combos",
+    "title": "Combinações",
     "switched": "Combo ativo: {name}",
     "created": "Combo criado: {name}",
     "deleted": "Combo removido: {name}",
@@ -1268,7 +1279,7 @@
     "description": "REPL interativo multi-turn com LLM",
     "model": "Modelo a usar (padrão: auto)",
     "combo": "Nome do combo a usar",
-    "system": "System prompt",
+    "system": "Prompt do sistema",
     "resume": "Retomar sessão salva pelo nome"
   },
   "plugin": {

bin/cli/locales/si.json

@@ -256,6 +256,7 @@
     "max_restarts": "අත්හැරීමට පෙර තත්පර 30ක් තුළ සිදු කළ හැකි උපරිම බිඳවැටීම්-පසු නැවත ආරම්භ කිරීම් ගණන (පෙරනිමිය: 2)",
     "tray": "පද්ධති ට්රේ තුළ ආරම්භ කරන්න (ඩෙස්ක්ටොප් සඳහා පමණි, කැමැත්තෙන් සක්රිය කළ යුතුය)",
     "no_tray": "පද්ධති ට්රේ නිරූපකය අක්රිය කරන්න",
+    "ready_timeout": "සූදානම්දැයි පරීක්ෂා කිරීමේ කල් ඉකුත්වීම ms වලින් (OMNIROUTE_READY_TIMEOUT_MS ද අදාළ වේ, පෙරනිමිය 60000)",
     "tls_cert": "HTTPS සේවය සැපයීම සඳහා TLS සහතිකයකට (PEM) ඇති මාර්ගය (OMNIROUTE_TLS_CERT ද අදාළ වේ)",
     "tls_key": "HTTPS සේවය සැපයීම සඳහා TLS පුද්ගලික යතුරට (PEM) ඇති මාර්ගය (OMNIROUTE_TLS_KEY ද අදාළ වේ)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP සේවාදායකය ක්රියාත්මකයි ({transport})",
     "stopped": "MCP සේවාදායකය නවතා ඇත.",
     "restarted": "MCP සේවාදායකය නැවත ආරම්භ කරන ලදී.",
+    "stoppedHint": "එය සක්රීය කිරීමට `omniroute mcp enable` ධාවනය කරන්න.",
+    "enabled": "MCP සේවාදායකය සක්රීය කර ඇත.",
+    "disabled": "MCP සේවාදායකය අක්රීය කර ඇත.",
+    "enable": {
+      "description": "MCP සේවාදායකය සක්රීය කරන්න",
+      "transport": "භාවිත කළ යුතු ප්රවාහන ක්රමය: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "MCP සේවාදායකය අක්රීය කරන්න"
+    },
     "call": {
       "description": "MCP මෙවලමක් සෘජුවම කැඳවන්න",
       "args": "JSON තර්ක වස්තුව (පේළිය තුළ)",
@@ -1093,7 +1104,7 @@
     }
   },
   "combo": {
-    "title": "Combos",
+    "title": "සංයෝජන",
     "switched": "සක්රිය combo එක: {name}",
     "created": "Combo එක සාදන ලදී: {name}",
     "deleted": "Combo එක මකා දමන ලදී: {name}",

bin/cli/locales/sl.json

@@ -256,6 +256,7 @@
     "max_restarts": "Največje število ponovnih zagonov po sesutju v 30 s, preden se poskušanje opusti (privzeto: 2)",
     "tray": "Zaženi v sistemski vrstici (samo za namizne sisteme, po izbiri)",
     "no_tray": "Onemogoči ikono sistemske vrstice",
+    "ready_timeout": "Časovna omejitev preverjanja pripravljenosti v ms (tudi OMNIROUTE_READY_TIMEOUT_MS, privzeto 60000)",
     "tls_cert": "Pot do potrdila TLS (PEM) za streženje prek HTTPS (tudi OMNIROUTE_TLS_CERT)",
     "tls_key": "Pot do zasebnega ključa TLS (PEM) za streženje prek HTTPS (tudi OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "Strežnik MCP deluje ({transport})",
     "stopped": "Strežnik MCP je ustavljen.",
     "restarted": "Strežnik MCP je znova zagnan.",
+    "stoppedHint": "Za vklop zaženite `omniroute mcp enable`.",
+    "enabled": "Strežnik MCP je omogočen.",
+    "disabled": "Strežnik MCP je onemogočen.",
+    "enable": {
+      "description": "Omogoči strežnik MCP",
+      "transport": "Prenos, ki naj se uporabi: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Onemogoči strežnik MCP"
+    },
     "call": {
       "description": "Neposredno prikliči orodje MCP",
       "args": "Objekt argumentov JSON (v vrstici)",

