@rabbi696/ezrouter 0.5.75 → 0.5.77

package/app/CHANGELOG.md

@@ -1,3 +1,51 @@
+# v0.5.77 (2026-08-23)
+
+## Features & Enhancements (PRs #3534–#3584)
+- **Qoder Multimodal & Frontier Model Refresh (#3555)**:
+  - Added support for `Qwen3.8-Max (qmodel_38max)`, `GLM-5.3 (gmodel)`, and `Lite` models.
+  - Implemented full multimodal vision pass-through for Qoder (`image_url`, base64 Data URIs, and automatic conversion of Claude-style base64 image blocks into standard data URIs).
+  - Added complete 1M token context window capability and reasoning parameter mappings.
+- **Quota Safety Buffer & Account Pause (#3584)**:
+  - Added configurable per-window pause threshold buffer in Provider Limits and Edit Connection modal (`quotaPauseThresholds`).
+  - Automatically transitions low-quota connections to `Paused (quota)` state before complete depletion to seamlessly route traffic to backup accounts.
+  - Added `Paused (quota)` status badges in Connection Rows and Provider Limits cards.
+- **Progressive Tool Disclosure (#3575)**:
+  - Implemented static MCP tool schema filtering and BM25 relevance ranking for heavy MCP server sessions, reducing per-turn schema token overhead by 60%–75%.
+  - Added dashboard toggles in Token Saver for *Filter MCP tool schemas* and *BM25 tool relevance* with configurable `maxTools` threshold.
+- **Grok CLI Reasoning Support (#3540)**:
+  - Added `reasoning.effort` parameter forwarding for Grok 4.6 (`grok-4.6`, `grok-4.6-xhigh`, `grok-4.6-low`, etc.).
+- **Self-Hosted Provider Endpoints (#3539)**:
+  - Added configurable `Base URL` input fields in Add API Key modal for self-hosted TTS, STT, and Embedding connections (preventing unintended localhost loopback in Docker).
+- **Groq Model Catalog (#3558)**:
+  - Replaced decommissioned Groq models and added dynamic `modelsFetcher` support.
+
+## Stability & Bug Fixes (PRs #3534–#3560)
+- **Combo & Streaming Failover**:
+  - **Empty Stream Failover (#3560)**: Automatically falls back to the next combo account when an upstream provider returns HTTP 200 with an empty or keepalive-only stream (`peekStreamForContent`).
+  - **TTFT Watchdog (#3556)**: Added 30s time-to-first-token watchdog timer to detect and abort stalled upstream streams before the first byte arrives.
+  - **Stream Abort Usage Recording (#3542)**: Accurately records partial token usage in SQLite database (`STREAM USAGE (aborted)`) when client aborts mid-stream.
+  - **Ollama NDJSON & Responses Single Decoder (#3546, #3547)**: Resolved split multi-byte UTF-8 character corruption across network chunk boundaries by enforcing single stream decoders.
+  - **CommandCode Error Role (#3549)**: Wrapped CommandCode stream error chunk in `assistant` role for client compatibility.
+  - **Multi-Endpoint Transport Routing (#3538)**: Synchronized outbound request wire format with matching transport endpoint (`resolveUpstreamRoute`).
+- **Memory, Session & Process Lifecycle**:
+  - **OAuth Server & Timer Leak Fix (#3543)**: Resolved unhandled error cases in local OAuth callback servers, eliminating port locks (EADDRINUSE) and orphaned 100ms interval timers.
+  - **Session Store LRU Eviction (#3550)**: Fixed session cache eviction to drop Least-Recently-Used (LRU) sessions instead of oldest inserted connections, preserving active session continuity.
+  - **Usage Millisecond Deduplication (#3544)**: Prevented dropping legitimate concurrent requests that arrive within the exact same millisecond.
+  - **Quota Countdown Single-Timer (#3537)**: Unified auto-refresh and countdown timers to prevent double-speed countdowns during tab visibility changes.
+  - **Database SIGINT/SIGTERM Graceful Exit (#3551)**: Configured `sql.js` adapter to persist dirty database state and exit cleanly on shutdown signals.
+  - **Headroom Safe Process Spawning (#3534)**: Replaced `execSync` with `execFileSync` in python candidate detection to prevent command injection and issues with paths containing spaces.
+  - **Connection Testing Deadlines (#3552, #3553)**: Enforced 10s/15s timeout deadlines via `fetchWithTimeout` across provider validation routes to prevent indefinite socket hangs.
+
+---
+
+# v0.5.76 (2026-08-23)
+
+## Fixes
+- **Dashboard & Middleware Initialization**:
+  - Restored self-generating `jwt-secret` file persistence (`~/.ezrouter/jwt-secret`) in `dashboardSession.js` when `JWT_SECRET` environment variable is not explicitly provided in production/CLI mode. Resolves HTTP 500 Internal Server Error on `/dashboard` and dashboard routes.
+
+---
+
 # v0.5.75 (2026-08-23)
 
 ## Security & Upstream Hardening (GHSA Fixes #3496–#3503)
@@ -27,6 +75,8 @@
   - Implemented atomic publishing for sql.js database files (#3523).
   - Refused to clobber Codex and GitHub Copilot configuration files when existing configs cannot be parsed (#3524, #3525).
