feat: complete commercial control plane, billing, auth, and model catalog

- add PostgreSQL control-plane persistence with Redis-degraded hot reload
- implement prepaid balance, usage ledger, Stripe top-up and reconciliation
- add registration, email verification, password reset, invitations and RBAC
- support TOTP, Passkey MFA, device sessions, quotas and rate limits
- add tenant billing profiles, audit logs and operational readiness checks
- build authenticated admin console, Quickstart, Playground and usage analytics
- add public model catalog with pricing, filtering and cost estimation
- support OpenAI Responses providers and provider health failover
- validate real upstream usage reporting and balance settlement

1 files changed, 21 insertions, 0 deletions

diff --git a/internal/provider/forwarder_test.go b/internal/provider/forwarder_test.go
index 2e9b4a1..e9751ce 100644
--- a/internal/provider/forwarder_test.go
+++ b/internal/provider/forwarder_test.go
@@ -37,3 +37,24 @@ func TestRewriteRequestDoesNotAddStreamOptionsToAnthropic(t *testing.T) {
 		t.Fatalf("unexpected OpenAI stream options in Anthropic request: %s", result)
 	}
 }
+
+func TestResponsesWireAPIUsesResponsesEndpointWithoutChatStreamOptions(t *testing.T) {
+	result, err := rewriteRequestWithWireAPI([]byte(`{"model":"public/model","input":"hello","stream":true}`), "gpt-upstream", domain.ProtocolOpenAIResponses, "responses")
+	if err != nil {
+		t.Fatal(err)
+	}
+	var body map[string]json.RawMessage
+	if err := json.Unmarshal(result, &body); err != nil {
+		t.Fatal(err)
+	}
+	if string(body["model"]) != `"gpt-upstream"` {
+		t.Fatalf("model was not rewritten: %s", result)
+	}
+	if _, exists := body["stream_options"]; exists {
+		t.Fatalf("Responses request contains Chat Completions stream options: %s", result)
+	}
+	provider := domain.Provider{BaseURL: "https://example.test", Protocol: domain.ProtocolOpenAI, WireAPI: "responses"}
+	if got := endpointURL(provider, domain.ProtocolOpenAIResponses); got != "https://example.test/responses" {
+		t.Fatalf("endpoint URL = %q", got)
+	}
+}