bin/cli/locales/sr.json

@@ -256,6 +256,7 @@
     "max_restarts": "Maksimalan broj ponovnih pokretanja pri padu u toku 30s pre odustajanja (podrazumevano: 2)",
     "tray": "Покретање у системској траци (само десктоп, опционо)",
     "no_tray": "Онемогући икону у системској траци",
+    "ready_timeout": "Временско ограничење провере спремности у ms (такође OMNIROUTE_READY_TIMEOUT_MS, подразумевано 60000)",
     "tls_cert": "Путања до TLS сертификата (PEM) за HTTPS (такође OMNIROUTE_TLS_CERT)",
     "tls_key": "Путања до TLS приватног кључа (PEM) за HTTPS (такође OMNIROUTE_TLS_KEY)"
   },
@@ -300,7 +301,7 @@
     "description": "Провери здравље сервера и статус компоненти",
     "noServer": "Сервер није покренут. Покрените са: omniroute serve",
     "title": "Здравље",
-    "status": "Status: {status}",
+    "status": "Статус: {status}",
     "uptime": "Vreme rada: {uptime}",
     "requests": "Zahtevi (24h): {count}",
     "cost": "Trošak (24h): ${cost}"
@@ -347,6 +348,16 @@
     "running": "MCP server je pokrenut ({transport})",
     "stopped": "MCP server je zaustavljen.",
     "restarted": "MCP server je ponovo pokrenut.",
+    "stoppedHint": "Покрените `omniroute mcp enable` да бисте га укључили.",
+    "enabled": "MCP сервер је омогућен.",
+    "disabled": "MCP сервер је онемогућен.",
+    "enable": {
+      "description": "Омогући MCP сервер",
+      "transport": "Протокол за пренос: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Онемогући MCP сервер"
+    },
     "call": {
       "description": "Direktno pozovi MCP alat",
       "args": "JSON objekat argumenata (inline)",
@@ -810,7 +821,7 @@
     }
   },
   "program": {
-    "description": "OmniRoute — Smart AI Router with Auto Fallback",
+    "description": "OmniRoute — паметни AI рутер са аутоматским пребацивањем на резервну опцију",
     "version": "Прикажи верзију и изађи",
     "output": "Формат излаза (table, json, jsonl, csv)",
     "quiet": "Сакрий небитан излаз",

bin/cli/locales/uz.json

@@ -256,6 +256,7 @@
     "max_restarts": "Taslim bo‘lishdan oldin 30 soniya ichidagi nosozlikdan keyingi qayta ishga tushirishlarning maksimal soni (standart: 2)",
     "tray": "Tizim treyida ishga tushirish (faqat ish stoli versiyasida, ixtiyoriy)",
     "no_tray": "Tizim treyi belgisini o‘chirish",
+    "ready_timeout": "Tayyorlik tekshiruvi uchun kutish vaqti, ms (shuningdek OMNIROUTE_READY_TIMEOUT_MS, standart qiymat 60000)",
     "tls_cert": "HTTPS orqali xizmat ko‘rsatish uchun TLS sertifikati (PEM) yo‘li (shuningdek, OMNIROUTE_TLS_CERT)",
     "tls_key": "HTTPS orqali xizmat ko‘rsatish uchun TLS maxfiy kaliti (PEM) yo‘li (shuningdek, OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "MCP serveri ishlamoqda ({transport})",
     "stopped": "MCP serveri toʻxtatildi.",
     "restarted": "MCP serveri qayta ishga tushirildi.",
+    "stoppedHint": "Uni yoqish uchun `omniroute mcp enable` buyrugʻini ishga tushiring.",
+    "enabled": "MCP serveri yoqildi.",
+    "disabled": "MCP serveri oʻchirildi.",
+    "enable": {
+      "description": "MCP serverini yoqish",
+      "transport": "Foydalaniladigan transport: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "MCP serverini oʻchirish"
+    },
     "call": {
       "description": "MCP vositasini bevosita chaqirish",
       "args": "JSON argumentlar obyekti (ichki)",