 
+---
+
 # v0.5.74 (2026-08-22)
 
 ## Features & Improvements
@@ -91,771 +141,3 @@
 
 ## Internal
 - Version bump and packaging sync for CLI release
-
----
-
-# v0.5.70 (2026-08-22)
-
-## Internal
-- Version bump and packaging sync for CLI release
-
----
-
-# v0.5.66 (2026-08-21)
-
-## Internal
-- Version bump and snapshot alignment for provider registry additions
-
----
-
-# v0.5.65 (2026-08-21)
-
-## Features & Improvements
-- **Dashboard (Usage & Analytics)**: Optimized Provider Topology chart
-  - Removed top filter bar (`Models: ON / AUTO / OFF`, `Providers`, `All` buttons) for a cleaner UI
-  - Increased default zoom-out view (`padding: 0.25`, `minZoom: 0.2`) so all provider nodes and connections are immediately visible
-  - Enhanced EzRouter center node styling and electric flow animation
-- **Performance**: Resolved page loading delays
-  - Parallelized API fetching on Input Guard (`/dashboard/convoy`) using `Promise.all()` to eliminate request waterfall
-  - Added in-memory caching to `/api/cli-tools/all-statuses` to reduce redundant filesystem checks during navigation
-- **Branding**: Complete EzRouter visual integration
-  - Updated CLI tray icon with crisp 32x32 EzRouter logo and "EzRouter" menu label
-  - Updated model topology center router icon and title
-  - Updated NPM package name in version checker to `@rabbi696/ezrouter` to prevent timeout
-
----
-
-# v0.5.64 (2026-08-21)
-
-## Features & Upstream Sync
-- **Providers & Models**:
-  - Added `muse-spark-1.2-contributor` and `ox-alpha-free` to OpenCode-Go
-  - Added `muse-spark-1.2-contributor-free` and `x-preview-f-free` to OpenCode
-  - Added OpenAI-Responses transport support for OpenCode / OpenCode-Go
-- **Fixes**:
-  - Fixed cached token tracking fallback (`cached_tokens ?? usage.prompt_tokens_details?.cached_tokens`) (#3449)
-  - Fixed project ID fail-fast handling during onboarding without uncaught throw (#3452)
-  - Cleaned up token refresh scheduler project ID invalidation
-- **Database**:
-  - Migrated SQLite data to `~/.ezrouter/db/data.sqlite`
-  - Applied `VACUUM` and `PRAGMA optimize` for faster query execution
-
----
-
-# v0.5.63 (2026-08-21)
-
-## Internal
-- CLI build and packaging pipeline updates for `@rabbi696/ezrouter`
-- Verified binary launcher and hook integration
-
----
-
-# v0.5.62 (2026-08-21)
-
-## Breaking Changes
-- **Rebranding**: Complete rebrand from `9router` to `EzRouter` for independent operation
-  - Package name changed to `@rabbi696/ezrouter` on npm
-  - Binary command changed from `9router` to `ezrouter`
-  - Default port changed from `20128` to `20126`
-  - Data directory changed from `~/.9router` to `~/.ezrouter` (Windows: `%APPDATA%/ezrouter`)
-
-## Features
-- **Isolation**: Full runtime isolation to run alongside `9router` without conflicts
-  - Separate authentication cookies (`ezrouter_auth_token` vs `auth_token`)
-  - Separate MITM certificates (`EzRouter MITM Root CA` vs `9Router MITM Root CA`)
-  - Separate data directories and process management
-  - Separate ports (20126 vs 20128) for concurrent operation
-- **Branding**: Updated all user-facing branding to EzRouter
-  - Dashboard title, login screen, sidebar logo
-  - Browser page title and favicon
-  - CLI help text and error messages
-  - Removed upstream 9Remote and 9English sidebar links
-
-## Fixes
-- **Auth**: Fixed cross-logout issue between `9router` and `ezrouter` on localhost
-  - Renamed session cookie from `auth_token` to `ezrouter_auth_token`
-  - Both apps can now maintain separate login sessions on the same machine
-- **MITM**: Fixed MITM proxy conflict when both apps run simultaneously
-  - Changed default MITM router base from `http://localhost:20128` to `http://localhost:20126`
-  - Updated MITM Root CA name to `EzRouter MITM Root CA`
-  - Updated certificate filenames to `ezrouter-root-ca.crt`
-  - Changed hosts file temp filenames from `.9router.{new,bak}` to `.ezrouter.{new,bak}`
-- **Updater**: Fixed npm package name and install commands in auto-updater
-  - Changed from `9router` to `@rabbi696/ezrouter`
-  - Updated install command to `npm i -g @rabbi696/ezrouter@latest --prefer-online`
-
-## Documentation
-- **README**: Updated CLI README with correct paths and package name
-  - Fixed data location paths (`~/.ezrouter` instead of `~/.9router`)
-  - Updated Docker image references
-  - Changed npm install instructions to `@rabbi696/ezrouter`
-  - Updated homepage URL to `https://ezrouter.golamrabbi.dev`
-
-## Internal
-- **Package**: Updated CLI package metadata
-  - Changed package name to `@rabbi696/ezrouter`
-  - Updated homepage URL to `https://ezrouter.golamrabbi.dev`
-  - Updated description to reflect port 20126
-  - Removed `9router` binary alias from bin entry
-- **Database**: Updated all hardcoded path references
-  - Changed `~/.9router` to `~/.ezrouter` across codebase
-  - Updated SAML issuer default from `urn:9router:sp` to `urn:ezrouter:sp`
-  - Updated internal variable names and comments
-- **Branding**: Updated logo and visual identity
-  - Changed sidebar icon from material `hub` to `/logo.png` with `/favicon.svg` fallback
-  - Updated page title to "EzRouter - AI Infrastructure Management"
-  - Updated login screen branding and password reset hint text
-
----
-
-# v0.5.61 (2026-08-21)
-
-## Internal
-- Version bump for npm publish retry
-
----
-
-# v0.5.60 (2026-08-21)
-
-## Internal
-- Version bump for npm metadata update
-
----
-
-# v0.5.55 (2026-08-14)
-
-## Features
-- **Auth**: native SAML 2.0 SSO alongside OIDC — AuthnRequest generation, ACS
-  assertion handling, SP metadata export, admin config test, replay-protected
-  via a `saml_state` cookie matched against `InResponseTo`
-- **Providers**: add Alibaba Token Plan (`token-plan.ap-southeast-1`) — the
-  fourth Alibaba key type, Singapore-only and OpenAI-compatible transport only
-- **Providers**: add `glm-5.3` to GLM Coding and GLM (China)
-- **Providers**: Kimchi accepts API keys as well as OAuth (dual auth), with a
