qwenproxy-cli 1.2.8 → 1.2.9

package/README.pt-BR.md

@@ -82,7 +82,9 @@ flowchart TD
 
 ### Autenticação
 
-Se `API_KEY` estiver definido, as rotas `/v1/*` (e `/metrics`) exigem uma das formas:
+Em loopback, a autenticação é opcional e o token legado
+`sk-qwenproxy-local` continua aceito. Se uma `API_KEY` real estiver definida,
+as rotas protegidas exigem uma das formas:
 
 - `Authorization: Bearer <API_KEY>` (OpenAI / Responses)
 - `x-api-key: <API_KEY>` (clients bearer-style)
@@ -483,11 +485,12 @@ npm run typecheck  # tipos
 ### Rede e segurança
 
 
-| Variável  | Default   | Descrição                        |
-| --------- | --------- | -------------------------------- |
-| `PORT`    | `7936`    | Porta HTTP (padrão QWEN: 7936). Configurável via .env |
-| `HOST`    | `0.0.0.0` | Bind host. Local: `127.0.0.1`    |
-| `API_KEY` | vazio     | Protege `/v1/*` com Bearer token |
+| Variável     | Default     | Descrição |
+| ------------ | ----------- | --------- |
+| `PORT`       | `7936`      | Porta HTTP (padrão QWEN: 7936). Configurável via .env |
+| `HOST`       | `127.0.0.1` | Bind host. Fora de loopback exige uma chave forte |
+| `API_KEY`    | vazio       | Opcional em loopback; protege as rotas com Bearer token |
+| `CORS_ORIGIN`| vazio       | Sem valor, permite apenas origens web de loopback |
 
 
 ### Contas e sessão
@@ -1028,4 +1031,4 @@ O **QwenProxy** é desenvolvido e mantido por **johngbl**, construído sobre as
 - **Exclusão total do mantenedor:** nos limites máximos da lei, o autor e os contribuidores **não respondem** por quaisquer danos diretos, indiretos, incidentais, especiais ou consequenciais (perda de lucros, dados, contas, quota ou receita) decorrentes do uso ou da incapacidade de uso deste software, nem por mudanças, quebras ou bloqueios do serviço upstream, que podem ocorrer a qualquer momento e sem aviso prévio.
 - **Sem prestação de serviço:** projeto voluntário, sem SLA e sem obrigação de atualizar ou corrigir.
 