bin/cli/locales/yo.json

@@ -256,6 +256,7 @@
     "max_restarts": "Iye ìtunbẹ̀rẹ̀ lẹ́yìn ìkọ̀lù tó pọ̀ jù láàárín 30s kí ó tó jáwọ́ (àìyípadà: 2)",
     "tray": "Bẹ̀rẹ̀ nínú atẹ eto (dẹ́sítọ́ọ̀pù nìkan, àṣàyàn ni)",
     "no_tray": "Pa àmì atẹ eto rẹ́",
+    "ready_timeout": "Àkókò ìdádúró tó pọ̀ jù fún àyẹ̀wò ìmúrasílẹ̀ ní ms (bákan náà OMNIROUTE_READY_TIMEOUT_MS, àìyípadà 60000)",
     "tls_cert": "Ọ̀nà sí ìwé-ẹ̀rí TLS kan (PEM) láti pèsè HTTPS (bákan náà OMNIROUTE_TLS_CERT)",
     "tls_key": "Ọ̀nà sí kọ́kọ́rọ́ àdáni TLS (PEM) láti pèsè HTTPS (bákan náà OMNIROUTE_TLS_KEY)"
   },
@@ -347,6 +348,16 @@
     "running": "Olùpín MCP ń ṣiṣẹ́ ({transport})",
     "stopped": "Olùpín MCP ti dá iṣẹ́ dúró.",
     "restarted": "A ti tún olùpín MCP bẹ̀rẹ̀.",
+    "stoppedHint": "Ṣe `omniroute mcp enable` láti mú un ṣiṣẹ́.",
+    "enabled": "A ti mú olupin MCP ṣiṣẹ́.",
+    "disabled": "A ti pa olupin MCP.",
+    "enable": {
+      "description": "Mú olupin MCP ṣiṣẹ́",
+      "transport": "Ọ̀nà ìgbéṣùmọ̀ tí a ó lò: stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "Pa olupin MCP"
+    },
     "call": {
       "description": "Pe ohun èlò MCP kan ní tààrà",
       "args": "Ohun àríyànjiyàn JSON (níbẹ̀-níbẹ̀)",