-  working Test Connection for both modes
-- **Antigravity**: add Gemini 3.7 Flash and its tiered high/medium/low variants
-  (also in the Gemini registry) with pricing and quota tracking
-- **TTS**: add Fish Audio — model id travels in an HTTP `model` header, voice
-  is a `reference_id` (preset or cloned voice model)
-- **OpenCode-Go**: route by request format via declared transports instead of
-  forcing every client into `/messages` — Codex/OpenAI clients no longer pay a
-  lossy Responses→OpenAI→Claude double translation. Per-model `supportedFormats`
-  guard; the bespoke executor is gone (its shared `_lastModel` cache could cross
-  auth headers between concurrent requests)
-- **Usage**: dedup + cache Claude quota calls (120s TTL keyed by access token,
-  in-flight promise dedup, last-good read on soft failure) to stop multiple
-  tabs tripping 429; manual refresh (↻) sends `force=1` to bypass the cache
-
-## Fixes
-- **Docker**: ship `sql.js` in the image so the pure-JS DB fallback can start —
-  file tracing carried the package's JS without `dist/sql-wasm.wasm`, so a
-  container with no native driver aborted with ENOENT and never got a database
-  (#3248)
-- **Usage**: read Gemini `usageMetadata` out of the antigravity `{ response }`
-  envelope — every non-streaming antigravity request logged `IN 0 | OUT 0`
-  (#3260)
-- **Claude**: re-anchor passthrough cache breakpoints — the client's own
-  `cache_control` markers point at pre-normalization offsets, so the tail was
-  re-cached every request. Last system block and last tool pinned at 1h TTL,
-  last assistant turn at 5m, mid-conversation system messages folded into the
-  neighbouring user turn instead of hoisted into `body.system`
-- **Combos**: detect images from Hermes and attachment payloads (`images[]`,
-  `experimental_attachments`, message-level `image_url`/`audio_url`, inline
-  `data:` URIs) so the Vision Adapter auto-switch fires for Hermes/Ollama/
-  Vercel AI SDK shapes
-- **Kiro**: intercept chat via `x-amz-target` — Kiro IDE 1.0.228+ moved
-  `GenerateAssistantResponse` to `POST /` + header, bypassing MITM. Also emit
-  the now-mandatory initial-response frame and map the `auto` model slot
-- **Kiro**: report real output tokens and stop discarding usable turns
-- **Qoder**: detect billing blocks at stream start and return a synthetic 403
-  so combo/account fallback triggers instead of leaking the error into chat
-- **Antigravity**: strip competitive system prompts (Zed IDE's Claude-agent
-  prompt) that Antigravity flags with a 429 Quota Exhausted
-- **OpenCode**: send the official client fingerprint on free-tier requests so
-  the Console stops classifying traffic as unidentified and rate-limiting it;
-  session id resolves conversation-stable to preserve prompt caching
-- **Responses**: don't close the message on an empty `tool_calls` array — some
-  providers attach one to every chunk, and the truthy check ended the message
-  on the first content token (#3234)
-- **Translator**: preserve `prompt_cache_key` when converting chat to responses
-- **Models**: expose snake_case token limits on `/v1/models`
-- **Combos**: strip `stream_options` from the Fusion panel fan-out to avoid a
-  DeepSeek 400 (#3024); raise the dashboard model-test probe budget to 1024 and
-  soft-pass reasoning-only responses (#3010)
-- **Headroom**: the toggle reflects the `headroomEnabled` setting even when the
-  proxy is down — it previously showed OFF while the engine kept calling
-  `/v1/compress`; proxy status stays visible via the status chip
-- **Hermes**: add the `api_key` parameter to the model block in YAML config
-- **Providers**: add llm7 to provider test support
-
-## Docs
-- **i18n**: add Spanish, French, and Brazilian Portuguese README translations
-
-## Security
-- **Real IP**: `x-9r-real-ip` and the Host fallback were trusted from
-  client-controlled headers whenever `custom-server.js` was not in the request
-  path (`npm run start`, `start:bun`), letting a remote caller pose as local to
-  skip API key auth and reach `LOCAL_ONLY_PATHS` (`/api/mcp/*`,
-  `/api/tunnel/enable`, `/api/auth/reset-password`). The server now stamps a
-  per-process `x-9r-peer-token` on every request it sanitizes and only trusts
-  `x-9r-real-ip` behind it — falling back to Host in development and failing
-  closed in production (GHSA-pjm4-8fpg-f9p6). Also fixes IPv6 loopback
-  detection (`::1`, `::ffff:127.0.0.1`) and routes `npm run start` /
-  `start:bun` through `custom-server.js`
-- **Search**: `resolveBaseUrl()` rejects client-supplied non-public baseUrls
-  (SSRF guard on `/v1/search`)
-- **Login**: fresh-install remote login with the default password returns 403
-  without issuing a JWT
-- **Usage**: `/api/usage/request-details` redacts request/response payloads
-
-# v0.5.50 (2026-08-05)
-
-## Features
-- **Providers**: add TokenRouter (300+ models via OpenAI-compatible gateway) with
-  exact per-model pricing for 110 models and `reasoning_effort` thinking config
-- **Providers**: add Self-hosted STT / TTS / Embedding — point 9Router at your own
-  OpenAI-compatible speech and embedding servers (whisper.cpp, faster-whisper,
-  Kokoro-FastAPI, llama-server, vLLM, Infinity). Unlike the named cloud providers
-  these read `baseUrl` per connection, so one provider can front several machines
-- **Combos**: default-enable vision/audio capacity adapter (auto-routes to a
-  vision/audio-capable model when the target lacks that capability, falling back
-  to `oc/mimo-v2.5-free`), wired into chat handler routing
-- **Endpoint**: auto-provision a "Default Key" for first-time users so `/v1`
-  works without a manual dashboard step
-- **Codex**: support GPT-5.6 Max/Ultra reasoning-level overrides (cx/ routes only)
-- **Qoder**: support PAT (Personal Access Token) connections end-to-end, alongside
-  OAuth device flow
-- **CLI tools**: add OpenDesign (manalkaff/opendesign) support
-- **Headroom**: report effective payload savings (tool schema/history bytes broken
