fix(resilience): stop hammering permanently-moved endpoints and billing-suspended accounts

.env.example

@@ -612,11 +612,9 @@ CLOUD_URL=
 # Default: http://localhost:20128
 NEXT_PUBLIC_BASE_URL=http://localhost:20128
 
-# Browser-facing OmniRoute origin for generated assets in API responses.
-# Highest-priority public origin override; also used by non-dashboard public-origin validation.
-# Used by: chatgpt-web image generation cache URLs (/v1/chatgpt-web/image/<id>).
-# Set this when OpenWebUI or another relay reaches OmniRoute by an internal URL
-# but the user's browser must fetch images from a LAN, tunnel, or public origin.
+# Highest-priority OmniRoute public origin override, also used by non-dashboard
+# public-origin validation. Set it when external clients reach OmniRoute through
+# a stable LAN, tunnel, or public origin that differs from its internal URL.
 # Do not include /v1; if included accidentally it will be normalized away.
 # OMNIROUTE_PUBLIC_BASE_URL=http://192.168.0.15:20128
 
@@ -629,28 +627,6 @@ NEXT_PUBLIC_BASE_URL=http://localhost:20128
 # Used by: open-sse/config/providerPluginManifestUrl.ts. Defaults to http.
 # OMNIROUTE_PUBLIC_PROTOCOL=http
 
-# Max wait time for an async chatgpt-web image to land via the celsius
-# WebSocket, in milliseconds. Default 180000 (3 minutes). Increase during
-# upstream queue-deep windows ("Lots of people are creating images right now").
-# OMNIROUTE_CGPT_WEB_IMAGE_TIMEOUT_MS=180000
-
-# Total in-memory byte budget for the chatgpt-web image cache (used to serve
-# /v1/chatgpt-web/image/<id>), in megabytes. Default 256. Lower this if you
-# run OmniRoute on a memory-constrained host; raise it if image generation
-# is heavy and clients are racing the 30-minute TTL.
-# OMNIROUTE_CGPT_WEB_IMAGE_CACHE_MAX_MB=256
-
-# Overall wait budget for a chatgpt-web GPT-5.5 Pro background-poll handoff,
-# in milliseconds. Default 1200000 (20 minutes). Pro reasoning runs are slow
-# and complete out-of-band, so OmniRoute polls until the answer lands or this
-# budget elapses. Raise it if Pro requests time out before finishing.
-# OMNIROUTE_CGPT_WEB_PRO_TIMEOUT_MS=1200000
-
-# Interval between chatgpt-web GPT-5.5 Pro background-poll attempts, in
-# milliseconds. Default 4000 (4 seconds). Lower for snappier completion at the
-# cost of more upstream polling; raise to reduce request volume.
-# OMNIROUTE_CGPT_WEB_PRO_POLL_INTERVAL_MS=4000
-
 # Public cloud URL — client-side mirror of CLOUD_URL.
 NEXT_PUBLIC_CLOUD_URL=
 
@@ -1037,6 +1013,13 @@ PROVIDER_LIMITS_SYNC_SPACING_MS=1500
 # to disable the check. Used by: src/lib/db/migrationRunner.ts.  Default: 50.
 #OMNIROUTE_MAX_PENDING_MIGRATIONS=50
 
+# Working directory for the check:install-upgrade release gate. It builds two ~3 GB
+# install trees plus a ~275 MB tarball, so it needs roughly 12 GB — more than the
+# 12 GB RAM-backed tmpfs that /tmp is on the self-hosted runner, where it exhausted
+# the tmpfs and npm silently truncated the package. Defaults to <repo>/.install-upgrade
+# on real disk. Used by: scripts/check/check-install-upgrade.mjs.  Default: <repo>/.install-upgrade.
+#OMNIROUTE_INSTALL_UPGRADE_WORKDIR=/var/tmp/omniroute-install-upgrade
+
 # Trust user-managed RTK project filter rules without strict signature checks.
 # Used by: open-sse/services/compression/engines/rtk/filterLoader.ts.  Default: 0.
 #OMNIROUTE_RTK_TRUST_PROJECT_FILTERS=0
@@ -1256,17 +1239,6 @@ GITHUB_OAUTH_CLIENT_ID=Iv1.b507a08c87ecfe98
 # VISION_BRIDGE_BASE_URL=
 # VISION_BRIDGE_API_KEY=
 
-# ── Raycast Pro (local auto-import) ──
-# Raycast Pro AI is a reverse-engineered, unofficial API — local/personal use
-# only (no OAuth client_id/secret; token is captured via macOS Auto-Import
-# from the Keychain + local Raycast SQLite DB, or pasted manually). These
-# vars are optional manual overrides used by open-sse/services/raycast.ts
-# and the direct-probe benchmark script scripts/raycast/usage-benchmark.mjs.
-# RAYCAST_BEARER_TOKEN=
-# RAYCAST_DEVICE_ID=
-# RAYCAST_AID=
-# RAYCAST_SIG_SECRET=
-
 # ─────────────────────────────────────────────────────────────────────────────
 # ⚠️  GOOGLE OAUTH (Antigravity) & OTHER PROVIDERS — REMOTE SERVERS
 # ─────────────────────────────────────────────────────────────────────────────
@@ -1483,17 +1455,6 @@ CURSOR_USER_AGENT="Cursor/3.4"
 # FIRECRAWL_BASE_URL=https://api.firecrawl.dev
 # FIRECRAWL_TIMEOUT_MS=30000            # Per-request timeout (default: 30000 = 30s)
 