bin/cli/locales/zh-CN.json

@@ -14,18 +14,6 @@
     "jsonOpt": "以 JSON 格式输出",
     "yesOpt": "跳过确认"
   },
-  "program": {
-    "description": "OmniRoute — 具有自动故障转移的智能 AI 路由器",
-    "version": "打印版本并退出",
-    "output": "输出格式（table, json, jsonl, csv）",
-    "quiet": "禁止非必要输出",
-    "no_color": "禁用彩色输出",
-    "timeout": "HTTP 请求超时（毫秒）",
-    "api_key": "OmniRoute 服务器的 API 密钥",
-    "base_url": "OmniRoute 服务器的基础 URL",
-    "context": "此命令使用的服务器上下文/配置文件",
-    "lang": "设置 CLI 显示语言（覆盖 OMNIROUTE_LANG）"
-  },
   "setup": {
     "title": "OmniRoute 设置",
     "passwordPrompt": "管理员密码",
@@ -145,6 +133,20 @@
       "listTitle": "{days} 天内过期的密钥："
     }
   },
+  "authExport": {
+    "description": "导出已解密的提供者凭据（仅限本地，明文输出）",
+    "idOpt": "仅导出与此 id/名称/提供者匹配的连接",
+    "formatOpt": "输出格式：json 或 env",
+    "outOpt": "将输出写入文件而非标准输出（以 0600 权限写入）",
+    "forceOpt": "确认你了解此操作会打印/写入明文密钥",
+    "warning": "⚠ 此操作会打印/写入已解密的明文 API 密钥和 OAuth 令牌。请确保你的屏幕、shell 历史记录以及任何输出文件保持私密。",
+    "confirmHeading": "⚠ 警告：此操作会以明文导出已解密的提供者凭据",
+    "confirmBody": "此命令会为所选连接解密并打印/写入 apiKey、accessToken、refreshToken 和\nidToken。请将输出视为机密。",
+    "confirmFooter": "如需确认，请运行：\n  omniroute auth export --force",
+    "missingKey": "导出凭据需要 STORAGE_ENCRYPTION_KEY。",
+    "notFound": "未找到连接：{id}",
+    "invalidFormat": "无效格式：{format}。请使用 json 或 env。"
+  },
   "stream": {
     "description": "使用 SSE 检查模式流式传输聊天响应",
     "file": "从文件读取提示",
@@ -254,6 +256,7 @@
     "max_restarts": "30 秒内的最大崩溃重启次数（默认：2）",
     "tray": "显示系统托盘图标（仅桌面，选择加入）",
     "no_tray": "禁用系统托盘图标",
+    "ready_timeout": "就绪探测超时（毫秒）（也可用 OMNIROUTE_READY_TIMEOUT_MS，默认 60000）",
     "tls_cert": "用于提供 HTTPS 服务的 TLS 证书（PEM）路径（也可用 OMNIROUTE_TLS_CERT）",
     "tls_key": "用于提供 HTTPS 服务的 TLS 私钥（PEM）路径（也可用 OMNIROUTE_TLS_KEY）"
   },
@@ -301,7 +304,7 @@
     "status": "状态：{status}",
     "uptime": "运行时间：{uptime}",
     "requests": "请求数（24h）：{count}",
-    "cost": "成本（24h）："
+    "cost": "成本（24h）：${cost}"
   },
   "quota": {
     "description": "显示提供者配额使用情况",
@@ -345,6 +348,16 @@
     "running": "MCP 服务器正在运行（{transport}）",
     "stopped": "MCP 服务器已停止。",
     "restarted": "MCP 服务器已重启。",
+    "stoppedHint": "运行 `omniroute mcp enable` 以启用它。",
+    "enabled": "MCP 服务器已启用。",
+    "disabled": "MCP 服务器已禁用。",
+    "enable": {
+      "description": "启用 MCP 服务器",
+      "transport": "要使用的传输方式：stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "禁用 MCP 服务器"
+    },
     "call": {
       "description": "直接调用 MCP 工具",
       "args": "JSON 参数对象（内联）",
@@ -807,6 +820,18 @@
       "event": "要模拟的事件类型（默认：request.completed）"
     }
   },
+  "program": {
+    "description": "OmniRoute — 具有自动故障转移的智能 AI 路由器",
+    "version": "打印版本并退出",
+    "output": "输出格式（table, json, jsonl, csv）",
+    "quiet": "禁止非必要输出",
+    "no_color": "禁用彩色输出",
+    "timeout": "HTTP 请求超时（毫秒）",
+    "api_key": "OmniRoute 服务器的 API 密钥",
+    "base_url": "OmniRoute 服务器的基础 URL",
+    "context": "此命令使用的服务器上下文/配置文件",
+    "lang": "设置 CLI 显示语言（覆盖 OMNIROUTE_LANG）"
+  },
   "files": {
     "description": "管理文件（上传、列出、获取、下载、删除）",
     "list": {
@@ -907,6 +932,11 @@
       "model": "按模型筛选"
     }
   },
+  "radar": {
+    "description": "检查并同步本地 Radar 目录订阅源",
+    "status": "显示本地 Radar 设置和订阅源缓存状态",
+    "sync": "通过本地服务器同步目录、推荐、优惠和 Intel"
+  },
   "resilience": {
     "description": "检查和管理弹性机制",
     "status": {
@@ -1234,8 +1264,8 @@
     "description": "管理 OmniRoute 开机自启（Linux：systemd 用户服务）",
     "enable": "启用开机自启",
     "disable": "禁用开机自启",
-    "status": "显示自启状态",
-    "toggle": "切换开机自启"
+    "toggle": "切换开机自启",
+    "status": "显示自启状态"
   },
   "runtime": {
     "description": "管理本地运行时依赖",
@@ -1262,25 +1292,6 @@
     "update": "更新已安装的插件",
     "scaffold": "搭建新的插件模板"
   },
-  "authExport": {
-    "description": "导出已解密的提供者凭据（仅限本地，明文输出）",
-    "idOpt": "仅导出与此 id/名称/提供者匹配的连接",
-    "formatOpt": "输出格式：json 或 env",
-    "outOpt": "将输出写入文件而非标准输出（以 0600 权限写入）",
-    "forceOpt": "确认你了解此操作会打印/写入明文密钥",
-    "warning": "⚠ 此操作会打印/写入已解密的明文 API 密钥和 OAuth 令牌。请确保你的屏幕、shell 历史记录以及任何输出文件保持私密。",
-    "confirmHeading": "⚠ 警告：此操作会以明文导出已解密的提供者凭据",
-    "confirmBody": "此命令会为所选连接解密并打印/写入 apiKey、accessToken、refreshToken 和\nidToken。请将输出视为机密。",
-    "confirmFooter": "如需确认，请运行：\n  omniroute auth export --force",
-    "missingKey": "导出凭据需要 STORAGE_ENCRYPTION_KEY。",
-    "notFound": "未找到连接：{id}",
-    "invalidFormat": "无效格式：{format}。请使用 json 或 env。"
-  },
-  "radar": {
-    "description": "检查并同步本地 Radar 目录订阅源",
-    "status": "显示本地 Radar 设置和订阅源缓存状态",
-    "sync": "通过本地服务器同步目录、推荐、优惠和 Intel"
-  },
   "launch": {
     "description": "启动指向 OmniRoute 的 Claude Code（本地或远程，使用 --profile）",
     "token": "Claude 客户端应发送的令牌（ANTHROPIC_AUTH_TOKEN）",