-  out, byte-savings % reflects actual outbound reduction)
-- **Ollama**: Cloud quota tracker (session + weekly) + proactive background OAuth
-  token refresh scheduler for all providers
-
-## Fixes
-- **Providers**: remove Qwen (OAuth flow stopped working reliably)
-- **Passthrough**: detect codex-tui/Codex Desktop as native Codex client — they
-  were falling through to the translator and losing fields like `reasoning.summary`
-- **OAuth**: scope antigravity header fixes to loadCodeAssist/onboardUser only
-- **OAuth**: keep `open` external in the build so xAI/Grok token refresh works on
-  Windows
-- **OAuth**: declare missing `searchParams` in register-session handler (was a
-  500 instead of JSON on error)
-- **DB**: `ENABLE_REQUEST_LOGS` env var now overrides the UI setting correctly;
-  observability defaults to off (opt-in)
-- **Translator**: preserve Codex Responses Lite tool use across chat-native
-  OpenAI-compatible providers
-- **Translator**: don't drop image-only user messages in `prepareClaudeRequest`
-- **Translator**: drop JSON Schema keywords Gemini rejects (`uniqueItems`,
-  `contains`, `multipleOf`, `unevaluatedProperties`, `unevaluatedItems`,
-  `contentSchema`)
-- **Claude**: remove global header cache that leaked one client's identity
-  headers onto another client/account sharing the server; gate `anthropic-beta`
-  by model instead
-- **Antigravity**: drop retired Gemini 3.0 quota tiers, show Gemini 3.6 Flash
-  usage bars
-- **Cloudflare AI**: declare API key authentication (dashboard showed "No
-  connections" despite an active key)
-- **GitHub Copilot**: hold monthly-exhausted accounts until UTC month reset
-  instead of only cooling down 120s
-- **CodeBuddy**: dodge Tencent CN content filter, add usage tracking, normalize
-  codebuddy-intl messages
-- **Usage**: stop losing cached prompt tokens in the forced-SSE→JSON path
-- **Grok CLI**: display the public subscription tier from the OAuth token claim
-- **Providers**: count apikey connections for Ollama free-tier card; free-tier/
-  apikey providers without `authModes` now default to apikey (were treated
-  oauth-only)
-- **Build**: include static/public assets in standalone output (login page hung
-  on 404s when run via PM2)
-- **Server**: support IntelliJ IDEA OpenAI-compatible clients over HTTP (h2c
-  upgrade handling)
-- **Auth**: redirect already-logged-in sessions away from `/login`
-- **CLI tools**: enable Apply button for dynamic OpenAI/Anthropic-compatible
-  provider connections
-- **CLI**: include complete API artifacts in the CLI package
-- **TTS**: a bare self-hosted model name is the MODEL, not the voice — `kokoro`
-  was parsed as a voice against a default model, 404ing or synthesising with the
-  wrong one
-- **Embeddings**: self-hosted embeddings no longer fall back to `api.openai.com`
-  when a connection has no `baseUrl` — that silently sent the input text and API
-  key to OpenAI under a provider named "Self-hosted"
-- **Embeddings**: an adapter that rejects a misconfigured connection now returns
-  400 with the reason instead of escaping the handler uncaught
-- **Embeddings**: bound the upstream fetch with `FETCH_CONNECT_TIMEOUT_MS` — an
-  endpoint that drops packets never returns headers, so the request previously
-  hung indefinitely
-
-## Docs
-- **i18n**: fix port typo, add RTK Token Saver feature descriptions
-
-# v0.5.45 (2026-07-30)
-
-## Features
-- **TTS**: add Xiaomi MiMo text-to-speech (preset voices 冰糖/茉莉/苏打/白桦/Mia/Chloe/Milo/Dean, style control, language hint dropdown with Auto-detect, i18n for Style label/placeholder)
-- **Providers**: add Poolside (OpenAI-compatible)
-- **Providers**: add api-airforce, baidu, bazaarlink, bluesminds, kilo-gateway, llm7, morph, sambanova, tencent
-- **OAuth**: zed / trae / windsurf providers + harden callback proxies
-- **CLI tools**: set Claude Code max context tokens
-- **Qoder**: PAT auth + refresh model list
-- **Gemini**: Gemini 3.6 Flash tier routing + Gemini 3.5 Flash Lite
-- **Claude**: bump default Opus to `claude-opus-5`
-- **Kiro**: add Claude Opus 5 models
-- **Usage**: Kimi and DeepSeek usage handlers
-- **Usage**: SuperGrok weekly pool via gRPC-web
-
-## Fixes
-- **Refresh**: rotate `refresh_token` between retry attempts
-- **Kiro**: canonicalize tool history and route API keys correctly
-- **Kiro**: normalize dashboard thinking intensity models
-- **Cursor**: stop leaking agent tool errors as text
-- **Gemini**: fill empty tool schemas after `$ref` strip
-- **Antigravity**: strip `stream_options` from non-stream requests
-- **Jina-reader**: recover after transient errors, use JSON POST API
-- **Usage**: record exact embedding tokens
-- **Tunnel**: preserve successor cloudflared PID
-- **Console-log**: initialize capture at server boot + prevent SSE proxy buffering
-- **Dashboard**: count dual-auth, free-tier OAuth and API-key connections correctly
-- **Dashboard**: flex quota rows, thin global scrollbars, no hidden-row overflow
-
-## Docs
-- **i18n**: expand pt-BR translation to 986 terms
-- README: Indonesian translation
-
-# v0.5.40 (2026-07-20)
-
-## Features
-- **Frontier for All**: add provider — OAuth device-code login, OpenAI-compatible proxy, model chosen by the user on their Frontier dashboard
-- **Providers**: registry can ship a static suggested-model catalogue (`modelsFetcher.type: "static"`) with its own label/notice in the Add Custom Model dialog
-- **i18n**: add Khmer (km) translations
-- **CLI tools**: configure Grok Build subagent models
-- **Kimi**: merge OAuth into dual-auth provider, add K3 / K2.7 models
-- **Dashboard**: ProviderTopology flow animation
-
-## Fixes
-- **DB**: resolve better-sqlite3 parameter binding crash
-- **Translator**: pass `service_tier` through OpenAI → Responses conversion
-- **Kiro**: map GPT-5.6 reasoning effort fields
-- **Kiro**: validate terminal streams before emitting output
-- **Kiro**: map GPT reasoning effort fields
-- **Codex**: current `client_version` + refresh-aware model sync
