ldrouter 1.14.0 → 1.14.1

package/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to this project are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/) and the project adheres to
 [Semantic Versioning](https://semver.org/).
 
+## [1.14.1] - 2026-09-12
+
+### Fixed
+
+- Do not reject any model solely because its stored `reasoning` capability is `false`; reasoning support is advisory for OpenAI-compatible providers and must not block Claude/Hermes requests.
+- Redact API-key digests and metadata from authentication debug logs.
+
 ## [1.14.0] - 2026-09-11
 
 ### Added

package/dist/server/auth/api-key.js

@@ -42,12 +42,12 @@ export function authenticateGatewayKey(req) {
     // Custom keys are stored verbatim (no prefix requirement); auto-generated
     // keys start with ld-, but authentication must accept any stored secret.
     const digest = sha256Hex(candidate);
-    console.log(`🔑 API KEY AUTH - SHA256 Digest: ${digest.slice(0, 16)}...`);
+    console.log('🔑 API KEY AUTH - Digest computed');
     const db = getDb();
     // DEBUG: Check total keys in database
     const allKeys = db.select().from(schema.apiKeys).all();
     console.log(`📊 TOTAL KEYS IN DB: ${allKeys.length}`);
-    console.log(`📋 ALL KEYS:`, allKeys.map(k => ({ id: k.id.slice(0, 8), name: k.name, keyPrefix: k.keyPrefix, digestPreview: k.keyDigest?.slice(0, 16) + '...' })));
+    console.log('📋 API key metadata loaded');
     const row = db.select().from(schema.apiKeys).where(eq(schema.apiKeys.keyDigest, digest)).get();
     console.log(`❓ QUERY RESULT: Found match? ${!!row}`);
     if (!row) {

package/dist/server/routing/capabilities.js

@@ -38,7 +38,9 @@ export function deriveRequiredCapabilities(req) {
  * IMPORTANT: Treat undefined as "unknown" rather than "unsupported".
  * For generic OpenAI-compatible providers where capabilities weren't explicitly imported,
  * undefined means we don't know, so we should assume it's potentially supported.
- * Explicit false means "known unsupported".
+ * Explicit false means "known unsupported" for protocol capabilities such as
+ * tools, images, and streaming. Reasoning is advisory metadata because the
+ * upstream may support it even when discovery cannot identify it.
  */
 export function modelMeets(caps, req) {
     // Only reject if capability is explicitly false, not if unknown (undefined)
@@ -52,8 +54,6 @@ export function modelMeets(caps, req) {
         return false;
     if (req.audioInput && caps.audio_input === false)
         return false;
-    if (req.reasoning && caps.reasoning === false)
-        return false;
     if (req.responses && caps.responses === false)
         return false;
     return true;

package/dist/server/routing/combo.js

@@ -69,8 +69,6 @@ function capabilityRejection(caps, req) {
         return 'image_input';
     if (req.audioInput && caps.audio_input === false)
         return 'audio_input';
-    if (req.reasoning && caps.reasoning === false)
-        return 'reasoning';
     if (req.responses && caps.responses === false)
         return 'responses';
     return 'capability_mismatch';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ldrouter",
-  "version": "1.14.0",
+  "version": "1.14.1",
   "description": "LateDev Router — lightweight self-hosted LLM gateway with admin UI",
   "type": "module",
   "license": "MIT",