-**Ao baixar, compilar ou executar este software você declara ter lido e aceito integralmente este aviso, isentando o mantenedor de qualquer obrigação, reclamação, ação, custo ou despesa (incluindo honorários advocatícios). Se não concordar, não utilize.** Acompanha e não substitui a licença [ISC](LICENSE).
+**Ao baixar, compilar ou executar este software você declara ter lido e aceito integralmente este aviso, isentando o mantenedor de qualquer obrigação, reclamação, ação, custo ou despesa (incluindo honorários advocatícios). Se não concordar, não utilize.** Acompanha e não substitui a licença [ISC](LICENSE).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qwenproxy-cli",
-  "version": "1.2.8",
+  "version": "1.2.9",
   "description": "High-performance OpenAI & Anthropic compatible API gateway for Qwen with multi-account rotation, interactive TUI, and resilient tool calling.",
   "main": "src/index.ts",
   "bin": {
@@ -26,8 +26,8 @@
     "reset": "npx tsx src/reset-cooldowns.ts",
     "purge": "npx tsx src/delete-chats.ts",
     "test": "npm run test:mock && npm run test:live",
-    "test:mock": "tsx --test --test-concurrency=1 --env-file=.env.test src/tests/account-concurrency.test.ts src/tests/concurrency-latest-wins.test.ts src/tests/mutex.test.ts src/tests/context-truncation.test.ts src/tests/streaming-thinking-summary.test.ts src/tests/tool-call-guard.test.ts src/tests/utils-logger-full.test.ts src/tests/logger-toolcall-errors.test.ts src/tests/logger-toolcall-disabled.test.ts src/tests/utils-json-full.test.ts src/tests/utils-session-guard-full.test.ts src/tests/core-logic-full.test.ts src/tests/core-logic-accounts.test.ts src/tests/chat-validation-full.test.ts src/tests/chat-logic-full.test.ts src/tests/account-stickiness.test.ts src/tests/accounts-security.test.ts src/tests/advanced.test.ts src/tests/auth-playwright.test.ts src/tests/captcha-solver.test.ts src/tests/cache-scan-regex.test.ts src/tests/chat-cleanup.test.ts src/tests/chat-cleanup-auto.test.ts src/tests/chromium-args.test.ts src/tests/config-current.test.ts src/tests/context-meter.test.ts src/tests/concurrency.test.ts src/tests/delta.test.ts src/tests/fingerprint.test.ts src/tests/human-behavior.test.ts src/tests/index.test.ts src/tests/json-recovery.test.ts src/tests/jsonFix.test.ts src/tests/memory-cache.test.ts src/tests/model-alias.test.ts src/tests/model-registry-thinking.test.ts src/tests/models-endpoint.test.ts src/tests/multimodal.test.ts src/tests/oss-upload.test.ts src/tests/parser.test.ts src/tests/personalization-flow.test.ts src/tests/personalization-required.test.ts src/tests/retry-policy.test.ts src/tests/rotation.test.ts src/tests/server-lifecycle.test.ts src/tests/session-keeper.test.ts src/tests/session-state.test.ts src/tests/single-account-mode.test.ts src/tests/stream-retry.test.ts src/tests/tool-calls-endpoint.test.ts src/tests/tool-instructions-cache.test.ts src/tests/session-id.test.ts src/tests/watchdog-ram.test.ts src/tests/tool-recovery-t1t2.test.ts src/tests/abort-silent-t4.test.ts src/tests/t3-close-tag-escape.test.ts src/tests/t5-tool-cap.test.ts src/tests/logger-redaction.test.ts src/tests/stall-timeout-retryable.test.ts src/tests/t6-missing-quote-array-close.test.ts src/tests/watchdog-rss.test.ts src/tests/logical-thread-batch.test.ts src/tests/chat-pool-style.test.ts src/tests/queue-wait-cap.test.ts src/tests/context-eviction-order.test.ts src/tests/chat-in-progress-settle.test.ts src/tests/stream-lock-leak.test.ts src/tests/stream-semaphore.test.ts src/tests/waf-isolation.test.ts src/tests/legacy-completions.test.ts src/tests/response-format.test.ts src/tests/cors-headers.test.ts src/tests/stream-lock-terminal-cancel.test.ts src/tests/parser-truncated-tool-call.test.ts src/tests/metrics-prometheus.test.ts src/tests/context-death-cleanup.test.ts src/tests/personalization-direct-fetch.test.ts src/tests/completion-headers-parity.test.ts src/tests/parallel-escape-repro.test.ts src/tests/chat-in-progress-scale-cost.test.ts src/tests/temp-chat-mode.test.ts src/tests/profile-reset.test.ts src/tests/error-classification.test.ts src/tests/quota-cooldown.test.ts src/tests/account-ready-gate.test.ts src/tests/tool-cap-notice.test.ts src/tests/interaction-flows.test.ts src/tests/headers-gate-cooldown-fallback.test.ts src/tests/unwrapped-tool-calls.test.ts src/tests/anthropic.test.ts src/tests/sync-clients.test.ts src/tests/sync-top10-clients.test.ts src/tests/cli.test.ts src/tests/paths.test.ts src/tests/tool-manifest.test.ts src/tests/tui.test.ts src/tests/tui-settings.test.ts src/tests/personalization-deadline.test.ts src/tests/update-cli.test.ts src/tests/batch-accounts.test.ts src/tests/shared-browser.test.ts src/tests/auth-credential-classification.test.ts src/tests/responses-api.test.ts src/tests/media-generation.test.ts src/tests/infer-tool-name.test.ts src/tests/native-session-headers.test.ts src/tests/omni-thinking.test.ts src/tests/protect-stuck-mutex.test.ts src/tests/stream-error-notice.test.ts src/tests/parser-deep-coverage.test.ts src/tests/tui-logs-copy.test.ts",
-    "test:mock:fast": "tsx --test --test-concurrency=2 --env-file=.env.test src/tests/account-concurrency.test.ts src/tests/concurrency-latest-wins.test.ts src/tests/mutex.test.ts src/tests/context-truncation.test.ts src/tests/streaming-thinking-summary.test.ts src/tests/tool-call-guard.test.ts src/tests/utils-logger-full.test.ts src/tests/logger-toolcall-errors.test.ts src/tests/logger-toolcall-disabled.test.ts src/tests/utils-json-full.test.ts src/tests/utils-session-guard-full.test.ts src/tests/core-logic-full.test.ts src/tests/core-logic-accounts.test.ts src/tests/chat-validation-full.test.ts src/tests/chat-logic-full.test.ts src/tests/account-stickiness.test.ts src/tests/accounts-security.test.ts src/tests/advanced.test.ts src/tests/auth-playwright.test.ts src/tests/captcha-solver.test.ts src/tests/cache-scan-regex.test.ts src/tests/chat-cleanup.test.ts src/tests/chat-cleanup-auto.test.ts src/tests/chromium-args.test.ts src/tests/config-current.test.ts src/tests/context-meter.test.ts src/tests/concurrency.test.ts src/tests/delta.test.ts src/tests/fingerprint.test.ts src/tests/human-behavior.test.ts src/tests/index.test.ts src/tests/json-recovery.test.ts src/tests/jsonFix.test.ts src/tests/memory-cache.test.ts src/tests/model-alias.test.ts src/tests/model-registry-thinking.test.ts src/tests/models-endpoint.test.ts src/tests/multimodal.test.ts src/tests/oss-upload.test.ts src/tests/parser.test.ts src/tests/personalization-flow.test.ts src/tests/personalization-required.test.ts src/tests/retry-policy.test.ts src/tests/rotation.test.ts src/tests/server-lifecycle.test.ts src/tests/session-keeper.test.ts src/tests/session-state.test.ts src/tests/single-account-mode.test.ts src/tests/stream-retry.test.ts src/tests/tool-calls-endpoint.test.ts src/tests/tool-instructions-cache.test.ts src/tests/session-id.test.ts src/tests/watchdog-ram.test.ts src/tests/tool-recovery-t1t2.test.ts src/tests/abort-silent-t4.test.ts src/tests/t3-close-tag-escape.test.ts src/tests/t5-tool-cap.test.ts src/tests/logger-redaction.test.ts src/tests/stall-timeout-retryable.test.ts src/tests/t6-missing-quote-array-close.test.ts src/tests/watchdog-rss.test.ts src/tests/logical-thread-batch.test.ts src/tests/chat-pool-style.test.ts src/tests/queue-wait-cap.test.ts src/tests/context-eviction-order.test.ts src/tests/chat-in-progress-settle.test.ts src/tests/stream-lock-leak.test.ts src/tests/stream-semaphore.test.ts src/tests/waf-isolation.test.ts src/tests/legacy-completions.test.ts src/tests/response-format.test.ts src/tests/cors-headers.test.ts src/tests/stream-lock-terminal-cancel.test.ts src/tests/parser-truncated-tool-call.test.ts src/tests/metrics-prometheus.test.ts src/tests/context-death-cleanup.test.ts src/tests/personalization-direct-fetch.test.ts src/tests/completion-headers-parity.test.ts src/tests/parallel-escape-repro.test.ts src/tests/chat-in-progress-scale-cost.test.ts src/tests/temp-chat-mode.test.ts src/tests/profile-reset.test.ts src/tests/error-classification.test.ts src/tests/quota-cooldown.test.ts src/tests/account-ready-gate.test.ts src/tests/tool-cap-notice.test.ts src/tests/interaction-flows.test.ts src/tests/headers-gate-cooldown-fallback.test.ts src/tests/unwrapped-tool-calls.test.ts src/tests/anthropic.test.ts src/tests/sync-clients.test.ts src/tests/sync-top10-clients.test.ts src/tests/cli.test.ts src/tests/paths.test.ts src/tests/tool-manifest.test.ts src/tests/tui.test.ts src/tests/tui-settings.test.ts src/tests/personalization-deadline.test.ts src/tests/update-cli.test.ts src/tests/batch-accounts.test.ts src/tests/shared-browser.test.ts src/tests/auth-credential-classification.test.ts src/tests/responses-api.test.ts src/tests/media-generation.test.ts src/tests/infer-tool-name.test.ts src/tests/native-session-headers.test.ts src/tests/omni-thinking.test.ts src/tests/protect-stuck-mutex.test.ts src/tests/stream-error-notice.test.ts src/tests/parser-deep-coverage.test.ts src/tests/tui-logs-copy.test.ts",
+    "test:mock": "tsx --test --test-concurrency=1 --env-file=.env.test src/tests/account-concurrency.test.ts src/tests/concurrency-latest-wins.test.ts src/tests/mutex.test.ts src/tests/context-truncation.test.ts src/tests/streaming-thinking-summary.test.ts src/tests/tool-call-guard.test.ts src/tests/utils-logger-full.test.ts src/tests/logger-toolcall-errors.test.ts src/tests/logger-toolcall-disabled.test.ts src/tests/utils-json-full.test.ts src/tests/utils-session-guard-full.test.ts src/tests/core-logic-full.test.ts src/tests/core-logic-accounts.test.ts src/tests/chat-validation-full.test.ts src/tests/chat-logic-full.test.ts src/tests/account-stickiness.test.ts src/tests/accounts-security.test.ts src/tests/advanced.test.ts src/tests/auth-playwright.test.ts src/tests/captcha-solver.test.ts src/tests/cache-scan-regex.test.ts src/tests/chat-cleanup.test.ts src/tests/chat-cleanup-auto.test.ts src/tests/chromium-args.test.ts src/tests/config-current.test.ts src/tests/context-meter.test.ts src/tests/concurrency.test.ts src/tests/delta.test.ts src/tests/fingerprint.test.ts src/tests/human-behavior.test.ts src/tests/index.test.ts src/tests/json-recovery.test.ts src/tests/jsonFix.test.ts src/tests/memory-cache.test.ts src/tests/model-alias.test.ts src/tests/model-registry-thinking.test.ts src/tests/models-endpoint.test.ts src/tests/multimodal.test.ts src/tests/oss-upload.test.ts src/tests/parser.test.ts src/tests/personalization-flow.test.ts src/tests/personalization-required.test.ts src/tests/retry-policy.test.ts src/tests/rotation.test.ts src/tests/server-lifecycle.test.ts src/tests/session-keeper.test.ts src/tests/session-state.test.ts src/tests/single-account-mode.test.ts src/tests/stream-retry.test.ts src/tests/tool-calls-endpoint.test.ts src/tests/tool-instructions-cache.test.ts src/tests/session-id.test.ts src/tests/watchdog-ram.test.ts src/tests/tool-recovery-t1t2.test.ts src/tests/abort-silent-t4.test.ts src/tests/t3-close-tag-escape.test.ts src/tests/t5-tool-cap.test.ts src/tests/logger-redaction.test.ts src/tests/stall-timeout-retryable.test.ts src/tests/t6-missing-quote-array-close.test.ts src/tests/watchdog-rss.test.ts src/tests/logical-thread-batch.test.ts src/tests/chat-pool-style.test.ts src/tests/queue-wait-cap.test.ts src/tests/context-eviction-order.test.ts src/tests/chat-in-progress-settle.test.ts src/tests/stream-lock-leak.test.ts src/tests/stream-semaphore.test.ts src/tests/waf-isolation.test.ts src/tests/legacy-completions.test.ts src/tests/response-format.test.ts src/tests/cors-headers.test.ts src/tests/local-auth.test.ts src/tests/safe-remote-url.test.ts src/tests/stream-lock-terminal-cancel.test.ts src/tests/parser-truncated-tool-call.test.ts src/tests/metrics-prometheus.test.ts src/tests/context-death-cleanup.test.ts src/tests/personalization-direct-fetch.test.ts src/tests/completion-headers-parity.test.ts src/tests/parallel-escape-repro.test.ts src/tests/chat-in-progress-scale-cost.test.ts src/tests/temp-chat-mode.test.ts src/tests/profile-reset.test.ts src/tests/error-classification.test.ts src/tests/quota-cooldown.test.ts src/tests/account-ready-gate.test.ts src/tests/tool-cap-notice.test.ts src/tests/interaction-flows.test.ts src/tests/headers-gate-cooldown-fallback.test.ts src/tests/unwrapped-tool-calls.test.ts src/tests/anthropic.test.ts src/tests/sync-clients.test.ts src/tests/sync-top10-clients.test.ts src/tests/cli.test.ts src/tests/paths.test.ts src/tests/tool-manifest.test.ts src/tests/tui.test.ts src/tests/tui-settings.test.ts src/tests/personalization-deadline.test.ts src/tests/update-cli.test.ts src/tests/batch-accounts.test.ts src/tests/shared-browser.test.ts src/tests/auth-credential-classification.test.ts src/tests/responses-api.test.ts src/tests/media-generation.test.ts src/tests/infer-tool-name.test.ts src/tests/native-session-headers.test.ts src/tests/omni-thinking.test.ts src/tests/protect-stuck-mutex.test.ts src/tests/stream-error-notice.test.ts src/tests/parser-deep-coverage.test.ts src/tests/tui-logs-copy.test.ts",
+    "test:mock:fast": "tsx --test --test-concurrency=2 --env-file=.env.test src/tests/account-concurrency.test.ts src/tests/concurrency-latest-wins.test.ts src/tests/mutex.test.ts src/tests/context-truncation.test.ts src/tests/streaming-thinking-summary.test.ts src/tests/tool-call-guard.test.ts src/tests/utils-logger-full.test.ts src/tests/logger-toolcall-errors.test.ts src/tests/logger-toolcall-disabled.test.ts src/tests/utils-json-full.test.ts src/tests/utils-session-guard-full.test.ts src/tests/core-logic-full.test.ts src/tests/core-logic-accounts.test.ts src/tests/chat-validation-full.test.ts src/tests/chat-logic-full.test.ts src/tests/account-stickiness.test.ts src/tests/accounts-security.test.ts src/tests/advanced.test.ts src/tests/auth-playwright.test.ts src/tests/captcha-solver.test.ts src/tests/cache-scan-regex.test.ts src/tests/chat-cleanup.test.ts src/tests/chat-cleanup-auto.test.ts src/tests/chromium-args.test.ts src/tests/config-current.test.ts src/tests/context-meter.test.ts src/tests/concurrency.test.ts src/tests/delta.test.ts src/tests/fingerprint.test.ts src/tests/human-behavior.test.ts src/tests/index.test.ts src/tests/json-recovery.test.ts src/tests/jsonFix.test.ts src/tests/memory-cache.test.ts src/tests/model-alias.test.ts src/tests/model-registry-thinking.test.ts src/tests/models-endpoint.test.ts src/tests/multimodal.test.ts src/tests/oss-upload.test.ts src/tests/parser.test.ts src/tests/personalization-flow.test.ts src/tests/personalization-required.test.ts src/tests/retry-policy.test.ts src/tests/rotation.test.ts src/tests/server-lifecycle.test.ts src/tests/session-keeper.test.ts src/tests/session-state.test.ts src/tests/single-account-mode.test.ts src/tests/stream-retry.test.ts src/tests/tool-calls-endpoint.test.ts src/tests/tool-instructions-cache.test.ts src/tests/session-id.test.ts src/tests/watchdog-ram.test.ts src/tests/tool-recovery-t1t2.test.ts src/tests/abort-silent-t4.test.ts src/tests/t3-close-tag-escape.test.ts src/tests/t5-tool-cap.test.ts src/tests/logger-redaction.test.ts src/tests/stall-timeout-retryable.test.ts src/tests/t6-missing-quote-array-close.test.ts src/tests/watchdog-rss.test.ts src/tests/logical-thread-batch.test.ts src/tests/chat-pool-style.test.ts src/tests/queue-wait-cap.test.ts src/tests/context-eviction-order.test.ts src/tests/chat-in-progress-settle.test.ts src/tests/stream-lock-leak.test.ts src/tests/stream-semaphore.test.ts src/tests/waf-isolation.test.ts src/tests/legacy-completions.test.ts src/tests/response-format.test.ts src/tests/cors-headers.test.ts src/tests/local-auth.test.ts src/tests/safe-remote-url.test.ts src/tests/stream-lock-terminal-cancel.test.ts src/tests/parser-truncated-tool-call.test.ts src/tests/metrics-prometheus.test.ts src/tests/context-death-cleanup.test.ts src/tests/personalization-direct-fetch.test.ts src/tests/completion-headers-parity.test.ts src/tests/parallel-escape-repro.test.ts src/tests/chat-in-progress-scale-cost.test.ts src/tests/temp-chat-mode.test.ts src/tests/profile-reset.test.ts src/tests/error-classification.test.ts src/tests/quota-cooldown.test.ts src/tests/account-ready-gate.test.ts src/tests/tool-cap-notice.test.ts src/tests/interaction-flows.test.ts src/tests/headers-gate-cooldown-fallback.test.ts src/tests/unwrapped-tool-calls.test.ts src/tests/anthropic.test.ts src/tests/sync-clients.test.ts src/tests/sync-top10-clients.test.ts src/tests/cli.test.ts src/tests/paths.test.ts src/tests/tool-manifest.test.ts src/tests/tui.test.ts src/tests/tui-settings.test.ts src/tests/personalization-deadline.test.ts src/tests/update-cli.test.ts src/tests/batch-accounts.test.ts src/tests/shared-browser.test.ts src/tests/auth-credential-classification.test.ts src/tests/responses-api.test.ts src/tests/media-generation.test.ts src/tests/infer-tool-name.test.ts src/tests/native-session-headers.test.ts src/tests/omni-thinking.test.ts src/tests/protect-stuck-mutex.test.ts src/tests/stream-error-notice.test.ts src/tests/parser-deep-coverage.test.ts src/tests/tui-logs-copy.test.ts",
     "test:live": "tsx --test src/tests/concurrentChat.test.ts src/tests/agenticStress.test.ts",
     "benchmark:proxy": "npx tsx src/benchmarks/proxy-baseline.ts",
     "typecheck": "tsc --noEmit"