-- **Alicode-intl**: split into Coding Plan + Model Studio providers
-- **Cursor**: HTTP/2 AgentService support + version bump 3.12.17
-- **Dashboard**: cut duplicate API/icon spam, lazy-load provider assets
-
-
-# v0.5.35 (2026-07-16)
-
-## Features
-- **xAI**: Grok Imagine video generation (`/v1/videos`) + CLI
-- **CLI tools**: Grok Build setup — choose separate main/general-purpose/explore/plan models and preserve each model's context window
-- **GitHub Copilot**: route Claude models through Copilot's native `/v1/messages`
-- **Kiro**: add GPT-5.6 model family (#2596)
-- **RTK**: `X-9Router-Token-Saver` header to bypass token savers per request
-- **Providers**: quota visibility settings
-- **Translator**: drop temperature for all Claude models
-- **i18n**: Thai (th) + Persian (fa) translations / README
-
-## Fixes
-- **MiniMax**: add the required empty signature field to unsigned Anthropic thinking block starts
-- **Providers**: bulk-add API keys no longer overwrite existing keys (gap-fill `Key N`)
-- **Anthropic**: lowercase `anthropic-version` header to prevent duplication on `/v1/messages`
-- **Alicode-intl**: use DashScope compatible-mode endpoint so standard keys work
-- **Grok CLI**: align Grok Build with current subscription protocol (#2590)
-- **Grok CLI**: surface `expiresAt` so proactive token refresh fires (#2546)
-- **Kiro**: improve direct session cache reuse
-- **Models**: populate capabilities for live-catalog LLM models
-- **Models**: list compatible provider models in `/v1/models`
-- **Thinking**: send explicit `thinking:{type:adaptive}` alongside `output_config.effort`
-- **Translator**: strip `client_metadata` when converting openai-responses → openai
-
-## Improvements
-- **Perf**: skip inactive background services on startup
-
-## Docs
-- README: Persian YouTube tutorial
-
-# v0.5.30 (2026-07-10)
-
-## Features
-- **Perplexity**: add Agent API provider (#2492)
-- **Grok CLI**: add Grok CLI / Grok Build provider with OAuth device-code flow (#2502)
-- **Updater**: one-click Update in dashboard (auto install + restart, manual fallback)
-- **Updater**: show What's new (changelog) before update + soft post-update banner
-- **Featherless**: add OpenAI-compatible provider presets
-- **SearXNG**: configure endpoint via SEARXNG_URL env (#2499)
-- **Providers**: add max thinking level for gpt-5.6-sol (#2500)
-- **Headroom**: add extras detection and install UI (#2403)
-- **Headroom**: activate/uninstall extras + fix interpreter detection
-- **PXPipe**: PXPIPE token saver — multimodal prompt compression (#2465)
-- **Proxy-Pools**: auto-rotate strategy for no-auth providers (#2409)
-
-## Fixes
-- **xAI**: strip `reasoning_effort` for `grok-composer` models (upstream rejects any reasoningEffort); honor provider thinking mode `none` — Joseph Yaksich
-- **grok-cli**: guard `transformRequest()` with capabilities (no reasoning on composer/build); cap tools at 200 for cli-chat-proxy — folded from #2539 / @hameduc
-- **Cloudflare-AI**: support accountId in bulk key import (#2449)
-- **DB**: backup on schema change, MCP child cleanup, codex models, usage providers OOM
-- **Codex**: avoid bare-email OAuth dedup (#2477)
-- **Codex**: regression-lock multi-account persistence (#796) — `tests/unit/codex-multiaccount-persistence.test.js`
-- **Codex**: fix CLI "added via TI, didn't appear" (#796) — add `/api/cli/providers/codex` route (`x-9r-cli-token` auth) + `cliCredentials.getServerCredentials`; `tests/unit/cli-providers-codex-route.test.js`
-- **CLI**: allow staged app bundle builds (#2479)
-- **Headroom**: compress Kiro conversation state (#2488)
-- **Gemini-CLI**: raise output floor for thinking and add validated toolConfig (#2486)
-- **GitHub**: label Copilot profiles by account identity (#2498)
-- **OpenAI-to-Claude**: unwrap bare {function:{…}} tools without parent type (#2473)
-- **Translator**: clamp thinking effort max->xhigh for OpenAI format (#2466)
-- **RTK/find**: detect and group Windows backslash-style find output (#2448)
-- **Codex**: handle fast tier and capacity SSE (#2452)
-- **Volcengine-ark**: clamp Kimi max_tokens to 32768 endpoint cap
-- **Antigravity**: align provider fingerprint with IDE Desktop 2.1.1 (#2389)
-- **Pricing**: update Claude/Codex model rates and add new models
-
-## Improvements
-- **i18n(zh-CN)**: complete Chinese translations for all UI strings (#2436)
-- **API**: caching for tunnel and version status endpoints
-- **Perf**: faster dev startup and lighter bundle
-
-# v0.5.20 (2026-07-07)
-
-## Features
-- **Thinking**: per-model thinking level picker on provider page — appends `(level)` suffix to copied model names for forced reasoning effort across all formats (openai, claude, gemini, deepseek, kimi, qwen, zai, minimax, hunyuan, step)
-- **RTK**: add JS-native git-log filter (#2423)
-- **Caveman**: add targeted upstream-aligned style rules (#2424)
-- **i18n**: add Farsi (fa) language support (#2385)
-
-## Fixes
-- **Thinking**: strip `(level)` suffix from upstream `body.model` so providers no longer reject requests
-- **Translator**: preserve developer instructions in openai-responses conversion (#2434)
-- **count_tokens**: count structured Anthropic blocks (#2419)
-- **Volcengine-ark**: clamp GLM-5 max_tokens to model output ceiling (#2428)
-- **Kimi**: normalize reasoning_effort to backend enum (#2427)
-- **Claude**: reconcile max_tokens vs thinking budget and lift per-model ceiling (#2381)
-- **Kiro**: deliver system prompt natively, add Opus 4.5/4.7/4.8, tolerate dash version ids (#2366)
-- **Headroom**: proxy dashboard through app (#2372)
-- **MITM**: recover from stale lock file on server start
-
-# v0.5.18 (2026-07-03)
-
-## Features
-- **Usage**: track cached tokens + correct input/output/cache cost (#2209) — hodtien
-- **Codex**: show reset credit expiry details (#2290) — Rafli Ahmad Zulfikar
-- **NVIDIA**: add new models and capabilities — decolua
-- **ClinePass**: add provider support — sternelee
-
-## Fixes
