Feat/dynamic linux cert paths

.env.example

@@ -54,6 +54,12 @@ STORAGE_ENCRYPTION_KEY_VERSION=v1
 # Default: false (backups enabled)  |  Set true to skip backup on every restart.
 DISABLE_SQLITE_AUTO_BACKUP=false
 
+# ── Redis (Rate Limiting) ──
+# Redis connection URL for the rate limiter backend.
+# Used by: src/shared/utils/rateLimiter.ts
+# Default: redis://localhost:6379 (or redis://redis:6379 in Docker)
+REDIS_URL=redis://localhost:6379
+
 
 # ═══════════════════════════════════════════════════════════════════════════════
 # 3. NETWORK & PORTS
@@ -387,6 +393,13 @@ ANTIGRAVITY_OAUTH_CLIENT_SECRET=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
 # ── GitHub Copilot ──
 GITHUB_OAUTH_CLIENT_ID=Iv1.b507a08c87ecfe98
 
+# ── GitLab Duo ──
+# Register an OAuth app at: https://gitlab.com/-/profile/applications
+# Set redirect URI to: http://localhost:20128/callback (or your NEXT_PUBLIC_BASE_URL + /callback)
+# Required scopes: api, read_user, openid, profile, email
+# GITLAB_DUO_OAUTH_CLIENT_ID=***
+# GITLAB_DUO_OAUTH_CLIENT_SECRET=***  # optional — PKCE flow does not require a secret
+
 # ── Qoder ──
 QODER_OAUTH_CLIENT_SECRET=4Z3YjXycVsQvyGF1etiNlIBB4RsqSDtW
 
@@ -447,15 +460,15 @@ QODER_OAUTH_CLIENT_SECRET=4Z3YjXycVsQvyGF1etiNlIBB4RsqSDtW
 # Used by: open-sse/executors/base.ts — buildHeaders() dynamic lookup.
 # Update these when providers release new CLI versions to avoid blocks.
 
-CLAUDE_USER_AGENT=claude-cli/2.1.121 (external, cli)
-CODEX_USER_AGENT=codex-cli/0.125.0 (Windows 10.0.26100; x64)
-GITHUB_USER_AGENT=GitHubCopilotChat/0.45.1
-ANTIGRAVITY_USER_AGENT=antigravity/1.107.0 darwin/arm64
-KIRO_USER_AGENT=AWS-SDK-JS/3.0.0 kiro-ide/1.0.0
-QODER_USER_AGENT=Qoder-Cli
-QWEN_USER_AGENT=QwenCode/0.15.3 (linux; x64)
-CURSOR_USER_AGENT=connect-es/1.6.1
-GEMINI_CLI_USER_AGENT=google-api-nodejs-client/10.3.0
+CLAUDE_USER_AGENT="claude-cli/2.1.137 (external, cli)"
+CODEX_USER_AGENT="codex-cli/0.130.0 (Windows 10.0.26200; x64)"
+GITHUB_USER_AGENT="GitHubCopilotChat/0.45.1"
+ANTIGRAVITY_USER_AGENT="antigravity/1.23.2 darwin/arm64"
+KIRO_USER_AGENT="AWS-SDK-JS/3.0.0 kiro-ide/1.0.0"
+QODER_USER_AGENT="Qoder-Cli"
+QWEN_USER_AGENT="QwenCode/0.15.9 (linux; x64)"
+CURSOR_USER_AGENT="Cursor/3.3"
+GEMINI_CLI_USER_AGENT="google-api-nodejs-client/10.3.0"
 
 
 # ═══════════════════════════════════════════════════════════════════════════════

.github/workflows/build-fork.yml

@@ -1,6 +1,8 @@
 name: Build Fork Image (ghcr.io)
 
 on:
+  push:
+    branches: [main]
   workflow_dispatch:
 
 permissions:
@@ -15,7 +17,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v6
         with:
-          ref: fix/xiaomi-mimo-provider
+          ref: main
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
@@ -35,7 +37,6 @@ jobs:
           platforms: linux/amd64
           push: true
           tags: |
-            ghcr.io/gi99lin/omniroute:fix-xiaomi-mimo-provider
             ghcr.io/gi99lin/omniroute:latest
           cache-from: type=gha
           cache-to: type=gha,mode=max

.gitignore

@@ -61,6 +61,7 @@ next-env.d.ts
 data/
 .data/
 logs/*
+test_output.log
 
 # analysis directories (generated, not tracked)
 .analysis/