package/src/api/server.ts

@@ -22,6 +22,13 @@ import { sendOpenAIError } from "./error-helpers.js";
 import { AuthError, NotFoundError } from "../core/errors.js";
 import type { QwenAccount } from "../core/accounts.js";
 import { isAuthMockEnabled } from "../services/auth-playwright.js";
+import {
+  assertBindAllowed,
+  ensureRuntimeApiKey,
+  getRuntimeApiKey,
+  isLoopbackHost,
+  isPlaceholderApiKey,
+} from "../core/local-auth.ts";
 
 import {
   hookServerConsoleForLogging,
@@ -79,36 +86,58 @@ export function setCacheForTesting(nextCache: MemoryCache | undefined): void {
 
 // Middleware must be registered BEFORE routes
 
-// CORS: browser-based clients (OpenWebUI, web frontends on another origin)
-// preflight before the Authorization header is sent, so OPTIONS short-circuits
-// BEFORE the /v1/* auth middleware. Default is permissive (doc checklist item
-// 2); set CORS_ORIGIN to lock it down.
-const corsOrigin = process.env.CORS_ORIGIN || "*";
+// Explicit CORS configuration wins. Without it, browser clients running on a
+// loopback origin are allowed while arbitrary pages cannot drive the local API.
+function getCorsOrigin(requestOrigin?: string): string {
+  const configured = (process.env.CORS_ORIGIN || "").trim();
+  if (configured) return configured;
+  if (!requestOrigin) return "";
+
+  try {
+    const origin = new URL(requestOrigin);
+    if (
+      (origin.protocol === "http:" || origin.protocol === "https:") &&
+      isLoopbackHost(origin.hostname)
+    ) {
+      return requestOrigin;
+    }
+  } catch {
+    return "";
+  }
+  return "";
+}
+
 app.use("*", async (c, next) => {
-  c.header("Access-Control-Allow-Origin", corsOrigin);
-  c.header(
-    "Access-Control-Allow-Methods",
-    "GET, POST, PUT, PATCH, DELETE, OPTIONS",
-  );
-  c.header(
-    "Access-Control-Allow-Headers",
-    "Authorization, Content-Type, X-Request-Id, x-api-key, OpenAI-Organization, OpenAI-Project, X-Client-Request-Id",
-  );
-  c.header(
-    "Access-Control-Expose-Headers",
-    "X-Request-Id, X-Response-Time, openai-version, openai-processing-ms, x-ratelimit-limit-requests, x-ratelimit-remaining-requests, x-ratelimit-reset-requests, x-ratelimit-limit-tokens, x-ratelimit-remaining-tokens, x-ratelimit-reset-tokens",
-  );
+  const corsOrigin = getCorsOrigin(c.req.header("Origin"));
+  if (corsOrigin) {
+    c.header("Access-Control-Allow-Origin", corsOrigin);
+    c.header("Vary", "Origin");
+    c.header(
+      "Access-Control-Allow-Methods",
+      "GET, POST, PUT, PATCH, DELETE, OPTIONS",
+    );
+    c.header(
+      "Access-Control-Allow-Headers",
+      "Authorization, Content-Type, X-Request-Id, x-api-key, OpenAI-Organization, OpenAI-Project, X-Client-Request-Id, X-QwenProxy-Chat-Mode",
+    );
+    c.header(
+      "Access-Control-Expose-Headers",
+      "X-Request-Id, X-Response-Time, openai-version, openai-processing-ms, x-ratelimit-limit-requests, x-ratelimit-remaining-requests, x-ratelimit-reset-requests, x-ratelimit-limit-tokens, x-ratelimit-remaining-tokens, x-ratelimit-reset-tokens",
+    );
+  }
   if (c.req.method === "OPTIONS") {
-    // Hono does not merge c.header() values into a manually constructed
-    // Response, so the preflight carries its CORS headers explicitly.
+    if (!corsOrigin) {
+      return new Response(null, { status: 204 });
+    }
     return new Response(null, {
       status: 204,
       headers: {
         "Access-Control-Allow-Origin": corsOrigin,
+        Vary: "Origin",
         "Access-Control-Allow-Methods":
           "GET, POST, PUT, PATCH, DELETE, OPTIONS",
         "Access-Control-Allow-Headers":
-          "Authorization, Content-Type, X-Request-Id, x-api-key, OpenAI-Organization, OpenAI-Project, X-Client-Request-Id",
+          "Authorization, Content-Type, X-Request-Id, x-api-key, OpenAI-Organization, OpenAI-Project, X-Client-Request-Id, X-QwenProxy-Chat-Mode",
         "Access-Control-Expose-Headers":
           "X-Request-Id, X-Response-Time, openai-version, openai-processing-ms, x-ratelimit-limit-requests, x-ratelimit-remaining-requests, x-ratelimit-reset-requests, x-ratelimit-limit-tokens, x-ratelimit-remaining-tokens, x-ratelimit-reset-tokens",
       },
@@ -187,7 +216,10 @@ function extractProvidedApiKeys(c: Context): string[] {
 }
 
 function verifyApiKey(c: Context): Response | null {
-  const apiKey = process.env.API_KEY || config.apiKey;
+  const apiKey = (process.env.API_KEY || config.apiKey || "").trim();
+  if (isLoopbackHost(config.server.host) && isPlaceholderApiKey(apiKey)) {
+    return null;
+  }
   if (!apiKey) return null;
 
   const candidates = extractProvidedApiKeys(c);
@@ -286,8 +318,21 @@ for (const [from, to] of LEGACY_REDIRECTS) {
 
 app.get("/health", async (c) => {
   const status = await watchdog?.getStatus();
-  return c.json({
+  const publicBody = {
     status: status?.overall || "unknown",
+    timestamp: Date.now(),
+  };
+  const apiKeyConfigured = Boolean(getRuntimeApiKey() || config.apiKey);
+  const authError = verifyApiKey(c);
+  if (apiKeyConfigured && authError) {
+    return c.json(publicBody);
+  }
+  if (!apiKeyConfigured) {
+    return c.json(publicBody);
+  }
+
+  return c.json({
+    ...publicBody,
     ram: status?.ram || "unknown",
     streams: status?.streams || "unknown",
     heap: status?.heap
@@ -299,7 +344,6 @@ app.get("/health", async (c) => {
           usagePercent: Number(status.heap.usagePercent.toFixed(2)),
         }
       : undefined,
-    timestamp: Date.now(),
     readyAccounts: (await import("../core/account-manager.js")).getHeadersReadyAccountIds(),
     activeAccounts: (await import("../services/playwright.js")).getActivePlaywrightAccountIds(),
     metrics: {
@@ -354,10 +398,14 @@ app.get("/metrics", (c) => {
 });
 
 app.get("/logs", (c) => {
+  const error = verifyApiKey(c);
+  if (error) return error;
   return c.json(getServerLogHistory());
 });
 
 app.get("/logs/live", (c) => {
+  const error = verifyApiKey(c);
+  if (error) return error;
   const encoder = new TextEncoder();
   return c.body(
     new ReadableStream({
@@ -706,9 +754,8 @@ export async function startServer(options?: {
     cache = new MemoryCache();
     await cache.connect();
 
