[HTExplicit]

Adds native gateway borrowing for OpenAI OAuth targets using one qualified source __oailb, with separate qualification for each target and actual gpt-6-astra / gpt-6.1-sol model. The feature defaults off and is managed under Extensions; credentials, target exits, account mappings and existing WS capacity keep their current owners.

• Pin the borrowed protocol to ranxi2001/sub2api 5ca3cca21eeaf4ca8a694a7f2f8f0ecd9575c549: sequential 90-second source acquisition, a maximum 230-second Cookie lease, two 45-second target observations and 15-second failure cooldowns. Valid cache lookup precedes the global validation lock.
• Apply borrowing to finalized HTTP/SSE requests before zstd and to both pooled and direct native WS entries. Gate on the resolved model without rereading the business body. Preserve fixed one-hour WS anchors and protect them from idle eviction; Cookie expiry does not close established connections.
• Isolate source and target HTTP/TLS transports from business capacity. All observations are neutral to account health, quota and scheduling; successful credential refresh remains available. Local preparation failures retain ordinary switch-account handling without same-account replay or health penalties, and preparation time is outside business first-output deadlines.
• Add one-request-per-account/model manual pelican comparisons using only matching cached qualification, three shared generation slots and per-account serialization. Migration 275 adds isolated 24-hour task/result tables. Timestamped UUIDv7 replay protection survives result cleanup without permanent tombstones.
• Render authored HTML in small side-by-side capability-backed documents with an opaque script-enabled sandbox and a dedicated CSP supporting external resources. Keep complete raw answers, source and errors; do not grade, repair or regenerate them.

Validation: focused synthetic Go contracts for qualification, model/credential isolation, cancellation, HTTP/TLS capacity, WS anchors and neutral failure handling; one real disposable PostgreSQL lifecycle test; application cleanup wiring; new frontend API/preview/view tests; targeted ESLint, locale completeness, Vue type checking and production build; new-code golangci-lint v2.13.0. Built SPA browser QA used synthetic local accounts/history/HTML and verified three wide-screen cards, mobile layout, inline/external JS and origin/storage isolation.

No real model calls or IP probes were made. Normal required CI remains in place; release and production deployment will reuse admitted validation. First deployment keeps the feature disabled.