diff --git a/src/app/api/dashboard/route.ts b/src/app/api/dashboard/route.ts
index f1a2112..940b71b 100644
--- a/src/app/api/dashboard/route.ts
+++ b/src/app/api/dashboard/route.ts
@@ -80,8 +80,8 @@ function countStatuses(leads: any[]) {
   return counts
 }
 
-function buildMonthlyBreakdown(leads: any[], period: string) {
-  const { start, end } = getPeriodDateRange(period)
+function buildMonthlyBreakdown(leads: any[], period: string, rangeOverride?: { start: Date; end: Date }) {
+  const { start, end } = rangeOverride || getPeriodDateRange(period)
   const result: { label: string; total: number; open: number; contacted: number; pending: number; closed: number; ignored: number }[] = []
   const current = new Date(start)
   const isMonthly = period === "6months" || period === "12months"
@@ -170,7 +170,7 @@ export async function GET(request: NextRequest) {
       updatedAt: r.updated_at,
     }))
 
-    const monthlyBreakdown = buildMonthlyBreakdown(currentLeads, period)
+    const monthlyBreakdown = buildMonthlyBreakdown(currentLeads, period, yearParam ? { start, end } : undefined)
 
     const trends = {
       totalLeads: computeTrend(currentCounts.open + currentCounts.contacted + currentCounts.pending + currentCounts.closed + currentCounts.ignored,
diff --git a/src/app/api/system/monitor/route.ts b/src/app/api/system/monitor/route.ts
index 0051f42..baecb2e 100644
--- a/src/app/api/system/monitor/route.ts
+++ b/src/app/api/system/monitor/route.ts
@@ -8,9 +8,6 @@ let prevTime = Date.now()
 export async function GET() {
   const sessionUser = await getSessionUser()
   if (!sessionUser) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
-  if (sessionUser.role !== "admin" && sessionUser.role !== "super_admin") {
-    return NextResponse.json({ error: "Forbidden" }, { status: 403 })
-  }
 
   const now = Date.now()
   const elapsed = now - prevTime