-    if (!config.apiKey && config.server.host === "0.0.0.0") {
-      // API key status will be shown in startup banner
-    }
+    ensureRuntimeApiKey(config.server.host);
+    assertBindAllowed(config.server.host, getRuntimeApiKey() || config.apiKey);
 
     const { loadAccounts, getAccountCredentials } =
       await import("../core/accounts.ts");

package/src/core/accounts.ts

@@ -1,7 +1,10 @@
 import "dotenv/config";
 import crypto from "crypto";
+import fs from "node:fs";
+import path from "node:path";
 import { getDatabase } from "./database.ts";
 import { decrypt, encrypt } from "./crypto-utils.ts";
+import { getAccountProfilePath, getProfilesDir } from "./paths.ts";
 
 export interface QwenAccount {
   id: string;
@@ -121,10 +124,15 @@ function getCachedAccounts(): QwenAccount[] {
     )
     .all() as QwenAccount[];
 
-  accountsCache = rows.map((row) => ({
-    ...row,
-    password: decrypt(row.password),
-  }));
+  accountsCache = rows.map((row) => {
+    let password = "";
+    try {
+      password = decrypt(row.password);
+    } catch {
+      password = "";
+    }
+    return { ...row, password };
+  });
   accountsCacheTime = now;
   return accountsCache;
 }
@@ -308,9 +316,23 @@ export function addAccount(
   return newAccount;
 }
 
+function wipeAccountSessionFiles(id: string): void {
+  const profilePath = getAccountProfilePath(id);
+  try {
+    fs.rmSync(profilePath, { recursive: true, force: true });
+  } catch {}
+  const siblingState = path.join(getProfilesDir(), `${id}_state.json`);
+  try {
+    fs.rmSync(siblingState, { force: true });
+  } catch {}
+}
+
 export function removeAccount(id: string): boolean {
   const db = getDatabase();
   const result = db.prepare("DELETE FROM accounts WHERE id = ?").run(id);
+  if (result.changes > 0) {
+    wipeAccountSessionFiles(id);
+  }
   invalidateAccountsCache();
   return result.changes > 0;
 }

package/src/core/config.ts

@@ -10,7 +10,7 @@ const envSchema = z
         return port >= 1 && port <= 65535;
       }, "PORT must be between 1 and 65535")
       .default("7936"),
-    HOST: z.string().default("0.0.0.0"),
+    HOST: z.string().default("127.0.0.1"),
     INTERNAL_HOST: z.string().default("127.0.0.1"),
     USER_AGENT: z
       .string()

package/src/core/crypto-utils.ts

@@ -67,7 +67,7 @@ export function decrypt(ciphertext: string): string {
     decipher.setAuthTag(authTag);
     return decipher.update(encrypted).toString("utf-8") + decipher.final("utf-8");
   } catch {
-    return ciphertext;
+    throw new Error("Failed to decrypt stored secret");
   }
 }
 

package/src/core/local-auth.ts

@@ -0,0 +1,98 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import { isRunningUnderNodeTest, getEnvFilePath } from "./paths.ts";
+
+export const PLACEHOLDER_API_KEY = "sk-qwenproxy-local";
+
+export function isPlaceholderApiKey(key?: string | null): boolean {
+  const value = (key || "").trim();
+  return value.length === 0 || value === PLACEHOLDER_API_KEY;
+}
+
+export function isLoopbackHost(host: string): boolean {
+  const normalized = host.trim().toLowerCase().replace(/^\[|\]$/g, "");
+  return (
+    normalized === "127.0.0.1" ||
+    normalized === "localhost" ||
+    normalized === "::1" ||
+    normalized === "0:0:0:0:0:0:0:1"
+  );
+}
+
+export function isWildcardBind(host: string): boolean {
+  const normalized = host.trim().toLowerCase();
+  return normalized === "0.0.0.0" || normalized === "::" || normalized === "[::]";
+}
+
+export function getRuntimeApiKey(): string {
+  return (process.env.API_KEY || "").trim();
+}
+
+export function localApiAuthHeaders(): Record<string, string> {
+  const apiKey = getRuntimeApiKey();
+  if (isPlaceholderApiKey(apiKey)) return {};
+  return { Authorization: `Bearer ${apiKey}` };
+}
+
+export function assertBindAllowed(host: string, apiKey: string): void {
+  if (isLoopbackHost(host)) return;
+  if (!isPlaceholderApiKey(apiKey)) return;
+  throw new Error(
+    `❌ [Server] HOST=${host} is reachable beyond loopback and requires a strong API_KEY.` +
+      `\n   Bind 127.0.0.1 for local-only use, or set API_KEY before exposing ${host}.`,
+  );
+}
+
+export function persistApiKey(
+  apiKey: string,
+  envPath = getEnvFilePath(),
+): void {
+  try {
+    const existing = fs.existsSync(envPath)
+      ? fs.readFileSync(envPath, "utf-8")
+      : "";
+    const assignment = /^([ \t]*)API_KEY[ \t]*=[ \t]*(.*)$/m.exec(existing);
+    if (assignment?.[2].trim()) return;
+
+    let updated: string;
+    if (assignment) {
+      const start = assignment.index;
+      const end = start + assignment[0].length;
+      updated =
+        existing.slice(0, start) +
+        `${assignment[1]}API_KEY=${apiKey}` +
+        existing.slice(end);
+    } else {
+      const lineEnding = existing.includes("\r\n") ? "\r\n" : "\n";
+      const prefix =
+        existing.length === 0 || existing.endsWith("\n") ? "" : lineEnding;
+      updated = `${existing}${prefix}API_KEY=${apiKey}${lineEnding}`;
+    }
+
+    fs.writeFileSync(
+      envPath,
+      updated,
+      { encoding: "utf-8", mode: 0o600 },
+    );
+  } catch (err) {
+    console.warn(
+      "⚠️  [Server] Generated API_KEY but could not persist it to .env:",
+      err instanceof Error ? err.message : String(err),
+    );
+  }
+}
+
+export function ensureRuntimeApiKey(host = "127.0.0.1"): string {
+  const existing = getRuntimeApiKey();
+  if (!isPlaceholderApiKey(existing)) return existing;
+  if (isLoopbackHost(host)) return existing;
+  if (isRunningUnderNodeTest()) return existing;
+
+  const generated = `sk-qpx-${crypto.randomBytes(24).toString("base64url")}`;
+  process.env.API_KEY = generated;
+  persistApiKey(generated);
+  console.warn(
+    `🔐 [Server] Generated API_KEY and saved it to ${getEnvFilePath()}. Clients must send this Bearer token.`,
+  );
+  return generated;
+}