-- **Usage**: dedupe streaming request-details log entries — Qin Li
-- **Claude**: drop foreign thinking signatures in passthrough — decolua
-- Prevent non-SSE stream pipe crash and cross-IdP account overwrites (#2244) — KunN-21
-- **Kiro**: route IdC auth to regional CodeWhisperer surface (#2297) — Volodymyr Saakian
-- **Kiro**: add Claude Sonnet 5 model support (#2264) — Edison42
-- **Xiaomi-tokenplan**: region selector, key validation, multi-connection (#2251) — MiQieR
-- **Translator**: strict Anthropic content block compliance (#2225) — Sahrul Ramadhan Hardiansyah
-- **Kimchi**: strip reasoning_content echo to bound multi-turn input tokens — KunN-21
-- **Kimchi**: bump User-Agent to kimchi/0.1.40 (#2256) — Ansh7473
-- **Codebuddy-cn**: strip empty tool_calls arrays to preserve reasoning — zmf
-- **Antigravity**: preserve Claude tool delta index (#2223) — Sutarto Jordan Chrisfivo
-- **MITM**: generate root CA on server startup (#2228) — Sutarto Jordan Chrisfivo
-
-# v0.5.15 (2026-06-29)
-
-## Features
-- Add Kimchi OAuth provider — Nant361
-- Refine Qwen vision/video + thinking model patterns — decolua
-- Opt-in Codex auto-ping quota keep-alive — Emirhan
-
-## Fixes
-- **Responses**: handle response.done terminal events (#2142) — rifuki
-- **Headroom**: skip unsafe responses tool history (#2132) — Sutarto Jordan Chrisfivo
-- **Translator**: map mid-conversation system message to user (claude→openai) — decolua
-- **Gemini**: normalize contents to prevent 400 invalid_argument (#2192) — warelik
-- **Gemini**: backfill thoughtSignature + suppress stream done sentinel — WARELIK
-- **Alicode**: preserve cache_control for DashScope providers (#2069) — Rex
-- **Antigravity**: strip deprecated/readOnly/writeOnly from tool schemas — iletai, Yudhistira-Official
-- **CodeBuddy CN**: show bonus packs as one-time, not monthly-replenishing — whale9820
-- **Kiro**: strip leaked <thinking> tags from content stream (#2158) — hamsa0x7
-- **Tray**: make Windows context menu DPI-aware — Emirhan
-- **Kilocode**: expose full gateway catalog in combo model picker — jellylarper
-- **OpenCode**: fix Go GLM — decolua
-
-# v0.5.12 (2026-06-26)
-
-## Features
-- Add token-saver dashboard page — decolua
-- Add bulk delete for provider connections — teddytkz
-- Resolve GitHub Copilot model catalog from upstream — caiqinzhou
-- Add Venice AI provider — Brokenc0de
-- Add Kiro external_idp import for Microsoft SSO (CLIProxyAPI) — Stevanus Pangau
-- Overhaul Blackbox provider catalog + WebUI test support — suryacagur
-
-## Fixes
-- Provider thinking compatibility (DeepSeek/Gemini) — Mink Nguyen
-- Stop double-counting streaming usage at source — decolua
-- Usage logging dedupe to reduce stats churn — Mink Nguyen
-- Prevent non-JSON SSE lines / duplicate [DONE] from breaking clients (PR #2046) — qianze
-- Resolve Gemini TTS models from catalog — nguyenha935
-- Support Kiro IDC (organization) token import — quanturbo
-- Preserve forced streaming for JSON clients (#2031) — Joseph Yaksich
-- Preserve Responses text format (Codex) — tenglong
-- Support Gemini native TTS generateContent endpoint — nguyenha935
-- Add missing zh-CN endpoint key label (i18n) — weimaozhen
-- CodeBuddy: only send reasoning params when client requests reasoning (#2071) — Rex
-- CodeBuddy CN: show one-shot bonus packs as expiring, not monthly-replenishing
-- Show custom provider models in combo picker — Sapto
-- Docker: add docker-compose.yml with headroom enabled by default — nitsuahlabs
-- Clarify token diagnostics vs provider billing (headroom, #1998) — Sutarto Jordan Chrisfivo
-- Translate openai-responses input through OpenAI for compression (#1998) — Ankit
-- Kiro: report 1M context window for claude-opus-4.8 — EdisonPVE
-- Avoid stale redirects after auth changes (#2100) — Emirhan
-- Mark Claude Opus 4.7 (dashed id) as 1M context — Brokenc0de
-- Preserve reasoning effort through Codex translations — ntdung6868
-- Token-saver: full width card layout — decolua
-- Antigravity: retry transient upstream failures — Sutarto Jordan Chrisfivo
-- Param-support: handle strip rules without match/drop (#1960) — Joseph Yaksich
-- Translator: resolve custom provider prefix in debug endpoint (#1083) — hamsa0x7
-
-# v0.5.8 (2026-06-21)
-
-## Features
-- **Antigravity**: native image generation support (image models tagged kind:image, hiển thị trong media-providers UI)
-- **CodeBuddy CN**: API key auth + credit quota tracker
-- **CodeBuddy CN**: short model prefix alias "cbcn"
-
-## Fixes
-- **MiniMax-M3**: enable vision capability
-- **Headroom**: support Docker sidecar proxy
-- **Antigravity**: image executor fixes
-- **mimo-free**: Chrome User-Agent rotation to bypass anti-abuse gate
-- **cloudflare-ai**: flatten content-part arrays to string to avoid oneOf 400 (#1926)
-- **Translator**: normalize tools to Anthropic-native shape for non-Anthropic providers
-- **CLI**: handle Next.js 16 nested standalone output path (#1940)
-- **Codex**: preserve custom tools during request normalization
-- **next.config**: add new route for responses endpoint to API
-
-# v0.5.6 (2026-06-20)
-
-## Features
-- **Ponytail**: minimalist code generation feature
-- **Headroom**: proxy lifecycle management + dashboard UI (one-click start/stop, install detection, status probing, token saver, claude↔openai shape conversion)
-- **CodeBuddy CN**: new OAuth provider (copilot.tencent.com) — 15-model catalog, /v2 inference, forced streaming, OpenAI-style reasoning
-- **OpenCode-Go**: align models with official endpoints; route Qwen 3.7 MiniMax via /v1/messages, GLM/Kimi/DeepSeek/MiMo via /chat/completions
-
-## Fixes
-- **Anthropic-compatible validation**: use POST /v1/messages (GET /models not spec, false "invalid" for valid keys)
-- **CLI tools**: tolerate JSONC configs in all 8 settings routes (opencode, openclaw, kilo, droid, cowork, copilot, claude, cline)
-- **Gemini/Antigravity**: preserve 'pattern' in tool schema translation (glob/grep)
-- **Combo/Fusion**: flatten Anthropic-style tool messages in panel calls (prevent 503)
