llm-switcher 1.3.5 → 1.3.7

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog — LLM Switcher
 
+## Release 1.3.7
+
+- **Update notice in time:** The gateway kept the npm answer for 12 hours. A release published after the last check did not show an update button until the next day. It now asks npm again after 5 minutes.
+
+## Release 1.3.6
+
+- **Dashboard from a bookmark:** In 1.3.4 the tab kept the token in `sessionStorage`. A bookmark, a typed URL or a new tab then had no token: every call got HTTP 401, and the dashboard showed no profiles and every route as OFF. The token is now in `localStorage`, so after one `switch ui` every tab of that browser works. The page still does not carry the token.
+- **Dashboard without a token:** The header now says to open the dashboard with `switch ui`. Before, it said "Gateway is idle", which looked like a config with no routes.
+
 ## Release 1.3.5
 
 - **Dashboard motion:** The switch, the checkbox, the dialog, the toast and the tooltip used easing curves that overshoot and bounce back. They now use one smooth ease-out curve (`--ease-out`). The durations did not change.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "llm-switcher",
-  "version": "1.3.5",
+  "version": "1.3.7",
   "description": "Zero-dependency multi-protocol edge gateway & provider switcher for Claude Code and Codex, with OpenAI-compatible, Anthropic and Vertex upstreams",
   "keywords": [
     "llm",

package/tests/dashboard.e2e.test.mjs

@@ -24,17 +24,37 @@ describe('dashboard, driven in a real browser', { skip: skipReason() }, () => {
     await page.goto(fx.tokenUrl());
   });
 
-  it('a tab opened without the launcher token says to open the dashboard with switch ui', async () => {
+  // Close the tab itself, then raise the main one: a tab left in the background gets throttled
+  // timers and no animation frames, which stalls every later test.
+  async function closeTab(tab) {
+    await tab.send('Page.close').catch(() => {});
+    tab.close();
+    await page.send('Page.bringToFront');
+  }
+
+  it('a new tab, opened from a bookmark after switch ui ran once, shows the profiles', async () => {
+    const fresh = await browser.newPage();
+    try {
+      await fresh.goto(fx.dashboardUrl + '#/routes');
+      await fresh.waitFor(`document.querySelectorAll('#profiles-grid .pcard').length === ${Object.keys(fx.config().profiles).length}`, 'the profile cards');
+    } finally {
+      await closeTab(fresh);
+    }
+  });
+
+  it('a browser that never got the launcher token says so on the page, not only in a toast', async () => {
     const fresh = await browser.newPage();
     try {
-      await fresh.goto(fx.dashboardUrl);
-      await fresh.waitFor(`/switch ui/.test(document.getElementById('toast')?.textContent || '')`, 'the switch ui hint');
+      await fresh.goto(fx.dashboardUrl + '#/routes');
+      await fresh.evaluate(`localStorage.clear(), sessionStorage.clear()`);
+      await fresh.reload();
+      await fresh.waitFor(`/switch ui/.test(document.getElementById('status-sub')?.textContent || '')`, 'the switch ui hint in the header');
     } finally {
-      // Close the tab itself, then raise the main one: a tab left in the background gets throttled
-      // timers and no animation frames, which stalls every later test.
-      await fresh.send('Page.close').catch(() => {});
-      fresh.close();
-      await page.send('Page.bringToFront');
+      await closeTab(fresh);
+      // The storage is shared by the origin, so the main tab needs the token again. A #hash change
+      // alone fires no load event, so leave the page first.
+      await page.goto('about:blank');
+      await page.goto(fx.tokenUrl());
     }
   });
 

package/tests/version.test.mjs

@@ -63,6 +63,21 @@ test('the same version is no update; a stale cache asks the registry again', asy
   }
 });
 
+test('a release published after the last check shows within 5 minutes, not after 12 hours', async () => {
+  const reg = await registry((req, res) => res.end(JSON.stringify({ version: '99.0.0' })));
+  const stateDir = tmpState();
+  try {
+    const answeredBeforeTheRelease = { checkedAt: Date.now() - 6 * 60 * 1000, latest: CURRENT_VERSION };
+    fs.writeFileSync(path.join(stateDir, 'version-check.json'), JSON.stringify(answeredBeforeTheRelease));
+    const r = await checkForUpdate({ stateDir, url: reg.url });
+    assert.equal(reg.hits(), 1, 'a 6-minute-old answer is asked again');
+    assert.equal(r.updateAvailable, true);
+  } finally {
+    reg.close();
+    fs.rmSync(stateDir, { recursive: true, force: true });
+  }
+});
+
 test('an unreachable or broken registry gives no notice and never throws', async () => {
   const reg = await registry((req, res) => { res.statusCode = 500; res.end('down'); });
   const stateDir = tmpState();