package/src/core/safe-remote-url.ts

@@ -0,0 +1,128 @@
+import dns from "node:dns/promises";
+import net from "node:net";
+
+export class UnsafeRemoteUrlError extends Error {
+  constructor(message: string) {
+    super(message);
+    this.name = "UnsafeRemoteUrlError";
+  }
+}
+
+export function isPrivateOrLocalIp(address: string): boolean {
+  const normalized = address.trim().toLowerCase().replace(/^\[|\]$/g, "");
+  if (net.isIP(normalized) === 4) {
+    const parts = normalized.split(".").map((part) => Number(part));
+    if (parts.length !== 4 || parts.some((n) => !Number.isInteger(n) || n < 0 || n > 255)) {
+      return true;
+    }
+    const [a, b] = parts;
+    if (a === 0 || a === 10 || a === 127) return true;
+    if (a === 169 && b === 254) return true;
+    if (a === 172 && b >= 16 && b <= 31) return true;
+    if (a === 192 && b === 168) return true;
+    if (a === 100 && b >= 64 && b <= 127) return true;
+    if (a >= 224) return true;
+    return false;
+  }
+  if (net.isIP(normalized) === 6) {
+    if (normalized === "::" || normalized === "::1") return true;
+    if (normalized.startsWith("fe80:") || normalized.startsWith("ff")) return true;
+    if (normalized.startsWith("fc") || normalized.startsWith("fd")) return true;
+    if (normalized.startsWith("::ffff:")) {
+      return isPrivateOrLocalIp(normalized.slice("::ffff:".length));
+    }
+    return false;
+  }
+  return true;
+}
+
+const BLOCKED_HOSTS = new Set([
+  "localhost",
+  "localhost.localdomain",
+  "metadata.google.internal",
+  "metadata.goog",
+]);
+
+function isBlockedHostname(hostname: string): boolean {
+  const host = hostname.trim().toLowerCase().replace(/\.$/, "");
+  if (!host) return true;
+  if (BLOCKED_HOSTS.has(host)) return true;
+  if (host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal")) {
+    return true;
+  }
+  if (net.isIP(host) && isPrivateOrLocalIp(host)) return true;
+  return false;
+}
+
+export async function assertSafeRemoteMediaUrl(raw: string): Promise<URL> {
+  let parsed: URL;
+  try {
+    parsed = new URL(raw);
+  } catch {
+    throw new UnsafeRemoteUrlError("Remote media URL is not valid");
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+    throw new UnsafeRemoteUrlError(`Blocked media URL protocol: ${parsed.protocol}`);
+  }
+  if (parsed.username || parsed.password) {
+    throw new UnsafeRemoteUrlError("Remote media URL must not include credentials");
+  }
+  const hostname = parsed.hostname.replace(/^\[|\]$/g, "");
+  if (isBlockedHostname(hostname)) {
+    throw new UnsafeRemoteUrlError(`Blocked media URL host: ${hostname}`);
+  }
+
+  const lookupTarget = net.isIP(hostname) ? hostname : parsed.hostname;
+  let records: Array<{ address: string }>;
+  try {
+    records = await dns.lookup(lookupTarget, { all: true });
+  } catch {
+    throw new UnsafeRemoteUrlError(`Could not resolve media URL host: ${hostname}`);
+  }
+  if (records.length === 0) {
+    throw new UnsafeRemoteUrlError(`Could not resolve media URL host: ${hostname}`);
+  }
+  for (const record of records) {
+    if (isPrivateOrLocalIp(record.address)) {
+      throw new UnsafeRemoteUrlError(
+        `Blocked media URL resolved to a private address (${record.address})`,
+      );
+    }
+  }
+  return parsed;
+}
+
+export async function readResponseWithByteCap(
+  response: Response,
+  maxBytes: number,
+): Promise<Buffer> {
+  const contentLength = Number(response.headers.get("content-length") || "0");
+  if (Number.isFinite(contentLength) && contentLength > maxBytes) {
+    throw new Error(`Remote media too large: ${contentLength}`);
+  }
+  if (!response.body) {
+    const buffer = Buffer.from(await response.arrayBuffer());
+    if (buffer.length > maxBytes) {
+      throw new Error(`Remote media too large: ${buffer.length}`);
+    }
+    return buffer;
+  }
+
+  const reader = response.body.getReader();
+  const chunks: Buffer[] = [];
+  let received = 0;
+  while (true) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    if (!value) continue;
+    received += value.byteLength;
+    if (received > maxBytes) {
+      try {
+        await reader.cancel();
+      } catch {}
+      throw new Error(`Remote media too large: ${received}`);
+    }
+    chunks.push(Buffer.from(value));
+  }
+  return Buffer.concat(chunks);
+}

package/src/routes/upload.ts

@@ -10,6 +10,11 @@ import { sendOpenAIError } from "../api/error-helpers.js";
 import { buildQwenRequestHeaders } from "../services/qwen-headers.ts";
 import { qwenUrl } from "../services/qwen-url.ts";
 import { config } from "../core/config.ts";
+import {
+  UnsafeRemoteUrlError,
+  assertSafeRemoteMediaUrl,
+  readResponseWithByteCap,
+} from "../core/safe-remote-url.ts";
 
 // Cache the heavy ali-oss module so we import it once, not on every upload.
 let cachedOSSModule: any = null;
@@ -288,11 +293,15 @@ async function downloadRemoteMedia(url: string): Promise<{
   filename: string;
   mime: string;
 }> {
+  await assertSafeRemoteMediaUrl(url);
+  const headMimeGuess = detectFileType(getFilenameFromUrl(url)).mime;
+  const maxSize = getMaxUploadSize(headMimeGuess);
   const response = await fetch(url, {
     headers: {
       "User-Agent": config.auth.userAgent,
       Accept: "image/*,*/*;q=0.8",
     },
+    redirect: "error",
   });
   if (!response.ok) {
     throw new Error(`Remote media download failed: ${response.status}`);
@@ -312,11 +321,10 @@ async function downloadRemoteMedia(url: string): Promise<{
     );
   }
 
-  const buffer = Buffer.from(await response.arrayBuffer());
-  const maxSize = getMaxUploadSize(detectedMime);
-  if (buffer.length > maxSize) {
-    throw new Error(`Remote media too large: ${buffer.length}`);
-  }
+  const buffer = await readResponseWithByteCap(
+    response,
+    getMaxUploadSize(detectedMime) || maxSize,
+  );
 
   return {
     buffer,
@@ -650,12 +658,14 @@ export async function processImagesForQwen(
           fileUrl = await uploadToOSS(remoteMedia.buffer, stsData, filename);
           fileId = stsData.file_id;
         } catch (err: any) {
+          if (err instanceof UnsafeRemoteUrlError) {
+            console.warn(`[Upload] Blocked unsafe remote media URL: ${err.message}`);
+            continue;
+          }
           console.warn(
-            `[Upload] Failed to re-upload remote media, falling back to source URL: ${err.message}`,
+            `[Upload] Failed to re-upload remote media, skipping attachment: ${err.message}`,
           );
-          fileUrl = mediaUrl;
-          filename = getFilenameFromUrl(mediaUrl);
-          fileId = uuidv4();
+          continue;
         }
       } else if (mediaUrl.startsWith("data:")) {
         try {