-# ── ChatGPT TLS sidecar (Firefox-fingerprinted client) ──
-# Used by: open-sse/services/chatgptTlsClient.ts — wire-level timeout for
-# the bogdanfinn/tls-client koffi binding and the JS-side grace window
-# layered on top of it when the native library is wedged.
-# OMNIROUTE_CHATGPT_TLS_TIMEOUT_MS=60000
-# OMNIROUTE_CHATGPT_TLS_GRACE_MS=10000
-# Max wait for the FIRST streamed byte from the ChatGPT TLS sidecar before the
-# request is aborted as a dead stream, in milliseconds. Default 30000 (30s).
-# Raise it if upstream cold-starts routinely exceed the window.
-# OMNIROUTE_CHATGPT_STREAM_FIRST_BYTE_TIMEOUT_MS=30000
-
 # ── Claude TLS sidecar (Chromium-fingerprinted client) ──
 # Used by: open-sse/services/claudeTlsClient.ts — wire-level timeout for
 # the bogdanfinn/tls-client koffi binding and the JS-side grace window
@@ -1941,12 +1902,6 @@ APP_LOG_TO_FILE=true
 # Base backoff after a transient 408 response (ms); five attempts maximum.
 # ADOBE_FIREFLY_SUBMIT_BASE_DELAY_MS=8000
 
-# ── Microsoft Designer Web (Image Generation) ──
-# Polling config for the microsoft-designer-web submit-then-poll image job.
-# Used by: open-sse/handlers/imageGeneration/providers/designerWeb.ts
-# DESIGNER_WEB_POLL_TIMEOUT_MS=60000   # Max wait for job completion (default: 60s)
-# DESIGNER_WEB_POLL_INTERVAL_MS=2000   # Poll frequency (default: 2s)
-
 # ── Adobe Firefly (Image Upscale) ──
 # Base delay (ms) for the submit-retry exponential backoff when Adobe Firefly's
 # upscale job submission is rate-limited. Used by:
@@ -2566,11 +2521,6 @@ APP_LOG_TO_FILE=true
 # Used by: src/lib/jobs/backupScheduleJob.ts
 # OMNIROUTE_BACKUP_SCHEDULE_JOB_INTERVAL_MS=30000
 
-# ── TLS sidecar override ──
-# Used by: open-sse/services/chatgptTlsClient.ts tests. Production deployments
-# should leave this unset; the sidecar is auto-managed.
-# OMNIROUTE_TLS_PROXY_URL=
-
 # ── Skills sandbox (experimental) ──
 # Used by: src/lib/skills/builtins.ts. All values support comma lists where
 # noted in the source.
@@ -3073,3 +3023,11 @@ QUOTA_STORE_DRIVER=sqlite
 # corpus-aware retrieval. Higher values keep more index entries hot.
 # Used by: src/lib/localCorpus/configured.ts
 # OMNIROUTE_CORPUS_CACHE_SIZE=5
+
+# Service-worker cache-busting id for the PWA shell (#11779). NEXT_PUBLIC_SW_BUILD_ID is
+# derived at build time from OMNIROUTE_SW_BUILD_ID, then SOURCE_VERSION (set by some PaaS
+# builders), then the git SHA — override only when the build cannot see git. Used by:
+# next.config.mjs, scripts/build/assembleStandalone.mjs, src/shared/components/PwaRegister.tsx.
+#OMNIROUTE_SW_BUILD_ID=2026-08-28T12-00-00
+#SOURCE_VERSION=abcdef0123456789
+#NEXT_PUBLIC_SW_BUILD_ID=abcdef0123456789

.github/workflows/build.yml

@@ -1,9 +1,16 @@
 name: Build App
 
+# Manual-only since #11946. The hosted 7 GB runner can no longer build this tree — 19 of
+# the last 30 runs died with "The runner has received a shutdown signal" (VM out of
+# memory) ~8 min into `next build`, release/v3.8.51 itself included, even with the 10 GB
+# swapfile below. Triggered on `push: branches: ["**"]` it painted every branch and every
+# PR red while producing an artefact nothing downloads. The bundle is validated where a
+# build actually fits:
+#   - main:       ci.yml `Build` (self-hosted omni-build pool) on every merge
+#   - release/**: nightly-release-green.yml (same pool, continuous)
+# Dispatch this workflow by hand when a hosted build artefact is genuinely needed.
 on:
   workflow_dispatch:
-  push:
-    branches: ["**"]
 
 permissions:
   contents: read