bin/cli/locales/zh-TW.json

@@ -14,18 +14,6 @@
     "jsonOpt": "以 JSON 格式輸出",
     "yesOpt": "跳過確認"
   },
-  "program": {
-    "description": "OmniRoute — 具有自動故障轉移的智慧 AI 路由器",
-    "version": "列印版本並退出",
-    "output": "輸出格式（table, json, jsonl, csv）",
-    "quiet": "禁止非必要輸出",
-    "no_color": "停用彩色輸出",
-    "timeout": "HTTP 請求超時（毫秒）",
-    "api_key": "OmniRoute 伺服器的 API 金鑰",
-    "base_url": "OmniRoute 伺服器的基礎 URL",
-    "context": "此命令使用的伺服器上下文/配置檔案",
-    "lang": "設定 CLI 顯示語言（覆蓋 OMNIROUTE_LANG）"
-  },
   "setup": {
     "title": "OmniRoute 設定",
     "passwordPrompt": "管理員密碼",
@@ -145,6 +133,20 @@
       "listTitle": "{days} 天內過期的金鑰："
     }
   },
+  "authExport": {
+    "description": "匯出已解密的提供者憑據（僅限本機，明文輸出）",
+    "idOpt": "僅匯出與此 id/名稱/提供者相符的連線",
+    "formatOpt": "輸出格式：json 或 env",
+    "outOpt": "將輸出寫入檔案而非標準輸出（以 0600 權限寫入）",
+    "forceOpt": "確認你了解此操作會列印/寫入明文密鑰",
+    "warning": "⚠ 此操作會列印/寫入已解密的明文 API 金鑰和 OAuth 令牌。請確保你的螢幕、shell 歷史記錄以及任何輸出檔案保持私密。",
+    "confirmHeading": "⚠ 警告：此操作會以明文匯出已解密的提供者憑據",
+    "confirmBody": "此命令會為所選連線解密並列印/寫入 apiKey、accessToken、refreshToken 和\nidToken。請將輸出視為機密。",
+    "confirmFooter": "如需確認，請執行：\n  omniroute auth export --force",
+    "missingKey": "匯出憑據需要 STORAGE_ENCRYPTION_KEY。",
+    "notFound": "找不到連線：{id}",
+    "invalidFormat": "無效格式：{format}。請使用 json 或 env。"
+  },
   "stream": {
     "description": "使用 SSE 檢查模式流式傳輸聊天響應",
     "file": "從檔案讀取提示",
@@ -254,6 +256,7 @@
     "max_restarts": "30 秒內的最大崩潰重啟次數（預設：2）",
     "tray": "顯示系統托盤圖示（僅桌面，選擇加入）",
     "no_tray": "停用系統托盤圖示",
+    "ready_timeout": "就緒探測逾時（毫秒）（也可用 OMNIROUTE_READY_TIMEOUT_MS，預設 60000）",
     "tls_cert": "用於提供 HTTPS 服務的 TLS 憑證（PEM）路徑（也可用 OMNIROUTE_TLS_CERT）",
     "tls_key": "用於提供 HTTPS 服務的 TLS 私鑰（PEM）路徑（也可用 OMNIROUTE_TLS_KEY）"
   },
@@ -301,7 +304,7 @@
     "status": "狀態：{status}",
     "uptime": "執行時間：{uptime}",
     "requests": "請求數（24h）：{count}",
-    "cost": "成本（24h）："
+    "cost": "成本（24h）：${cost}"
   },
   "quota": {
     "description": "顯示提供者配額使用情況",
@@ -345,6 +348,16 @@
     "running": "MCP 伺服器正在執行（{transport}）",
     "stopped": "MCP 伺服器已停止。",
     "restarted": "MCP 伺服器已重啟。",
+    "stoppedHint": "執行 `omniroute mcp enable` 以啟用它。",
+    "enabled": "MCP 伺服器已啟用。",
+    "disabled": "MCP 伺服器已停用。",
+    "enable": {
+      "description": "啟用 MCP 伺服器",
+      "transport": "要使用的傳輸方式：stdio|sse|streamable-http"
+    },
+    "disable": {
+      "description": "停用 MCP 伺服器"
+    },
     "call": {
       "description": "直接呼叫 MCP 工具",
       "args": "JSON 引數物件（內聯）",
@@ -807,6 +820,18 @@
       "event": "要模擬的事件型別（預設：request.completed）"
     }
   },
+  "program": {
+    "description": "OmniRoute — 具有自動故障轉移的智慧 AI 路由器",
+    "version": "列印版本並退出",
+    "output": "輸出格式（table, json, jsonl, csv）",
+    "quiet": "禁止非必要輸出",
+    "no_color": "停用彩色輸出",
+    "timeout": "HTTP 請求超時（毫秒）",
+    "api_key": "OmniRoute 伺服器的 API 金鑰",
+    "base_url": "OmniRoute 伺服器的基礎 URL",
+    "context": "此命令使用的伺服器上下文/配置檔案",
+    "lang": "設定 CLI 顯示語言（覆蓋 OMNIROUTE_LANG）"
+  },
   "files": {
     "description": "管理檔案（上傳、列出、獲取、下載、刪除）",
     "list": {
@@ -907,6 +932,11 @@
       "model": "按模型篩選"
     }
   },
+  "radar": {
+    "description": "檢查並同步本機 Radar 目錄訂閱來源",
+    "status": "顯示本機 Radar 設定和訂閱來源快取狀態",
+    "sync": "透過本機伺服器同步目錄、推薦、優惠和 Intel"
+  },
   "resilience": {
     "description": "檢查和管理彈性機制",
     "status": {
@@ -1234,8 +1264,8 @@
     "description": "管理 OmniRoute 開機自啟（Linux：systemd 使用者服務）",
     "enable": "啟用開機自啟",
     "disable": "停用開機自啟",
-    "status": "顯示自啟狀態",
-    "toggle": "切換開機自啟"
+    "toggle": "切換開機自啟",
+    "status": "顯示自啟狀態"
   },
   "runtime": {
     "description": "管理本地執行時依賴",
@@ -1262,25 +1292,6 @@
     "update": "更新已安裝的外掛",
     "scaffold": "搭建新的外掛模板"
   },
-  "authExport": {
-    "description": "匯出已解密的提供者憑據（僅限本機，明文輸出）",
-    "idOpt": "僅匯出與此 id/名稱/提供者相符的連線",
-    "formatOpt": "輸出格式：json 或 env",
-    "outOpt": "將輸出寫入檔案而非標準輸出（以 0600 權限寫入）",
-    "forceOpt": "確認你了解此操作會列印/寫入明文密鑰",
-    "warning": "⚠ 此操作會列印/寫入已解密的明文 API 金鑰和 OAuth 令牌。請確保你的螢幕、shell 歷史記錄以及任何輸出檔案保持私密。",
-    "confirmHeading": "⚠ 警告：此操作會以明文匯出已解密的提供者憑據",
-    "confirmBody": "此命令會為所選連線解密並列印/寫入 apiKey、accessToken、refreshToken 和\nidToken。請將輸出視為機密。",
-    "confirmFooter": "如需確認，請執行：\n  omniroute auth export --force",
-    "missingKey": "匯出憑據需要 STORAGE_ENCRYPTION_KEY。",
-    "notFound": "找不到連線：{id}",
-    "invalidFormat": "無效格式：{format}。請使用 json 或 env。"
-  },
-  "radar": {
-    "description": "檢查並同步本機 Radar 目錄訂閱來源",
-    "status": "顯示本機 Radar 設定和訂閱來源快取狀態",
-    "sync": "透過本機伺服器同步目錄、推薦、優惠和 Intel"
-  },
   "launch": {
     "description": "啟動指向 OmniRoute 的 Claude Code（本機或遠端，使用 --profile）",
     "token": "Claude 用戶端應傳送的令牌（ANTHROPIC_AUTH_TOKEN）",

