Validate submitted keys against the protected research endpoint instead of the nonexistent versioned health path. Replace server-only redirects in client code with SvelteKit navigation and route successful logins to the existing new-research screen.
Align frontend research history and creation calls with the backend response contract: list items are wrapped in items and new runs return research_id.