zevairouter 1.0.128 → 1.0.129

package/src/app/(dashboard)/dashboard/endpoint/EndpointPageClient.js

@@ -59,6 +59,9 @@ export default function APIPageClient({ machineId }) {
   const [confirmState, setConfirmState] = useState(null);
   const [keyPending, setKeyPending] = useState(null);
   const [keyStatus, setKeyStatus] = useState(null);
+  // Which keys are currently unmasked in the UI + cached secrets after reveal
+  const [visibleKeys, setVisibleKeys] = useState(() => new Set());
+  const [revealedSecrets, setRevealedSecrets] = useState(() => ({}));
 
   const [requireApiKey, setRequireApiKey] = useState(false);
   const [requireLogin, setRequireLogin] = useState(true);
@@ -659,6 +662,10 @@ export default function APIPageClient({ machineId }) {
       const data = await res.json();
       if (!res.ok) throw new Error(data.error || `Failed to create key (${res.status})`);
       setCreatedKey(data.key);
+      // Cache secret so the eye/copy controls work immediately after create
+      if (data.id && data.key) {
+        setRevealedSecrets((prev) => ({ ...prev, [data.id]: data.key }));
+      }
       await fetchData();
       setNewKeyName("");
       setShowAddModal(false);
@@ -688,6 +695,12 @@ export default function APIPageClient({ machineId }) {
             next.delete(id);
             return next;
           });
+          setRevealedSecrets((prev) => {
+            if (!(id in prev)) return prev;
+            const next = { ...prev };
+            delete next[id];
+            return next;
+          });
           setKeyStatus({ type: "success", message: "API key deleted" });
         } catch (error) {
           setKeyStatus({ type: "error", message: error.message });
@@ -744,6 +757,58 @@ export default function APIPageClient({ machineId }) {
     return fullKey.length > 8 ? fullKey.slice(0, 8) + "..." : fullKey;
   };
 
+  const displayKeyValue = (key) => {
+    if (visibleKeys.has(key.id) && revealedSecrets[key.id]) {
+      return revealedSecrets[key.id];
+    }
+    return key.maskedKey || maskKey(key.key) || "••••••••";
+  };
+
+  const ensureSecret = async (keyId) => {
+    if (revealedSecrets[keyId]) return revealedSecrets[keyId];
+    const res = await fetch(`/api/keys/${keyId}?reveal=1`, { cache: "no-store" });
+    const data = await res.json().catch(() => ({}));
+    if (!res.ok) throw new Error(data.error || `Failed to reveal key (${res.status})`);
+    const secret = data.key?.key || data.key;
+    if (typeof secret !== "string" || !secret) {
+      throw new Error("Key secret is not available");
+    }
+    setRevealedSecrets((prev) => ({ ...prev, [keyId]: secret }));
+    return secret;
+  };
+
+  const toggleKeyVisibility = async (keyId) => {
+    if (visibleKeys.has(keyId)) {
+      setVisibleKeys((prev) => {
+        const next = new Set(prev);
+        next.delete(keyId);
+        return next;
+      });
+      return;
+    }
+    try {
+      await ensureSecret(keyId);
+      setVisibleKeys((prev) => {
+        const next = new Set(prev);
+        next.add(keyId);
+        return next;
+      });
+      setKeyStatus(null);
+    } catch (error) {
+      setKeyStatus({ type: "error", message: error.message });
+    }
+  };
+
+  const handleCopyKey = async (keyId) => {
+    try {
+      const secret = await ensureSecret(keyId);
+      copy(secret, keyId);
+      setKeyStatus(null);
+    } catch (error) {
+      setKeyStatus({ type: "error", message: error.message });
+    }
+  };
+
   const [baseUrl, setBaseUrl] = useState("/v1");
 
   // Hydration fix: Only access window on client side
@@ -1093,10 +1158,32 @@ export default function APIPageClient({ machineId }) {
               >
                 <div className="flex-1 min-w-0">
                   <p className="text-sm font-medium">{key.name}</p>
-                  <div className="flex items-center gap-2 mt-1">
-                    <code className="text-xs text-text-muted font-mono">
-                      {key.maskedKey || maskKey(key.key)}
+                  <div className="flex items-center gap-2 mt-1 min-w-0">
+                    <code className="text-xs text-text-muted font-mono truncate max-w-[min(100%,28rem)]">
+                      {displayKeyValue(key)}
                     </code>
+                    <button
+                      type="button"
+                      onClick={() => toggleKeyVisibility(key.id)}
+                      className="p-1 hover:bg-black/5 dark:hover:bg-white/5 rounded text-text-muted hover:text-primary opacity-100 sm:opacity-0 sm:group-hover:opacity-100 transition-all shrink-0"
+                      title={visibleKeys.has(key.id) ? "Hide key" : "Show key"}
+                      aria-label={visibleKeys.has(key.id) ? "Hide API key" : "Show API key"}
+                    >
+                      <span className="material-symbols-outlined text-[14px]">
+                        {visibleKeys.has(key.id) ? "visibility_off" : "visibility"}
+                      </span>
+                    </button>
+                    <button
+                      type="button"
+                      onClick={() => handleCopyKey(key.id)}
+                      className="p-1 hover:bg-black/5 dark:hover:bg-white/5 rounded text-text-muted hover:text-primary opacity-100 sm:opacity-0 sm:group-hover:opacity-100 transition-all shrink-0"
+                      title="Copy key"
+                      aria-label="Copy API key"
+                    >
+                      <span className="material-symbols-outlined text-[14px]">
+                        {copied === key.id ? "check" : "content_copy"}
+                      </span>
+                    </button>
                   </div>
                   <p className="text-xs text-text-muted mt-1">
                     Created {new Date(key.createdAt).toLocaleDateString()}