bin/cli/runtime/processSupervisor.mjs

@@ -14,6 +14,7 @@ import { stopProcessGracefully } from "../../../src/shared/platform/windowsProce
 import {
   isFatalInstrumentationHookFailure,
   formatAndroidInstrumentationFailureHint,
+  isFatalStartupDiagnostic,
 } from "../utils/ensureAndroidCacheDir.mjs";
 
 const CRASH_LOG_LINES = 50;
@@ -55,12 +56,14 @@ export class ServerSupervisor {
     this.child = null;
     this.isShuttingDown = false;
     this.instrumentationFailureHintPrinted = false;
+    this.fatalStartupDiagnosticPrinted = false;
   }
 
   start() {
     this.startedAt = Date.now();
     this.crashLog = [];
     this.instrumentationFailureHintPrinted = false;
+    this.fatalStartupDiagnosticPrinted = false;
 
     const showLog = process.env.OMNIROUTE_SHOW_LOG === "1";
     // #6321: stdout used to be discarded (`"ignore"`) whenever `--log`/OMNIROUTE_SHOW_LOG
@@ -99,6 +102,15 @@ export class ServerSupervisor {
           )
         );
       }
+      // #13314: surface any `[STARTUP] Fatal:`-guarded boot diagnostic
+      // immediately, even without --log — otherwise it is only buffered and
+      // reaches the operator on exit/crash, which never happens when the
+      // HTTP listener still comes up after the fatal failure (every route
+      // then 500s with zero visible diagnostic anywhere).
+      if (!this.fatalStartupDiagnosticPrinted && isFatalStartupDiagnostic(text)) {
+        this.fatalStartupDiagnosticPrinted = true;
+        process.stderr.write(text.endsWith("\n") ? text : `${text}\n`);
+      }
     };
 
     if (this.child.stdout) {

bin/cli/utils/ensureAndroidCacheDir.mjs

@@ -105,6 +105,27 @@ export function isFatalInstrumentationHookFailure(text) {
   return /Unsupported platform:\s*android/i.test(text);
 }
 
