fix(compression): honor the sent engine config in engine previews

.env.example

@@ -2488,6 +2488,13 @@ APP_LOG_TO_FILE=true
 # never used for routing). "true" (or 1, yes) enables it.
 # PROXY_POOL_EGRESS_OBSERVATION=false
 
+# Opt-in: skip the scheduler probe for proxies already proven by recent
+# production traffic (single provider, no recent proxy failure). Default: off.
+# PROXY_HEALTH_PASSIVE_SKIP=false
+# Window in ms of production traffic the passive skip looks at (60000..599999).
+# Default: 300000 (5min).
+# PROXY_PASSIVE_WINDOW_MS=300000
+
 # Allow OAuth and provider validation flows to bypass a pinned proxy and connect
 # directly when proxy reachability pre-checks fail. Default: false.
 # Also configurable from Dashboard > Settings > Feature Flags.
@@ -3017,6 +3024,8 @@ APP_LOG_TO_FILE=true
 # OMNIROUTE_TRANSLATION_MODEL=gpt-4o-mini
 # Per-request timeout in milliseconds (default 60000).
 # OMNIROUTE_TRANSLATION_TIMEOUT_MS=60000
+# Optional reasoning control, sent as-is to the translation backend when set (e.g. none).
+# OMNIROUTE_TRANSLATION_REASONING_EFFORT=
 # Number of parallel translation requests (default 4).
 # OMNIROUTE_TRANSLATION_CONCURRENCY=4
 

.github/workflows/nightly-compat.yml

@@ -27,6 +27,7 @@ concurrency:
 
 jobs:
   resolve-branch:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     name: Resolve active release branch
     runs-on: ubuntu-latest
     outputs:
@@ -57,6 +58,7 @@ jobs:
           echo "target=$TARGET" >> "$GITHUB_OUTPUT"
 
   compat-build-26:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     name: Node 26 Compatibility Build
     runs-on: ubuntu-latest
     timeout-minutes: 25
@@ -87,6 +89,7 @@ jobs:
           OMNIROUTE_USE_TURBOPACK: "0"
 
   compat-tests:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     name: Node ${{ matrix.node }} Compat Tests (${{ matrix.shard }}/4)
     runs-on: ubuntu-latest
     timeout-minutes: 25
@@ -117,7 +120,7 @@ jobs:
   report:
     name: Open / update tracking issue on failure
     runs-on: ubuntu-latest
-    if: ${{ !cancelled() && (needs.compat-tests.result == 'failure' || needs.compat-build-26.result == 'failure') }}
+    if: ${{ (!cancelled() && (needs.compat-tests.result == 'failure' || needs.compat-build-26.result == 'failure')) && (github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute') }}
     needs: [resolve-branch, compat-build-26, compat-tests]
     permissions:
       issues: write

.github/workflows/nightly-llm-security.yml

@@ -9,6 +9,7 @@ permissions:
 
 jobs:
   promptfoo-guard:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     name: promptfoo — injection guard (block mode, no secret)
     # #11965: this job runs a backend-only `next build`; the hosted 7 GB runner cannot build
     # release/v3.8.51 (VM shutdown ~7 min in), so it targets the box's light pool (`omni-light`:
@@ -56,6 +57,7 @@ jobs:
         run: kill "$(cat server.pid)" || true
 
   garak:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     name: garak probes (skip without provider secret)
     # #11965: this job runs a backend-only `next build`; the hosted 7 GB runner cannot build
     # release/v3.8.51 (VM shutdown ~7 min in), so it targets the box's light pool (`omni-light`:

.github/workflows/nightly-mutation.yml

@@ -9,6 +9,7 @@ permissions:
 
 jobs:
   stryker:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     name: Stryker mutation (batch ${{ matrix.batch.name }} — advisory)
     runs-on: ubuntu-latest
     # Mutation testing is expensive. History of the budget:
@@ -144,7 +145,7 @@ jobs:
   mutation-ratchet:
     name: Mutation score ratchet (blocking)
     needs: stryker
-    if: always()
+    if: ${{ always() && (github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute') }}
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:

.github/workflows/nightly-property.yml

@@ -8,6 +8,7 @@ permissions:
   issues: write
 jobs:
   property-random-seed:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7