package/src/services/playwright.ts

@@ -1463,7 +1463,7 @@ export async function initPlaywrightForAccount(
                 `⚠️  [Playwright] Session expired for ${maskEmail(account.email)}, re-authenticating...`,
               );
               const ok = await loginToQwen(account.id, account.email, account.password);
-              if (!ok) {
+              if (!ok || !(await isPageLoggedIn(acctPage))) {
                 validationError = new Error(
                   `Session expired for ${maskEmail(account.email)} and re-authentication failed`,
                 );
@@ -1848,6 +1848,7 @@ async function loginViaApi(
           const response = await fetch(signinUrl, {
             method: "POST",
             signal: AbortSignal.timeout(10_000),
+            credentials: "include",
             headers: {
               accept: "application/json, text/plain, */*",
               "content-type": "application/json",
@@ -1858,7 +1859,14 @@ async function loginViaApi(
             body: JSON.stringify({ email, password, login_type: "email" }),
           });
           const data = await response.json().catch(() => null);
-          return { ok: response.ok, status: response.status, data };
+          const token = data?.data?.token || data?.token;
+          if (token) {
+            try {
+              localStorage.setItem("token", token);
+              document.cookie = `token=${encodeURIComponent(token)}; path=/; domain=.qwen.ai; max-age=31536000`;
+            } catch {}
+          }
+          return { ok: response.ok, status: response.status, data, token };
         } catch (e: any) {
           return { ok: false, error: e.message };
         }
@@ -1867,12 +1875,12 @@ async function loginViaApi(
     );
 
     if (result.data) {
-      if (result.data.success === true) {
+      if (result.data.success === true || result.token) {
         await page.goto(qwenUrl("/"), {
           waitUntil: "domcontentloaded",
           timeout: config.timeouts.navigation,
         });
-        const loggedIn = !page.url().includes("auth") && !page.url().includes("login");
+        const loggedIn = await isPageLoggedIn(page);
         if (loggedIn) {
           return { success: true };
         }
@@ -1894,13 +1902,12 @@ async function loginViaApi(
         waitUntil: "domcontentloaded",
         timeout: config.timeouts.navigation,
       });
-      const loggedIn = !page.url().includes("auth") && !page.url().includes("login");
+      const loggedIn = await isPageLoggedIn(page);
       return {
         success: loggedIn,
-        reason: loggedIn ? undefined : "Redirecionado de volta para /auth após signin",
+        reason: loggedIn ? undefined : "Sessão não autenticada após signin",
       };
     }
-
     return {
       success: false,
       reason: result.error || `HTTP ${result.status || "desconhecido"} sem corpo JSON válido`,
@@ -1995,6 +2002,8 @@ async function loginViaUi(
     }).catch(() => {});
     // Check for UI error elements in DOM (Ant Design errors, alerts, toasts)
     const errorSelector = [
+      ".qwen-chat-v2-toast-text",
+      ".qwen-chat-v2-toast-content",
       ".ant-form-item-explain-error",
       ".ant-message-error",
       ".ant-message-notice",
@@ -2016,8 +2025,7 @@ async function loginViaUi(
     }
 
     // Check if login was successful
-    const isLoggedIn =
-      !page.url().includes("auth") && !page.url().includes("login");
+    const isLoggedIn = await isPageLoggedIn(page);
 
     if (isLoggedIn) {
       await page.goto(qwenUrl("/"), {
@@ -2289,7 +2297,7 @@ export async function captureQwenHeaders(
             `⚠️  [Playwright] Session expired during header capture for ${accountId}; re-authenticating...`,
           );
           const ok = await loginToQwen(accountId, creds.email, creds.password);
-          if (!ok) {
+          if (!ok || !(await isPageLoggedIn(page))) {
             settle(
               new Error(
                 `Header capture failed for ${accountId}: re-login after session expiry did not succeed`,
@@ -2614,8 +2622,10 @@ async function refreshHeadersInternal(
           const creds = getAccountCredentials(accountId);
           if (creds && creds.email && creds.password) {
             await loginToQwen(accountId, creds.email, creds.password);
-            // Invalidate cookie cache after re-login
             cookieCaches.delete(accountId);
+            if (!(await isPageLoggedIn(page, 5_000))) {
+              throw new Error(`Re-login for ${accountId} did not restore an authenticated session`);
+            }
           } else {
             console.warn(
               `[Playwright] No credentials available for re-login of ${accountId}`,

package/src/sync/index.ts

@@ -6,6 +6,11 @@ import Database from "better-sqlite3";
 
 import { config } from "../core/config.ts";
 import { getSyncStatePath } from "../core/paths.ts";
+import {
+  PLACEHOLDER_API_KEY,
+  isLoopbackHost,
+  isPlaceholderApiKey,
+} from "../core/local-auth.ts";
 import type {
   ClientSyncResult,
   SyncAllOptions,
@@ -46,15 +51,27 @@ export {
   syncAider,
   restoreAider,
 };
-export function resolveApiKey(overrideKey?: string, configKey?: string): string {
+export function resolveApiKey(
+  overrideKey?: string,
+  configKey?: string,
+  host = "127.0.0.1",
+): string {
   if (overrideKey && overrideKey.trim().length > 0) {
+    if (isPlaceholderApiKey(overrideKey) && !isLoopbackHost(host)) {
+      throw new Error(
+        `Refusing to sync clients with placeholder API key ${PLACEHOLDER_API_KEY}. Set API_KEY first.`,
+      );
+    }
     return overrideKey.trim();
   }
   const envKey = process.env.API_KEY || process.env.ADMIN_PASSWORD || configKey;
-  if (envKey && envKey.trim().length > 0) {
+  if (envKey && !isPlaceholderApiKey(envKey)) {
     return envKey.trim();
   }
-  return "sk-qwenproxy-local";
+  if (isLoopbackHost(host)) return PLACEHOLDER_API_KEY;
+  throw new Error(
+    `Refusing to sync clients with placeholder API key ${PLACEHOLDER_API_KEY}. Set API_KEY or start the proxy once to generate one.`,
+  );
 }
 
 export function normalizeClientName(name: string): SyncClientName | null {
@@ -459,7 +476,8 @@ export function syncAllClients(options: SyncAllOptions = {}): SyncAllResult {
   const port = options.port ?? (config.server?.port || 7936);
   const configuredHost = config.server?.host;
   const host = options.host ?? (configuredHost && configuredHost !== "0.0.0.0" ? configuredHost : "127.0.0.1");
-  const apiKey = resolveApiKey(options.apiKey, config.apiKey);
+  const authHost = options.host ?? configuredHost ?? host;
+  const apiKey = resolveApiKey(options.apiKey, config.apiKey, authHost);
   const { anthropicBaseUrl, openaiBaseUrl } = resolveBaseUrls(port, host);
   const stateFilePath = options.stateFilePath || getDefaultStateFilePath();
   const selectedModel = options.model || "qwen3.8-max";
@@ -529,6 +547,7 @@ export function syncAllClients(options: SyncAllOptions = {}): SyncAllResult {
       baseUrl: openaiBaseUrl,
       model: selectedModel,
       models: syncModels,
+      setActive: options.setActive ?? true,
     });
     results.clients.openCode = openCodeRes;
     if (openCodeRes.success && openCodeRes.backupPath) {

package/src/sync/opencode.ts

@@ -121,8 +121,32 @@ function findKeyObjectSpan(content: string, key: string): { start: number; end:
   return null;
 }
 