-- **Models**: store provider custom models by provider scope
-- **Perplexity**: use /v1/models endpoint for key validation
-
-# v0.5.4 (2026-06-18)
-
-## Fixes
-- **Kiro**: honor thinking effort budgets
-- **AG/Kiro/Xiaomi**: provider fixes
-- **Combo/Fusion**: flatten tool history in panel calls to prevent 503
-- **LLM selector**: show custom vision models in selector and model list
-- **Image**: prevent compatible nodes from shadowing provider aliases
-
-# v0.5.2 (2026-06-17)
-
-## Features
-- **Combo Fusion strategy** — fans the prompt out to all member models in parallel, then a configurable judge model synthesizes one final answer (quorum-grace, anonymized sources, graceful degradation)
-- **Per-combo strategy selector** — pick `fallback` / `round-robin` / `fusion` / `capacity` per combo (replaces the old round-robin toggle), with a judge picker for fusion
-- **Capacity auto-switch** — reorders models per request so images/PDFs route to capable models first
-- **Kiro headless API-key auth** (`ksk_`) + direct `claude↔kiro` route that avoids the lossy OpenAI two-hop pivot
-- **Claude auto-ping** — warms the 5h quota window right after reset so a fresh window starts immediately (per-connection toggle)
-
-## Fixes
-- **Claude 429**: stop hammering the OAuth usage endpoint — cache resetAt, throttle quota refresh to 3 min, cool down after a 429 (chat unaffected)
-- **Usage logs always empty**: missing `await` on `getAdapter()` in `getRecentLogs` made `/api/usage/logs` & `/api/usage/request-logs` return nothing
-- **Executors**: strip params unsupported by the provider/model (drops deprecated `temperature` for claude-opus-4 → Anthropic 400)
-- **Translator**: derive deterministic tool_call ids for gemini/antigravity → OpenAI so function call/response pair correctly (fixes tool-pairing 400s)
-- **Antigravity**: strip `optional` from tool schemas before sending to Gemini
-- **Claude-to-OpenAI**: handle OpenAI-format responses in the non-streaming path (e.g. xiaomi-tokenplan)
-- **Usage views**: show edited connection names consistently across Providers & Quota Tracker
-- **Security**: hardened reverse-proxy local-access trust
-- **Security**: SSRF hardening on web fetch
-
-## Internal
-- Large **open-sse / translator refactor** (~40 commits): unified provider/model registry (LiteLLM-style `models[]` + `kind` field, 100 co-located registry files), single-sourced media/OAuth/refresh/token URLs, registry-based dispatch for usage & token-refresh, DRY translator concerns (buildUsage, encodeDataUri, finishReasonMap, chunkBuilder, reasoningDelta…), ESM-safe registry init, large-file splits, dead-code removal, and golden/no-regression test gates
-
-# v0.4.80 (2026-06-13)
-
-## Features
-- Vercel AI Gateway: support embeddings, images and credit usage (#1183)
-- Add MiMo Free no-auth provider (#1789)
-- Vertex: support ADC `authorized_user` credential
-- Cowork: re-enable Claude Cowork with preset-only stdio MCP
-- Codex: bulk add accounts via JSON (#1719)
-- Kiro: enable multi-endpoint failover for GenerateAssistantResponse (#1722)
-
-## Fixes
-- Security: re-auth on DB export/import + SSRF guard on web fetch
-- Auth: real client IP rate-limiting + remote default-password guard
-- Cerebras/Mistral: strip unsupported `client_metadata` from downstream requests (#1742)
-- SiliconFlow: update baseUrl `.cn` -> `.com` + curate verified model list (#1760)
-- Gemini-to-OpenAI: route unsigned thought parts to `reasoning_content` (#1752)
-- Claude-to-OpenAI: strip Anthropic billing header from system prompt (#1765)
-- Anthropic-compatible: send Bearer auth for third-party gateways (#1795)
-- Usage-stats: avoid partial stats on initial SSE race (#1767)
-- Proxy: use `export default` in proxy.js for Next.js 16 middleware detection
-- Claude passthrough: add body normalization
-- GitHub Copilot: refresh missing/expired token on models discovery (#1727) + add mappable gpt-5-mini/gpt-5.4-nano slots for Copilot MITM (#1653)
-- Kiro: auto-resolve profileArn to prevent 403 on IDC login, enhance profile ARN resolution, update endpoint to `runtime.us-east-1.kiro.dev` (#1713)
-- Tunnel: detect system-installed Tailscale via dual-socket probe (#1723) + non-blocking probes to prevent UI freeze
-- CommandCode: force `stream=true` in transformRequest (#1706)
-- Qoder: increase timeouts for reasoning models and improve stream handling
-- Dashboard: show provider node name instead of connection name in topology (#1770) + show explicit `kind="llm"` combos on combos page (#1684)
-
-## Docs
-- README: add Indonesian 9Router tutorial video (#1709)
-
-# v0.4.71 (2026-06-06)
-
-## Features
-- Caveman: add wenyan classical Chinese levels and sync upstream prompts; locale-based visibility on endpoint page
-- i18n: endpoint exposure notice across multiple languages + Russian README
-- Antigravity: add gemini-3.5-flash-extra-low (Low) model
-- xiaomi-tokenplan: add Claude-native MiMo V2.5 Pro alias via dedicated executor
-- Qoder: fetch latest model + dashboard import-model button (#1642)
-- MiniMax: add MiniMax-M3 + update Quota Tracker coding/CN (#1631)
-
-## Fixes
-- Codex: harden streaming timeouts (stall/connect raised to 60s, configurable per-provider), accept `response.done` event, and always emit a terminal `response.failed` + `[DONE]` for Responses passthrough when a stream closes, stalls, or aborts before a terminal event — prevents codex clients from hanging (#1648, #1680, #1688, #1618)
-- Codex: durable OAuth refresh lifecycle (#1664)
-- Tunnel: skip virtual interfaces to prevent false netchange watchdog
-- Claude: fix forced tool_choice 400 on cc/ OAuth route (#1592)
-- Proxy: raise Next client body limit to 128MB via `NINEROUTER_PROXY_CLIENT_MAX_BODY_SIZE` (#1529, #1572)
-- MiniMax: echo `reasoning_content` on follow-up turns to avoid 400 (#1543)
-- Kiro: handle 400 on tool-bearing history without client tools; add mappable "auto" model slot; fix binary EventStream crash + add models & TTS tool filtering