.github/workflows/nightly-release-green.yml

@@ -65,7 +65,7 @@ jobs:
     name: Validate active release branch
     # On a push, only run for release/* pushes — a push to main is handled by the
     # main-green job below. Schedule/dispatch always run (they validate the highest release).
-    if: ${{ github.event_name != 'push' || startsWith(github.ref_name, 'release/') }}
+    if: ${{ (github.event_name != 'push' || startsWith(github.ref_name, 'release/')) && (github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute') }}
     # Dynamic runner: with USE_VPS_RUNNER=true (release window / on-demand pre-flight)
     # this runs on the dedicated VPS runner — clean env (no operator OMNIROUTE_API_KEY,
     # no local noauth CLIs => zero machine-specific false positives) and no contention.
@@ -275,7 +275,7 @@ jobs:
     name: Validate main branch
     # On a push, only run for a push to main — a push to release/* is handled by
     # release-green above. Schedule/dispatch always run (they also sweep main).
-    if: ${{ github.event_name != 'push' || github.ref_name == 'main' }}
+    if: ${{ (github.event_name != 'push' || github.ref_name == 'main') && (github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute') }}
     runs-on: ${{ (vars.USE_VPS_RUNNER == 'true' && fromJSON('["self-hosted","omni-build"]')) || 'ubuntu-latest' }}
     env:
       JWT_SECRET: ci-nightly-secret-with-sufficient-length-for-validation
@@ -436,7 +436,7 @@ jobs:
   # walk each time. Detection stays on push (release-green above); banking is batched.
   bank-ratchet-shrinks:
     name: Bank ratchet shrinks
-    if: ${{ github.event_name != 'push' }}
+    if: ${{ github.event_name != 'push' && (github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute') }}
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -567,7 +567,7 @@ jobs:
   # first red PR. Advisory: never fails the workflow.
   baseline-headroom:
     name: Baseline headroom
-    if: ${{ github.event_name != 'push' }}
+    if: ${{ github.event_name != 'push' && (github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute') }}
     timeout-minutes: 60
     runs-on: ${{ (vars.USE_VPS_RUNNER == 'true' && fromJSON('["self-hosted","omni-light"]')) || 'ubuntu-latest' }}
     permissions:

.github/workflows/nightly-resilience.yml

@@ -9,6 +9,7 @@ permissions:
 
 jobs:
   heap:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     name: Heap-growth gate
     runs-on: ubuntu-latest
     steps:
@@ -23,6 +24,7 @@ jobs:
       - run: npm run test:heap
 
   chaos:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     name: Resilience chaos (fault injection)
     runs-on: ubuntu-latest
     steps:
@@ -37,6 +39,7 @@ jobs:
       - run: npm run test:chaos
 
   k6-soak:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     name: k6 load/soak
     runs-on: ubuntu-latest
     steps:
@@ -77,6 +80,7 @@ jobs:
         run: kill "$(cat server.pid)" || true
 
   a11y:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     name: A11y axe (nightly, freeze-and-alert)
     # #11965: this job runs a backend-only `next build`; the hosted 7 GB runner cannot build
     # release/v3.8.51 (VM shutdown ~7 min in), so it targets the box's light pool (`omni-light`:

.github/workflows/nightly-schemathesis.yml

@@ -9,6 +9,7 @@ permissions:
 
 jobs:
   schemathesis:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     name: Schemathesis — OpenAPI contract fuzz (advisory)
     # #11965: this job runs a backend-only `next build`; the hosted 7 GB runner cannot build
     # release/v3.8.51 (VM shutdown ~7 min in), so it targets the box's light pool (`omni-light`:

.github/workflows/quality.yml

@@ -230,16 +230,20 @@ jobs:
             route-guard-membership test-discovery test-runner-api
             mutation-test-coverage any-budget:t11 build-scope pack-policy
             complexity-ratchets model-lifecycle
-            cycles lockfile duplication dead-code type-coverage compression-budget
+            lockfile duplication dead-code type-coverage compression-budget
             # #8781: open-sse workspace typecheck gate — the workspace imports @/ which
             # escapes to src/ via undeclared path aliases. See check-open-sse-typecheck.mjs.
             open-sse-typecheck
             # Hard Rule #16 — AI/bot attribution in PR commits, title or body (#14436). Reads the PR
             # from GITHUB_EVENT_PATH; no-op on non-PR events. ci.yml only runs on PRs to main.
             ai-attribution
           )
+          # Ratchet-mode gates append --ratchet. `cycles` belongs here since #15281
+          # (69cb18dca8): check-cycles.mjs exits 1 on ANY cycle without --ratchet, and
+          # the frozen ceiling lives in quality-baseline.json → metrics.cycles — same
+          # `check:cycles:ratchet` semantics ci.yml runs (base-red #15306).
           ratchet_gates=(
-            secrets vuln-ratchet workflows openapi-breaking
+            secrets vuln-ratchet workflows openapi-breaking cycles
           )
           failed=()
           for g in "${gates[@]}"; do

.github/workflows/radar-export.yml

@@ -39,6 +39,7 @@ env:
 
 jobs:
   publish-export:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     runs-on: ubuntu-latest
     permissions:
       contents: write # gh release upload — clobra o asset estável do export

.github/workflows/scorecard.yml

@@ -12,7 +12,7 @@ permissions: read-all
 
 jobs:
   analysis:
-    if: ${{ github.event_name != 'push' || github.ref == format('refs/heads/{0}', github.event.repository.default_branch) }}
+    if: ${{ (github.event_name != 'push' || github.ref == format('refs/heads/{0}', github.event.repository.default_branch)) && (github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute') }}
     name: Scorecard analysis
     runs-on: ubuntu-latest
     permissions:

.github/workflows/test-quarantine.yml

@@ -15,6 +15,7 @@ concurrency:
 
 jobs:
   quarantine:
+    if: ${{ github.event_name != 'schedule' || github.repository == 'diegosouzapw/OmniRoute' }}
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps: