free-coding-models 0.5.5 → 0.5.6

package/README.md

@@ -169,14 +169,17 @@ and every TUI capability that's safe to port ships behind a button or chip.
 | **Filter bar** | Sticky right below the header (always visible) · Tier / Status / Verdict / Health chip rows · Visibility dropdown (Normal / Configured only / Usable only) · Provider select · custom text filter chip with `X` clear · Reset button (TUI `N`) · ping mode (Speed / Normal / Slow / Forced) · "next ping in Xs" countdown (TUI style, always shown) |
 | **Stats bar** | Removed in M1 (users found it noisy; the table + chips carry the same info at a glance) |
 | **Detail panel** | Slide-in from the right on row click · per-row benchmark button (TUI `Ctrl+A`) · favorite toggle (TUI `F`) + up/down reorder (TUI `Shift+↑↓`) · latency trend chart · all stats |
-| **Command palette** | `⌘K` / `Ctrl+P` (the only global keyboard shortcut) · fuzzy search across views, theme, ping mode, reset, export |
+| **Command palette** | `⌘K` / `Ctrl+P` (the only global keyboard shortcut) · fuzzy search across views, theme, ping mode, reset, export, **and the full TUI command registry** (every filter / sort / tool / page entry from `src/tui/command-palette.js`) |
 | **Keyboard** | `Esc` closes any modal · `Cmd+K` toggles the palette — that's it. Everything else is mouse-first. |
-| **URL deep-linking** | `?tier=S+&sort=verdict&origin=groq&view=dashboard&q=…` hydrates the dashboard on load. CLI flags become shareable links. |
+| **URL deep-linking** | `?tier=S+&sort=verdict&origin=groq&view=dashboard&q=…` hydrates the dashboard on load **and** every filter / sort / view change is reflected back in the URL (debounced 80ms, `history.replaceState`). CLI flags become shareable links. |
 | **Favorites** | Shared with the TUI through `~/.free-coding-models.json` — a star in the Web is a star in the TUI. Includes pinned+sticky display mode (TUI `Y`). |
+| **Help modal** | Header overflow menu → "Help" opens a full-screen modal with all the TUI's keyboard shortcuts, filter behavior, and parity notes. Live search bar. |
+| **Changelog modal** | Header overflow menu → "Changelog" or Settings "Open Changelog" link. Two-phase (index of versions + per-version release notes). Deep-linkable to a specific version. |
+| **Update flow** | Header `⬆ vX.Y.Z` chip + popover with "Update now" + "What's new" (jumps to the new version's changelog entry). Polls every 5 min. |
+| **Settings parity** | Full Settings page: theme (auto/dark/light), favorites pinned mode, startup AI Speed Scan, shell env export, legacy proxy cleanup, per-provider **Test** key button (TUI `T` key), update row. All settings persisted to the same `~/.free-coding-models.json` the TUI uses. |
 | **Theme** | Tri-state `auto / dark / light` cycle (TUI `G`) — auto follows the OS preference. |
 
-Roadmap items (header menu badges show "M2 / M3 / M4" until they land):
-- **M2** — Help modal, Changelog viewer, Settings parity (theme toggle, test key, shell-env, legacy cleanup, startup AI scan), Update flow, URL write-back, full command palette backed by the TUI registry.
+Roadmap items (header menu badges show "M3 / M4" until they land):
 - **M3** — Smart Recommend (3-question wizard → 10s analysis → Top 3), tool mode picker, per-row Launch, missing-tool install prompt, incompatible-fallback modal.
 - **M4** — Router Dashboard, Token Usage, Install Endpoints wizard, Installed Models manager.
 
@@ -511,7 +514,7 @@ When a tool mode is active (via `Z`), models incompatible with that tool are hig
 - **Readable everywhere** — semantic theme palette keeps table rows, overlays, badges, and help screens legible in dark and light terminals
 - **Global theme switch** — `G` cycles `auto`, `dark`, + `light` live without restarting
 - **Auto-retry** — timeout models keep getting retried
-- **Aggressive update nudging** — fluorescent green banner when an update is available, impossible to miss, Shift+U hotkey, command palette entry, background re-check every 5 min, mid-session updates the banner live without restarting
+- **Mandatory self-update policy** — startup checks npm for a newer FCM and installs it automatically without a prompt. If the install fails twice in a row (offline, proxy, or permissions), FCM still starts but shows a red outdated-version warning until the user retries with `Shift+U` or runs the displayed install command.
 - **Last release timestamp** — light pink footer shows `Last release: Mar 27, 2026, 09:42 PM` from npm so users know how fresh the data is
 