+function openCodeModelId(model: string): string {
+  return `qwenproxy/${model}`;
+}
+
+function applyOpenCodeActiveModel(
+  content: string,
+  model: string,
+  setActive: boolean,
+): string {
+  if (!setActive) return content;
+  const id = openCodeModelId(model);
+  if (/"model"\s*:/.test(content)) {
+    return content.replace(/"model"\s*:\s*("[^"]*"|'[^']*')/, `"model": "${id}"`);
+  }
+  return content.replace(/\{/, `{\n  "model": "${id}",`);
+}
+
 export function syncOpenCode(options: SyncOptions): ClientSyncResult {
-  const { filePath, apiKey, baseUrl, model = "qwen3.8-max", models } = options;
+  const {
+    filePath,
+    apiKey,
+    baseUrl,
+    model = "qwen3.8-max",
+    models,
+    setActive = true,
+  } = options;
   try {
     fs.mkdirSync(path.dirname(filePath), { recursive: true });
     let backupPath: string | undefined;
@@ -142,11 +166,14 @@ export function syncOpenCode(options: SyncOptions): ClientSyncResult {
     const qwenEntry = `    "qwenproxy": ${providerJson}`;
 
     if (!content.trim()) {
-      const initial = {
+      const initial: Record<string, unknown> = {
         $schema: "https://opencode.ai/config.json",
-        provider: {
-          qwenproxy: providerObj,
-        },
+      };
+      if (setActive) {
+        initial.model = openCodeModelId(model);
+      }
+      initial.provider = {
+        qwenproxy: providerObj,
       };
       fs.writeFileSync(filePath, JSON.stringify(initial, null, 2) + "\n", "utf-8");
     } else {
@@ -179,7 +206,11 @@ export function syncOpenCode(options: SyncOptions): ClientSyncResult {
           }
         }
       }
-      fs.writeFileSync(filePath, content, "utf-8");
+      fs.writeFileSync(
+        filePath,
+        applyOpenCodeActiveModel(content, model, setActive),
+        "utf-8",
+      );
     }
 
     return {

package/src/sync-clients.ts

@@ -1,4 +1,7 @@
-import "dotenv/config";
+process.env.DOTENV_CONFIG_QUIET = "true";
+import fs from "node:fs";
+import dotenv from "dotenv";
+import { ensureDataDirs, getEnvFilePath } from "./core/paths.ts";
 import {
   syncAllClients,
   restoreAllClients,
@@ -8,6 +11,14 @@ import {
 } from "./sync/index.ts";
 import type { SyncClientName } from "./sync/types.ts";
 
+ensureDataDirs();
+const envPath = getEnvFilePath();
+if (fs.existsSync(envPath)) {
+  dotenv.config({ path: envPath, quiet: true });
+} else {
+  dotenv.config({ quiet: true });
+}
+
 function parseArgs() {
   const args = process.argv.slice(2);
   const options: {
@@ -82,7 +93,7 @@ Exemplos:
 Opções:
   --client <nome>    Nome do cliente (hermes, opencode, claude, openclaw, kilo, cline, omp, codex, zed, aider)
   --model <modelo>   Modelo padrão a configurar (padrão: qwen3.8-max)
-  --api-key <chave>  Sobrescrever chave de API (padrão: lê do .env ou usa sk-qwenproxy-local)
+  --api-key <chave>  Sobrescrever chave de API (obrigatória; não usa placeholder)
   --port <porta>     Sobrescrever porta do servidor (padrão: lê do .env ou usa 7936)
   --host <host>      Sobrescrever host do servidor (padrão: 127.0.0.1)
   --no-active        Não definir o modelo ativo como padrão (apenas adiciona o provider)

package/src/tui/proxy-client.ts

@@ -3,6 +3,7 @@
  */
 
 import { config, type ChatMode } from "../core/config.ts";
+import { localApiAuthHeaders } from "../core/local-auth.ts";
 import { loadAccounts, type QwenAccount } from "../core/accounts.ts";
 import {
   getAccountCooldownInfo,
@@ -68,7 +69,10 @@ export async function fetchProxyStatus(): Promise<ProxyStatusSnapshot> {
     isHealthCheckPending = true;
     const controller = new AbortController();
     const timeout = setTimeout(() => controller.abort(), 350);
-    fetch(`http://${host}:${port}/health`, { signal: controller.signal })
+    fetch(`http://${host}:${port}/health`, {
+      signal: controller.signal,
+      headers: localApiAuthHeaders(),
+    })
       .then(async (resp) => {
         clearTimeout(timeout);
         if (resp.ok) {
@@ -246,7 +250,7 @@ export async function streamChatCompletions(
   const port = config.server?.port || 7936;
   const configuredHost = config.server?.host;
   const host = configuredHost && configuredHost !== "0.0.0.0" ? configuredHost : "127.0.0.1";
-  const apiKey = config.apiKey || "sk-qwenproxy-local";
+  const apiKeyHeaders = localApiAuthHeaders();
 
   const startTime = Date.now();
   let ttfbMs = 0;
@@ -258,7 +262,7 @@ export async function streamChatCompletions(
       method: "POST",
       headers: {
         "Content-Type": "application/json",
-        Authorization: `Bearer ${apiKey}`,
+        ...apiKeyHeaders,
         "x-qwenproxy-chat-mode": chatMode,
       },
       body: JSON.stringify({
@@ -360,7 +364,6 @@ export async function fetchLiveModels(forceRefresh = false): Promise<string[]> {
   const port = config.server?.port || 7936;
   const configuredHost = config.server?.host;
   const host = configuredHost && configuredHost !== "0.0.0.0" ? configuredHost : "127.0.0.1";
-  const apiKey = config.apiKey || "sk-qwenproxy-local";
 
   liveModelsPromise = (async () => {
     const controller = new AbortController();
@@ -369,7 +372,7 @@ export async function fetchLiveModels(forceRefresh = false): Promise<string[]> {
     const timeout = setTimeout(() => controller.abort(), timeoutMs);
     try {
       const resp = await fetch(`http://${host}:${port}/v1/models`, {
-        headers: { Authorization: `Bearer ${apiKey}` },
+        headers: { ...localApiAuthHeaders() },
         signal: controller.signal,
       });
       if (resp.ok) {

package/src/tui/server-manager.ts

@@ -4,6 +4,7 @@
  */
 
 import { config } from "../core/config.ts";
+import { localApiAuthHeaders } from "../core/local-auth.ts";
 import { startServer, stopServer } from "../api/server.ts";
 import { stripAnsi } from "./theme.ts";
 
@@ -230,6 +231,7 @@ export class ServerManager {
       const timeout = setTimeout(() => controller.abort(), 600);
       const resp = await fetch(`http://${cleanHost}:${port}/health`, {
         signal: controller.signal,
+        headers: localApiAuthHeaders(),
       });
       clearTimeout(timeout);
       if (resp.ok) {
@@ -295,7 +297,7 @@ export class ServerManager {
       try {
         const resp = await fetch(`http://${host}:${port}/logs/live`, {
           signal: abort.signal,
-          headers: { Accept: "text/event-stream" },
+          headers: { Accept: "text/event-stream", ...localApiAuthHeaders() },
         });
         if (!resp.ok || !resp.body) return;
         const reader = resp.body.getReader();