-- Antigravity: passthrough tab-autocomplete + mark default agent slot mandatory
-- Qoder: allow `qmodel_latest` model key (#1638)
-- Providers: restore one-connection guard for compatible/embedding nodes
-- Model-test: route image/STT probes to their real endpoints, harden STT ping; add opencode-go + xiaomi-tokenplan to connection test (#1576, #1628)
-
-## Improvements
-- Dashboard: reorganize menu actions across sidebar/header/profile
-- Translator: add data-driven coverage, bug-exposing cases, and real provider smoke tests
-
-# v0.4.66 (2026-05-29)
-
-## Features
-- Add Qoder provider: device-flow OAuth, COSY signing, WAF-bypass body encoding, live model catalog, dashboard quota tracker, 11 models (#1372)
-- Add new models: Claude Opus 4.8 (Claude Code), GPT 5.4 Mini (Codex)
-
-## Fixes
-- DeepSeek thinking mode: echo `reasoning_content` back on follow-up/tool-call turns so OpenCode-free and custom providers no longer 400 with "reasoning_content must be passed back" (#1543)
-- Reasoning injector: match deepseek/kimi model ids case-insensitively (covers custom providers using capitalized model names)
-- OpenCode suggested-models: include free models without the `-free` suffix, e.g. `big-pickle` (#1535)
-
-## Improvements
-- Codex: trim sunset models, keep gpt-5.5 / gpt-5.4 / gpt-5.3-codex family, add gpt-5.4-mini
-- volcengine-ark: refresh model list (add DeepSeek-V4-Flash/Pro, drop EOL entries)
-- Lower stream stall timeout 35s → 30s for faster hang detection
-
-# v0.4.63 (2026-05-26)
-
-## Fixes
-- GitHub Copilot: never route Gemini/Claude models to the `/responses` endpoint; prevents misleading "does not support Responses API" 400s (#1062)
-- proxyFetch: restore missing `Readable` import causing runtime `ReferenceError` in DNS-bypass fetch path
-
-## Improvements
-- Lower stream stall timeout from 60s → 35s for faster hang detection
-
-# v0.4.62 (2026-05-26)
-
-## Fixes
-- Codex: auto-retry when upstream drops mid-stream (no more hangs)
-- Codex: fix random 400/404 errors, tool-calling failures, and unstable prompt cache
-- MITM: support Antigravity 2.x 
-- Sanitize Read tool args to prevent retry loops from non-Anthropic models (#1144)
-- Implement json_schema fallback for OpenAI-compatible providers without native Structured Output (#1343)
-- Strip empty Read pages argument in OpenAI-to-Claude translator (#1354)
-- Forward Gemini output dimensions for embeddings (#1366)
-- Resolve setState-in-effect errors in dashboard components (#1362)
-- Gemini CLI: reuse stored OAuth project IDs for quota checks and show clearer setup guidance when the project is missing (#1271, #1428)
-
-## Features
-- Add Cloudflare Workers proxy deployer and pool integration (#1360)
-- Add Deno Deploy relays support and improved proxy pools dashboard layout (#1437)
-
-## Improvements
-- Refactor Tunnel into dedicated Cloudflare and Tailscale manager modules
-- Refactor tokenRefresh service with in-flight dedup to prevent refresh_token_reused errors
-
-# v0.4.59 (2026-05-21)
-
-## Fixes
-- OAuth: fix login flow on Windows
-
-# v0.4.58 (2026-05-21)
-
-## Features
-- xAI Grok provider (OAuth, API key, image)
-- Provider limits: paginated accounts with page size controls
-
-## Fixes
-- Tailscale: fix connection status on Windows (#1300)
-- Tunnel: fix false "checking" when tunnel URL is reachable
-- Stream: fix pipe errors on client disconnect/abort
-
-# v0.4.55 (2026-05-18)
-
-## Features
-- Xiaomi MiMo Token Plan: region selector (Singapore / China / Europe) — keys are cluster-specific
-- Antigravity: risk confirmation dialog before first connection
-- Gemini CLI: surface upstream retry delay on 429 errors
-
-## Fixes
-- MITM: cannot kill process on macOS under sudo (lsof not found in PATH)
-- Stream: false-positive stall timeout on Claude reasoning / Kiro responses
-- Tunnel: cannot re-enable after disable (stuck state)
-- Tunnel: cloudflared error messages now include log tail for easier debugging
-- Language switcher: applies selected locale immediately on close (#1234)
-- Antigravity OAuth: metadata now matches the official client
-
-## Improvements
-- Gemini CLI: bump engine to 0.34.0
-- Re-hide `qwen` (OAuth EOL) and `iflow` (not ready) providers
-
-# v0.4.52 (2026-05-17)
-
-## Features
-- Add Vercel AI Gateway provider support (#1183)
-- rtk: Kiro format tool result compression — handle conversationState.history & currentMessage, preserve error results, ~13.6% savings (#1194)
-
-## Fixes
-- openclaw: normalize agent.model object form `{primary, fallbacks}` before .startsWith → fix TypeError & 'not configured' status (#1216)
-- Usage Details pagination: stay inside mobile viewport <640px (#1218)
-- Fix test model error
-- Fix MIMO provider in Codex
-- Disable log file creation when using MITM AG
-
-# v0.4.50 (2026-05-16)
-
-## Fixes
-- Fix duplicate tray icon on macOS when hiding to tray
-- Fix tray not showing in background mode on macOS
-- Fix hide to tray broken on Windows/Linux
-- Fix Shutdown button in web UI not working
-
-# v0.4.49 (2026-05-16)
-
-## Features
-- Add Kiro provider support: full request/response translation, live model listing, reasoning content support
-- Add `buildOutput` RTK filter with autodetect for npm/yarn/cargo build logs
-- Add MITM warning notification in tray and dashboard
-
-## Improvements
-- Add modalities (input/output) to model configuration for OpenCode
-- Fix tray hide-to-tray: keep current process alive instead of spawning detached child (fixes macOS NSStatusItem ghost icon)
-- Fix tray kill: graceful shutdown with SIGTERM/SIGKILL escalation
-- Fix SIGHUP handling so macOS terminal close doesn't kill tray process
-- Hide deprecated providers (qwen, iflow, antigravity)
-- Update i18n across 32 languages
-
-## Fixes
-- Fix model check (test-models) blocked by dashboardGuard: pass machineId-based CLI token in internal self-calls
-
-# v0.4.46 (2026-05-15)
-
-## Breaking Changes
-- Tunnel public URL changed — old tunnel links no longer work, please reconnect to get the new URL