llm-switcher 1.3.5 → 1.3.6

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog — LLM Switcher
 
+## Release 1.3.6
+
+- **Dashboard from a bookmark:** In 1.3.4 the tab kept the token in `sessionStorage`. A bookmark, a typed URL or a new tab then had no token: every call got HTTP 401, and the dashboard showed no profiles and every route as OFF. The token is now in `localStorage`, so after one `switch ui` every tab of that browser works. The page still does not carry the token.
+- **Dashboard without a token:** The header now says to open the dashboard with `switch ui`. Before, it said "Gateway is idle", which looked like a config with no routes.
+
 ## Release 1.3.5
 
 - **Dashboard motion:** The switch, the checkbox, the dialog, the toast and the tooltip used easing curves that overshoot and bounce back. They now use one smooth ease-out curve (`--ease-out`). The durations did not change.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "llm-switcher",
-  "version": "1.3.5",
+  "version": "1.3.6",
   "description": "Zero-dependency multi-protocol edge gateway & provider switcher for Claude Code and Codex, with OpenAI-compatible, Anthropic and Vertex upstreams",
   "keywords": [
     "llm",

package/tests/dashboard.e2e.test.mjs

@@ -24,17 +24,37 @@ describe('dashboard, driven in a real browser', { skip: skipReason() }, () => {
     await page.goto(fx.tokenUrl());
   });
 
-  it('a tab opened without the launcher token says to open the dashboard with switch ui', async () => {
+  // Close the tab itself, then raise the main one: a tab left in the background gets throttled
+  // timers and no animation frames, which stalls every later test.
+  async function closeTab(tab) {
+    await tab.send('Page.close').catch(() => {});
+    tab.close();
+    await page.send('Page.bringToFront');
+  }
+
+  it('a new tab, opened from a bookmark after switch ui ran once, shows the profiles', async () => {
+    const fresh = await browser.newPage();
+    try {
+      await fresh.goto(fx.dashboardUrl + '#/routes');
+      await fresh.waitFor(`document.querySelectorAll('#profiles-grid .pcard').length === ${Object.keys(fx.config().profiles).length}`, 'the profile cards');
+    } finally {
+      await closeTab(fresh);
+    }
+  });
+
+  it('a browser that never got the launcher token says so on the page, not only in a toast', async () => {
     const fresh = await browser.newPage();
     try {
-      await fresh.goto(fx.dashboardUrl);
-      await fresh.waitFor(`/switch ui/.test(document.getElementById('toast')?.textContent || '')`, 'the switch ui hint');
+      await fresh.goto(fx.dashboardUrl + '#/routes');
+      await fresh.evaluate(`localStorage.clear(), sessionStorage.clear()`);
+      await fresh.reload();
+      await fresh.waitFor(`/switch ui/.test(document.getElementById('status-sub')?.textContent || '')`, 'the switch ui hint in the header');
     } finally {
-      // Close the tab itself, then raise the main one: a tab left in the background gets throttled
-      // timers and no animation frames, which stalls every later test.
-      await fresh.send('Page.close').catch(() => {});
-      fresh.close();
-      await page.send('Page.bringToFront');
+      await closeTab(fresh);
+      // The storage is shared by the origin, so the main tab needs the token again. A #hash change
+      // alone fires no load event, so leave the page first.
+      await page.goto('about:blank');
+      await page.goto(fx.tokenUrl());
     }
   });
 

package/ui.html

@@ -1256,12 +1256,13 @@
   <script>
     // State & Globals
     const ADMIN_TOKEN_KEY = 'llm-switcher-admin-token';
-    // The token comes only in the #token of the private launcher that `switch ui` opens, and stays in
-    // this tab. The page itself never carries it: any process on the machine can load /ui.
+    // The token comes only in the #token of the private launcher that `switch ui` opens. The page itself
+    // never carries it: any process on the machine can load /ui. localStorage, not sessionStorage, so a
+    // bookmark or a new tab in the same browser keeps working after one `switch ui`.
     const NO_TOKEN_HINT = 'This tab has no access token. Open the dashboard with `switch ui`.';
     const hashTokenMatch = location.hash.match(/(?:^#|&)token=([0-9a-f]+)/);
     if (hashTokenMatch) {
-      sessionStorage.setItem(ADMIN_TOKEN_KEY, hashTokenMatch[1]);
+      localStorage.setItem(ADMIN_TOKEN_KEY, hashTokenMatch[1]);
     }
     if (hashTokenMatch) {
       history.replaceState(null, '', location.pathname + location.search + '#/routes');
@@ -1289,7 +1290,7 @@
 
     // API Helper
     async function api(path, opts = {}) {
-      const token = sessionStorage.getItem(ADMIN_TOKEN_KEY) || '';
+      const token = localStorage.getItem(ADMIN_TOKEN_KEY) || '';
       const headers = {
         ...opts.headers,
         'x-llm-switcher-token': token
@@ -1461,6 +1462,8 @@
       const subEl = document.getElementById('status-sub');
       const actionsEl = document.getElementById('ph-actions');
       if (!titleEl || !subEl || !actionsEl) return;
+      // Without the token every call is a 401, and the empty state would read as "nothing routed".
+      const noToken = !localStorage.getItem(ADMIN_TOKEN_KEY);
 
       const activeMap = state.activeProfiles || (state.config?.activeProfiles || {});
       const activeTargets = Object.entries(activeMap).filter(([_, v]) => Boolean(v));
@@ -1474,7 +1477,7 @@
           if (activeMap.agy) parts.push('agy: ' + activeMap.agy);
           subEl.textContent = 'Port ' + state.port + ' · Active for ' + parts.join(' · ');
         } else {
-          subEl.textContent = 'Gateway is idle. Clients connect directly to official endpoints.';
+          subEl.textContent = noToken ? NO_TOKEN_HINT : 'Gateway is idle. Clients connect directly to official endpoints.';
         }
         actionsEl.innerHTML = `
           <button class="btn btn-primary" onclick="openProfileModal(true)">+ Add Profile</button>
@@ -2810,7 +2813,7 @@
     }
 
     document.addEventListener('DOMContentLoaded', () => {
-      if (!sessionStorage.getItem(ADMIN_TOKEN_KEY)) showToast(NO_TOKEN_HINT, true);
+      if (!localStorage.getItem(ADMIN_TOKEN_KEY)) showToast(NO_TOKEN_HINT, true);
       // Setup initial theme buttons state
       const currentTheme = document.documentElement.dataset.theme || 'dark';
       document.getElementById('btn-theme-dark')?.setAttribute('aria-pressed', currentTheme === 'dark');