 ---

package/bin/free-coding-models.js

@@ -72,6 +72,12 @@ async function main() {
 
   if (startupUpdate.updated) return;
   if (startupUpdate.blocked) process.exit(1);
+  if (startupUpdate.allowedOutdated) {
+    process.env.FCM_UPDATE_ALLOWED_OUTDATED = '1';
+    process.env.FCM_UPDATE_LATEST_VERSION = startupUpdate.latestVersion || '';
+    process.env.FCM_UPDATE_WARNING_MESSAGE = startupUpdate.warningMessage || '';
+    process.env.FCM_UPDATE_FAILURES = String(startupUpdate.failures || 0);
+  }
 
   // 📖 Standalone web dashboard: same full-catalog ping UI as the TUI, served
   // 📖 locally with Socket.IO/SSE/REST realtime updates.

package/changelog/v0.5.5.md

@@ -1,6 +1,7 @@
 # Changelog v0.5.5 - 2026-06-01
 
 ### Changed
+- 🔒 **Mandatory self-update policy**: FCM now checks npm at startup across the TUI, Web Dashboard, Docker/daemon, and Desktop sidecar paths, then installs newer releases automatically without asking the user. If automatic installation fails twice in a row, FCM stops blocking startup and shows a red outdated-version warning so offline/proxy/permission users can still work while clearly seeing that their model catalog may be stale.
 - ⬆️ **deps-dev**: bump `vite` from `8.0.14` → `8.0.16` (#105)
 - ⬆️ **deps-dev**: bump `vite-plus` from `0.1.20` → `0.1.23` (#106)
 - ⬆️ **deps-dev**: bump `@vitejs/plugin-react` from `6.0.1` → `6.0.2` (#107)

package/changelog/v0.5.6.md

@@ -0,0 +1,24 @@
+# Changelog v0.5.6 - 2026-06-01
+
+### Added
+- **Web Dashboard M2 — Settings parity + full command palette + URL write-back + help / changelog / update** — the local Web Dashboard now mirrors the TUI for the everyday flow on every view it ships today.
+  - **Full command palette (TUI registry 1:1)** — `⌘K` / `Ctrl+P` opens a fuzzy-searchable palette that pulls every command from `src/tui/command-palette.js` (filters, sorts, target tools, theme, ping, reset, export, plus Web-only pages). Commands without a Web equivalent route to a friendly "arrives in M3/M4" toast.
+  - **Help modal** — Header overflow menu → "Help" opens a full-screen modal with 11 sections of Web behavior + TUI parity notes. Live search bar.
+  - **Changelog modal** — Two-phase (index of versions + per-version release notes). Settings "Open Changelog" link and the update chip "What's new" button both deep-link to a specific version.
+  - **Update chip + popover** — Header shows `⬆ vX.Y.Z` when a newer npm release is available. Click → "Update now" (spawns the package manager) + "What's new" (jumps to the new version's changelog entry). Polls every 5 minutes.
+  - **Full Settings parity** — theme dropdown (auto / dark / light), favorites pinned+sticky toggle, startup AI Speed Scan toggle, shell env export toggle, legacy proxy cleanup button, **per-provider Test key button** (TUI `T` key) with outcome badge, update status row, open Changelog link. All settings persist to the same `~/.free-coding-models.json` the TUI uses.
+  - **URL write-back (read + write)** — every filter / sort / view / tool-mode / palette state change is reflected back to the URL via `history.replaceState` (debounced 80ms). Sharing a URL with `?tier=S+&sort=verdict&origin=groq&view=analytics&q=…` opens a pre-filtered dashboard.
+
+### Changed
+- **Web command palette upgraded** from M1's static placeholder to a fully wired palette that imports `buildCommandPaletteEntries` + `filterCommandPaletteEntries` from the TUI engine — both surfaces are now guaranteed to show the same command set.
+- **Header menu** marks `Help` and `Changelog` as live (no more `M2` badge). `Recommend` (M3), `Router` (M4), `Install Endpoints` (M4), and `Installed Models` (M4) still badge.
+
+### Fixed
+- 🐛 **TUI Changelog overlay was silently broken** — `src/core/changelog-loader.js` resolved `changelog/` relative to `src/` instead of the project root. Fix walks up two levels. The TUI's `N` key and the new Web Changelog modal both load 142 versioned changelog files now.
+- 🐛 **`/api/key/:provider/test` and `/api/key/:provider` were colliding** — the general single-segment key match ate the two-segment test path. The test path is now matched at the top of the request handler so the two routes coexist.
+- 🐛 **`/api/settings/feature` only handled booleans** — passing a string (e.g. `theme=dark`) silently fell into the toggle branch and saved `true`. The endpoint now accepts arbitrary `value` payloads (string, number, boolean) and only toggles when `value` is omitted.
+
+### Notes
+- All 451 unit tests pass (was 440 before M2). The new M2 tests cover `buildUrlParams`, the URL state validation allowlists, and import-cleanly smoke tests for the three new React hooks.
+- The TUI source of truth is untouched — every new Web feature uses the same engine modules (`src/core/changelog-loader.js`, `src/core/updater.js`, `src/core/legacy-proxy-cleanup.js`, `src/core/shell-env.js`, `src/tui/command-palette.js`).
+- This release is the Web Dashboard reaching parity with the TUI for the day-to-day table flow. M3 ships the tool-mode picker + Smart Recommend; M4 ships the Router Dashboard + Token Usage.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "free-coding-models",
-  "version": "0.5.5",
+  "version": "0.5.6",
   "description": "Find the fastest coding LLM models in seconds — ping free models from multiple providers, pick the best one for OpenCode, Cursor, or any AI coding assistant.",
   "keywords": [
     "nvidia",
@@ -75,10 +75,10 @@
     "node": ">=18.0.0"
   },
   "devDependencies": {
-    "@vitejs/plugin-react": "^6.0.1",
+    "@vitejs/plugin-react": "^6.0.2",
     "react": "^19.2.6",
     "react-dom": "^19.2.6",
-    "vite": "^8.0.13",
-    "vite-plus": "^0.1.16"
+    "vite": "^8.0.16",
+    "vite-plus": "^0.1.23"
   }
 }