package/src/app/api/cli-tools/codex-settings/route.js

@@ -130,7 +130,7 @@ export async function POST(request) {
 
     // Update only ZevaiRouter related fields (api_key goes to auth.json, not config.toml)
     parsed.model = model;
-    parsed.model_provider = "zevairouter";
+    parsed.model_provider = "zevai";
 
     // Update or create zevairouter provider section (no api_key - Codex reads from auth.json)
     // Ensure /v1 suffix is added only once
@@ -197,7 +197,7 @@ export async function DELETE() {
     }
 
     // Remove ZevaiRouter related root fields only if they point to zevairouter
-    if (parsed.model_provider === "zevairouter") {
+    if (parsed.model_provider === "zevai" || parsed.model_provider === "zevairouter") {
       delete parsed.model;
       delete parsed.model_provider;
     }

package/src/app/api/keys/[id]/route.js

@@ -2,10 +2,12 @@ import { NextResponse } from "next/server";
 import { deleteApiKey, getApiKeyById, updateApiKey } from "@/lib/localDb";
 
 // GET /api/keys/[id] - Get single key
+// ?reveal=1 returns the full secret (dashboard auth only — used by eye toggle)
 export async function GET(request, { params }) {
   try {
     const { id } = await params;
-    const key = await getApiKeyById(id);
+    const reveal = new URL(request.url).searchParams.get("reveal") === "1";
+    const key = await getApiKeyById(id, reveal);
     if (!key) {
       return NextResponse.json({ error: "Key not found" }, { status: 404 });
     }

package/src/lib/db/repos/apiKeysRepo.js

@@ -38,10 +38,10 @@ export async function getApiKeys(includeSecrets = false) {
   return rows.map((row) => rowToKey(row, includeSecrets));
 }
 
-export async function getApiKeyById(id) {
+export async function getApiKeyById(id, includeSecret = false) {
   const db = await getAdapter();
   const row = db.get(`SELECT * FROM apiKeys WHERE id = ?`, [id]);
-  return rowToKey(row);
+  return rowToKey(row, includeSecret);
 }
 
 export async function createApiKey(name, machineId) {

package/src/shared/components/Modal.js

@@ -19,6 +19,11 @@ export default function Modal({
   const titleId = useId();
   const dialogRef = useRef(null);
   const restoreFocusRef = useRef(null);
+  // Keep latest onClose without re-running the open-focus effect when parents
+  // pass inline handlers (common). Otherwise each parent re-render (e.g. typing
+  // into a controlled input) re-focuses the first button and steals the caret.
+  const onCloseRef = useRef(onClose);
+  onCloseRef.current = onClose;
   const sizes = {
     sm: "max-w-sm",
     md: "max-w-md",
@@ -27,6 +32,11 @@ export default function Modal({
     full: "max-w-4xl",
   };
 
+  const FOCUSABLE_SELECTOR =
+    'button:not([disabled]), [href], input:not([disabled]), select:not([disabled]), textarea:not([disabled]), [tabindex]:not([tabindex="-1"])';
+  const FIELD_SELECTOR =
+    'input:not([disabled]):not([type="hidden"]):not([type="button"]):not([type="submit"]):not([type="checkbox"]):not([type="radio"]), textarea:not([disabled]), select:not([disabled])';
+
   useEffect(() => {
     if (!isOpen) return;
 
@@ -35,21 +45,19 @@ export default function Modal({
     document.body.style.overflow = "hidden";
 
     const dialog = dialogRef.current;
-    const focusable = dialog?.querySelector(
-      'button:not([disabled]), [href], input:not([disabled]), select:not([disabled]), textarea:not([disabled]), [tabindex]:not([tabindex="-1"])'
-    );
+    // Prefer a text field so create/edit forms land focus where the user types.
+    const preferred = dialog?.querySelector(FIELD_SELECTOR);
+    const focusable = preferred || dialog?.querySelector(FOCUSABLE_SELECTOR);
     (focusable || dialog)?.focus();
 
     const handleKeyDown = (event) => {
       if (event.key === "Escape") {
-        onClose();
+        onCloseRef.current?.();
         return;
       }
       if (event.key !== "Tab" || !dialog) return;
 