+/**
+ * Detect any fatal boot-time diagnostic guarded by the `[STARTUP] Fatal:`
+ * prefix (`src/instrumentation-node.ts::ensureDbReadyForBoot()`,
+ * `src/instrumentation.ts::register()`, and any future guard using the same
+ * marker). #13314: in the default `omniroute serve` mode (no `--log`),
+ * `ServerSupervisor` only buffers stdout/stderr and flushes it to the real
+ * console on exit/crash/readiness-timeout — so if the HTTP listener still
+ * comes up after a fatal boot diagnostic was already printed (e.g. the
+ * better-sqlite3 / node:sqlite driver cascade failing hard), the operator
+ * sees "OmniRoute is running!" with zero visible diagnostic anywhere, and
+ * every route 500s. This generalizes the #10028 Android/Termux carve-out to
+ * every `[STARTUP] Fatal:` guard, not just that one platform-specific string.
+ *
+ * @param {string} text
+ * @returns {boolean}
+ */
+export function isFatalStartupDiagnostic(text) {
+  if (!text) return false;
+  return /^\[STARTUP\] Fatal:/m.test(text);
+}
+
 /**
  * Operator-facing hint when that instrumentation failure shows up in child
  * output — defense in depth if prep was skipped or a future Next.js probe

changelog.d/features/13578-proxy-skip-recently-failed.md

@@ -0,0 +1 @@
+- **feat(proxies):** proxy pools and opencode's per-account rotation stop re-serving a proxy that just failed (refused TCP probe, or a 429 through it) for a period that doubles on each repeat up to a cap, without writing any proxy status; with every candidate set aside the choice is unchanged. Opt-in via the `PROXY_SKIP_RECENTLY_FAILED` feature flag (default off: selection unchanged) ([#13578](https://github.com/diegosouzapw/OmniRoute/pull/13578)) — thanks @maxmad64bis

changelog.d/features/13580-proxy-log-upstream-status.md

@@ -0,0 +1 @@
+- **feat(proxy-logs):** proxy log rows keep the HTTP status the provider actually returned (`upstream_status`, null when no response arrived), so a throttled egress IP (429), a refused one (403) and a provider outage (500) are no longer the same "error" line, and a 429 generated locally is no longer mistaken for one from the provider ([#13580](https://github.com/diegosouzapw/OmniRoute/pull/13580)) — thanks @maxmad64bis

changelog.d/features/13581-pool-egress-observation.md

@@ -0,0 +1 @@
+- **feat(proxies):** the proxy pool editor shows, for the last 24 h, how many distinct egress IPs actually served the pool's members, how many connections went through them and the most seen behind one IP, read from the proxy log through a separate route so it can never break the pool screen; opt-in with the `PROXY_POOL_EGRESS_OBSERVATION` feature flag (default off) ([#13581](https://github.com/diegosouzapw/OmniRoute/pull/13581)) — thanks @maxmad64bis

changelog.d/features/13602-pool-skips-refused-member.md

@@ -0,0 +1 @@
+- **feat(proxies):** a proxy pool stops re-serving a member the provider just refused through it and tries another member instead, reusing the existing skip cooldown; a later success through the member clears it. Opt-in with the `PROXY_SKIP_RECENTLY_FAILED` feature flag (default off: pool selection unchanged) ([#13602](https://github.com/diegosouzapw/OmniRoute/pull/13602)) — thanks @maxmad64bis

changelog.d/features/13717-db-healthcheck-startup-deferred-flag.md

@@ -0,0 +1 @@
+- **feat(flags):** add `DB_HEALTHCHECK_STARTUP_DEFERRED_ENABLED` (default off) — opt-in deferral of the startup DB health/integrity check past process boot via `setImmediate`; off keeps the pre-#13717 behavior of blocking `getDbInstance()` until the check has already run (#13717).

