**refactor(cliproxy, config): remove vertex-compat flow, streamline Vertex API key handling**

- Removed `vertex-compat` executor and related configuration.
- Consolidated Vertex compatibility checks into `vertex` handling with `apikey`-based model resolution.
- Streamlined model generation logic for Vertex API key entries.

internal/config/vertex_compat.go

@@ -55,7 +55,7 @@ func (cfg *Config) SanitizeVertexCompatKeys() {
 		}
 		entry.BaseURL = strings.TrimSpace(entry.BaseURL)
 		if entry.BaseURL == "" {
-			// BaseURL is required for vertex-compat keys
+			// BaseURL is required for Vertex API key entries
 			continue
 		}
 		entry.ProxyURL = strings.TrimSpace(entry.ProxyURL)

internal/runtime/executor/gemini_vertex_executor.go

@@ -44,22 +44,6 @@ func NewGeminiVertexExecutor(cfg *config.Config) *GeminiVertexExecutor {
 // Identifier returns provider key for manager routing.
 func (e *GeminiVertexExecutor) Identifier() string { return "vertex" }
 
-// GeminiVertexCompatExecutor is a thin wrapper around GeminiVertexExecutor
-// that provides the correct identifier for vertex-compat routing.
-type GeminiVertexCompatExecutor struct {
-	*GeminiVertexExecutor
-}
-
-// NewGeminiVertexCompatExecutor constructs the Vertex-compatible executor.
-func NewGeminiVertexCompatExecutor(cfg *config.Config) *GeminiVertexCompatExecutor {
-	return &GeminiVertexCompatExecutor{
-		GeminiVertexExecutor: NewGeminiVertexExecutor(cfg),
-	}
-}
-
-// Identifier returns provider key for manager routing.
-func (e *GeminiVertexCompatExecutor) Identifier() string { return "vertex-compat" }
-
 // PrepareRequest is a no-op for Vertex.
 func (e *GeminiVertexExecutor) PrepareRequest(_ *http.Request, _ *cliproxyauth.Auth) error {
 	return nil
@@ -393,7 +377,6 @@ func (e *GeminiVertexExecutor) executeWithServiceAccount(ctx context.Context, au
 }
 
 // executeWithAPIKey handles authentication using API key credentials.
-// This method follows the vertex-compat pattern for API key authentication.
 func (e *GeminiVertexExecutor) executeWithAPIKey(ctx context.Context, auth *cliproxyauth.Auth, req cliproxyexecutor.Request, opts cliproxyexecutor.Options, apiKey, baseURL string) (resp cliproxyexecutor.Response, err error) {
 	reporter := newUsageReporter(ctx, e.Identifier(), req.Model, auth)
 	defer reporter.trackFailure(ctx, &err)

internal/watcher/watcher.go

@@ -986,7 +986,7 @@ func (w *Watcher) reloadClients(rescanAuth bool, affectedOAuthProviders []string
 
 	w.refreshAuthState()
 
-	log.Infof("full client load complete - %d clients (%d auth files + %d Gemini API keys + %d Vertex-compat keys + %d Claude API keys + %d Codex keys + %d OpenAI-compat)",
+	log.Infof("full client load complete - %d clients (%d auth files + %d Gemini API keys + %d Vertex API keys + %d Claude API keys + %d Codex keys + %d OpenAI-compat)",
 		totalNewClients,
 		authFileCount,
 		geminiAPIKeyCount,
@@ -1273,18 +1273,18 @@ func (w *Watcher) SnapshotCoreAuths() []*coreauth.Auth {
 		}
 	}
 
-	// Process Vertex compatibility providers
+	// Process Vertex API key providers (Vertex-compatible endpoints)
 	for i := range cfg.VertexCompatAPIKey {
 		compat := &cfg.VertexCompatAPIKey[i]
-		providerName := "vertex-compat"
+		providerName := "vertex"
 		base := strings.TrimSpace(compat.BaseURL)
 
 		key := strings.TrimSpace(compat.APIKey)
 		proxyURL := strings.TrimSpace(compat.ProxyURL)
-		idKind := fmt.Sprintf("vertex-compatibility:%s", base)
+		idKind := fmt.Sprintf("vertex:apikey:%s", base)
 		id, token := idGen.next(idKind, key, base, proxyURL)
 		attrs := map[string]string{
-			"source":       fmt.Sprintf("config:vertex-compatibility[%s]", token),
+			"source":       fmt.Sprintf("config:vertex-apikey[%s]", token),
 			"base_url":     base,
 			"provider_key": providerName,
 		}
@@ -1298,13 +1298,14 @@ func (w *Watcher) SnapshotCoreAuths() []*coreauth.Auth {
 		a := &coreauth.Auth{
 			ID:         id,
 			Provider:   providerName,
-			Label:      "Vertex Compatibility",
+			Label:      "vertex-apikey",
 			Status:     coreauth.StatusActive,
 			ProxyURL:   proxyURL,
 			Attributes: attrs,
 			CreatedAt:  now,
 			UpdatedAt:  now,
 		}
+		applyAuthExcludedModelsMeta(a, cfg, nil, "apikey")
 		out = append(out, a)
 	}