-      const focusableElements = [...dialog.querySelectorAll(
-        'button:not([disabled]), [href], input:not([disabled]), select:not([disabled]), textarea:not([disabled]), [tabindex]:not([tabindex="-1"])'
-      )];
+      const focusableElements = [...dialog.querySelectorAll(FOCUSABLE_SELECTOR)];
       if (!focusableElements.length) {
         event.preventDefault();
         dialog.focus();
@@ -70,9 +78,9 @@ export default function Modal({
     return () => {
       document.body.style.overflow = previousOverflow;
       document.removeEventListener("keydown", handleKeyDown);
-      restoreFocusRef.current?.focus();
+      restoreFocusRef.current?.focus?.();
     };
-  }, [isOpen, onClose]);
+  }, [isOpen]);
 
   if (!isOpen) return null;
 

package/src/shared/constants/cliTools.js

@@ -356,7 +356,7 @@ amp --model "{{model}}"
     defaultModels: [
       { id: "claude-opus-4-7", name: "Claude Opus 4.7", alias: "opus", defaultValue: "cc/claude-opus-4-7" },
       { id: "claude-sonnet-4-6", name: "Claude Sonnet 4.6", alias: "sonnet", defaultValue: "cc/claude-sonnet-4-6" },
-      { id: "gpt-5.5", name: "GPT 5.5", alias: "gpt5", defaultValue: "cx/gpt-5.5" },
+      { id: "gpt-5.6", name: "GPT 5.6", alias: "gpt5", defaultValue: "cx/gpt-5.6" },
       { id: "gemini-3.1-pro", name: "Gemini 3.1 Pro", alias: "gemini", defaultValue: "gemini/gemini-3.1-pro" },
     ],
   },

package/src/shared/constants/pricing.js

@@ -52,6 +52,14 @@ export const MODEL_PRICING = {
   "gpt-5.3-codex-low":           { input: 4.00,  output: 16.00, cached: 2.00,  reasoning: 24.00,  cache_creation: 4.00  },
   "gpt-5.3-codex-none":          { input: 3.00,  output: 12.00, cached: 1.50,  reasoning: 18.00,  cache_creation: 3.00  },
   "gpt-5.3-codex-spark":         { input: 3.00,  output: 12.00, cached: 0.30,  reasoning: 12.00,  cache_creation: 3.00  },
+  // GPT-5.6 family (Sol/Terra/Luna) — OpenAI list prices per 1M tokens
+  "gpt-5.6":                     { input: 5.00,  output: 30.00, cached: 0.50,  reasoning: 30.00,  cache_creation: 6.25  },
+  "gpt-5.6-sol":                 { input: 5.00,  output: 30.00, cached: 0.50,  reasoning: 30.00,  cache_creation: 6.25  },
+  "gpt-5.6-terra":               { input: 2.50,  output: 15.00, cached: 0.25,  reasoning: 15.00,  cache_creation: 3.125 },
+  "gpt-5.6-luna":                { input: 1.00,  output: 6.00,  cached: 0.10,  reasoning: 6.00,   cache_creation: 1.25  },
+  "gpt-5.5":                     { input: 5.00,  output: 30.00, cached: 0.50,  reasoning: 30.00,  cache_creation: 6.25  },
+  "gpt-5.4":                     { input: 2.50,  output: 15.00, cached: 0.25,  reasoning: 15.00,  cache_creation: 3.125 },
+  "gpt-5.4-mini":                { input: 0.75,  output: 4.50,  cached: 0.075, reasoning: 4.50,   cache_creation: 0.9375 },
   "o1":                           { input: 15.00, output: 60.00, cached: 7.50,  reasoning: 90.00,  cache_creation: 15.00 },
   "o1-mini":                      { input: 3.00,  output: 12.00, cached: 1.50,  reasoning: 18.00,  cache_creation: 3.00  },
 

package/src/sse/services/codexGateway.js

@@ -1,7 +1,7 @@
 import { getProviderConnections, getSettings } from "@/lib/localDb";
 import { PROVIDER_MODELS } from "open-sse/config/providerModels.js";
 
-export const CODEX_GATEWAY_DEFAULT_MODEL = "gpt-5.5";
+export const CODEX_GATEWAY_DEFAULT_MODEL = "gpt-5.6";
 export const CODEX_GATEWAY_ACCOUNT_LIMIT = 5000;
 
 function cleanSegment(value) {