package/src/core/changelog-loader.js

@@ -20,7 +20,11 @@ import { fileURLToPath } from 'url'
 
 const __filename = fileURLToPath(import.meta.url)
 const __dirname = dirname(__filename)
-const CHANGELOG_DIR = join(__dirname, '..', 'changelog')
+// 📖 Resolve the project-root changelog directory. The loader lives at
+// 📖 src/core/, so we walk up two levels to reach the project root, then
+// 📖 into changelog/. (A previous version only walked up one level and
+// 📖 ended up pointing at src/changelog/, which never existed.)
+const CHANGELOG_DIR = join(__dirname, '..', '..', 'changelog')
 
 /**
  * 📖 loadChangelog: Read and parse all per-version changelog files

package/src/core/router-daemon.js

@@ -353,6 +353,16 @@ function getWebModelsPayload(runtime) {
   return payload
 }
 
+function getWebUpdateStatusPayload() {
+  if (process.env.FCM_UPDATE_ALLOWED_OUTDATED !== '1') return null
+  return {
+    latestVersion: process.env.FCM_UPDATE_LATEST_VERSION || null,
+    allowedOutdated: true,
+    warningMessage: process.env.FCM_UPDATE_WARNING_MESSAGE || null,
+    failures: Number.parseInt(process.env.FCM_UPDATE_FAILURES || '0', 10) || 0,
+  }
+}
+
 function getWebStatePayload(runtime) {
   const router = runtime.routerConfig()
   const probeInterval = router.probeIntervals?.[router.probeMode] || DEFAULT_ROUTER_SETTINGS.probeIntervals.balanced
@@ -366,6 +376,7 @@ function getWebStatePayload(runtime) {
     globalBenchmarkRunning: runtime.webGlobalBenchmarkRunning || false,
     globalBenchmarkTotal: runtime.webGlobalBenchmarkTotal || 0,
     globalBenchmarkCompleted: runtime.webGlobalBenchmarkCompleted || 0,
+    updateStatus: getWebUpdateStatusPayload(),
     models: getWebModelsPayload(runtime),
   }
 }