package/ui.html

@@ -1256,12 +1256,13 @@
   <script>
     // State & Globals
     const ADMIN_TOKEN_KEY = 'llm-switcher-admin-token';
-    // The token comes only in the #token of the private launcher that `switch ui` opens, and stays in
-    // this tab. The page itself never carries it: any process on the machine can load /ui.
+    // The token comes only in the #token of the private launcher that `switch ui` opens. The page itself
+    // never carries it: any process on the machine can load /ui. localStorage, not sessionStorage, so a
+    // bookmark or a new tab in the same browser keeps working after one `switch ui`.
     const NO_TOKEN_HINT = 'This tab has no access token. Open the dashboard with `switch ui`.';
     const hashTokenMatch = location.hash.match(/(?:^#|&)token=([0-9a-f]+)/);
     if (hashTokenMatch) {
-      sessionStorage.setItem(ADMIN_TOKEN_KEY, hashTokenMatch[1]);
+      localStorage.setItem(ADMIN_TOKEN_KEY, hashTokenMatch[1]);
     }
     if (hashTokenMatch) {
       history.replaceState(null, '', location.pathname + location.search + '#/routes');
@@ -1289,7 +1290,7 @@
 
     // API Helper
     async function api(path, opts = {}) {
-      const token = sessionStorage.getItem(ADMIN_TOKEN_KEY) || '';
+      const token = localStorage.getItem(ADMIN_TOKEN_KEY) || '';
       const headers = {
         ...opts.headers,
         'x-llm-switcher-token': token
@@ -1461,6 +1462,8 @@
       const subEl = document.getElementById('status-sub');
       const actionsEl = document.getElementById('ph-actions');
       if (!titleEl || !subEl || !actionsEl) return;
+      // Without the token every call is a 401, and the empty state would read as "nothing routed".
+      const noToken = !localStorage.getItem(ADMIN_TOKEN_KEY);
 
       const activeMap = state.activeProfiles || (state.config?.activeProfiles || {});
       const activeTargets = Object.entries(activeMap).filter(([_, v]) => Boolean(v));
@@ -1474,7 +1477,7 @@
           if (activeMap.agy) parts.push('agy: ' + activeMap.agy);
           subEl.textContent = 'Port ' + state.port + ' · Active for ' + parts.join(' · ');
         } else {
-          subEl.textContent = 'Gateway is idle. Clients connect directly to official endpoints.';
+          subEl.textContent = noToken ? NO_TOKEN_HINT : 'Gateway is idle. Clients connect directly to official endpoints.';
         }
         actionsEl.innerHTML = `
           <button class="btn btn-primary" onclick="openProfileModal(true)">+ Add Profile</button>
@@ -2810,7 +2813,7 @@
     }
 
     document.addEventListener('DOMContentLoaded', () => {
-      if (!sessionStorage.getItem(ADMIN_TOKEN_KEY)) showToast(NO_TOKEN_HINT, true);
+      if (!localStorage.getItem(ADMIN_TOKEN_KEY)) showToast(NO_TOKEN_HINT, true);
       // Setup initial theme buttons state
       const currentTheme = document.documentElement.dataset.theme || 'dark';
       document.getElementById('btn-theme-dark')?.setAttribute('aria-pressed', currentTheme === 'dark');

package/version.mjs

@@ -11,7 +11,8 @@ export const CURRENT_VERSION = (() => {
 
 const REGISTRY_URL = 'https://registry.npmjs.org/llm-switcher/latest';
 const CACHE_FILE = 'version-check.json';
-const MAX_AGE_MS = 12 * 60 * 60 * 1000;
+// A release shows on the dashboard within minutes; one small GET per 5 minutes.
+const MAX_AGE_MS = 5 * 60 * 1000;
 
 const parse = (v) => {
   const m = /^(\d+)\.(\d+)\.(\d+)$/.exec(String(v ?? ''));
@@ -30,7 +31,7 @@ export function isNewer(latest, current) {
 const updateCommand = () => (fs.existsSync(path.join(ROOT, '.git')) ? `git -C "${ROOT}" pull` : 'npm install -g llm-switcher@latest');
 
 /**
- * Asks the registry at most once per 12 hours; a failed ask also waits, so an offline machine is not
+ * Asks the registry at most once per 5 minutes; a failed ask also waits, so an offline machine is not
  * slowed on every call. Never throws: without an answer there is simply no notice.
  */
 export async function checkForUpdate({ stateDir, url = process.env.LLM_SWITCHER_REGISTRY_URL || REGISTRY_URL } = {}) {