changelog.d/features/13886-site-retranslate.md

@@ -0,0 +1 @@
+- **feat(i18n):** `retranslate-site` rewrites the site catalogs' verbatim-English leaves (2,059 across 63 catalogs; mean English residue 10.3 % → 6.3 %, the rest being brand names kept on purpose). (#13886)

changelog.d/features/agnes-cn-provider.md

@@ -0,0 +1 @@
+- feat(providers): **Added Agnes AI (China) as `agnes-cn` pointed at `https://api.agnes-ai.cn/v1`. Keys issued for `apihub.agnes-ai.com` stay on the existing `agnes` card. Live `/v1/models` on that host lists `agnes-3.0-flash` (same id as intl); the CN seed matches 2.0/2.5/3.0 and not retired 1.5.**

changelog.d/features/xai-oauth-live-models.md

@@ -0,0 +1 @@
+- **feat(providers):** share the existing `api.x.ai/v1/models` discovery config with `xai-oauth` so SuperGrok OAuth connections pick up new Grok ids without a registry seed edit.

changelog.d/fixes/0000-files-batches-ownership-null-owner-anonymous-list.md

@@ -0,0 +1 @@
+- **fix(api):** `/v1/files` and `/v1/batches` now enforce one ownership rule everywhere — a dashboard session is the instance operator, an API key acts on its own records only, and a record with no owner is denied to every non-session caller. Previously a file or batch whose `api_key_id` was null (a dashboard-session or anonymous upload, or a batch artifact inheriting one) could be read, downloaded, deleted, cancelled or used as a batch input by any other key or by an unauthenticated caller (GHSA-2jm2-mpx8-6523), and `GET /v1/files` / `GET /v1/batches` returned every tenant's records to an anonymous or invalid-bearer caller under the default `REQUIRE_API_KEY=false` (GHSA-m3hp-hq9g-fpmv) — both lists now fail closed with a `401`, and only a dashboard session without a key reads the whole instance. The same shared rule lets the dashboard cancel any batch, not just unowned ones. Behaviour change: the anonymous upload → batch → download flow no longer works without an API key, since a null owner cannot be attributed. Subsumes [#13683](https://github.com/diegosouzapw/OmniRoute/pull/13683) — thanks @hartmark

changelog.d/fixes/0000-jwt-bootstrap-chain-real-peer-loopback.md

@@ -0,0 +1 @@
+- **fix(auth):** closed the JWT_SECRET bootstrap chain (GHSA-7pq4-8pvv-rx7r). The fresh-install bootstrap gate in `isAuthRequired()` now decides "loopback" from the trusted peer — the token-stamped real TCP peer the custom server writes, the pipeline's own locality verdict, or a real socket — and never from the client-controlled `Host` / `nextUrl.hostname` whenever a stamping server is in front (every supported runtime), so `Host: localhost` from a remote address no longer opens the window; the anonymous first-password write (`POST /api/settings/require-login`) is under the same loopback constraint instead of being open to every network peer, and `managementPolicy` hands its `peerContext` verdict down explicitly. `/api/settings/obsidian` (incl. `/webdav`, which mints reusable WebDAV Basic credentials for a caller-chosen root served before Next.js) joined `ALWAYS_PROTECTED_API_PATHS`, and `enableObsidianVaultSync()` refuses a vault that is, sits inside, or contains the data directory (realpath-resolved), so the WebDAV file service can no longer be pointed at `server.env` / `storage.sqlite`

changelog.d/fixes/12370-responses-function-call-name.md

@@ -0,0 +1 @@
+- fix(api): restore the `name` field on non-streaming `/v1/responses` `function_call` output items — a plain (non-namespace) tool call's identity restore was blindly applying the `_toolNameMap` alias-table fallback as a `{namespace, name}` object, silently blanking `name` to `undefined` (dropped entirely by JSON.stringify) and leaving Codex unable to dispatch the call, so it re-narrated its intent in a loop instead (#12370)

changelog.d/fixes/12453-conversation-turn-nodes-retention.md

@@ -0,0 +1 @@
+- **fix(db):** give `conversation_turn_nodes` its own independent retention knob (`retention.conversationTurnNodes`, default 30 days — matching `callLogs` so upgrading changes nothing until an operator overrides it) instead of sharing `callLogs`, and sweep orphaned `agentic_conversations` after the nodes expire (#12453).

changelog.d/fixes/12491-codex-wreq-standalone-runtime.md

@@ -0,0 +1 @@
+- **fix(sse):** Codex WebSocket transport (including the app-server) no longer fails to load in the Next.js standalone Docker runtime — the wreq-js loader now resolves its module name dynamically instead of a literal Turbopack could rewrite to an unreachable build-time symlink (#12491) — thanks @marshalfevzi