pennyrouter 0.2.4 → 0.2.7

package/README.md

@@ -11,6 +11,7 @@ status checks, and uninstall metadata.
 ```bash
 npx pennyrouter install
 npx pennyrouter install --make-default
+npx pennyrouter update
 npx pennyrouter auth anthropic
 npx pennyrouter install --harness claude-code,cline,opencode,codex,windsurf,zed,codegpt,aider
 npx pennyrouter disable
@@ -79,6 +80,39 @@ the gateway must be redeployed or fixed before retrying. This check is about Pen
 compatibility, not a demand that the user upgrade a Claude Code version that already emits a
 supported request shape.
 
+## Updating
+
+To pick up a new CLI version without repeating the install interview:
+
+```bash
+npx pennyrouter update
+npx pennyrouter update --dry-run
+npx pennyrouter update --harness claude-code
+```
+
+`update` refreshes only the files generated from the CLI's own constants: the managed `penny`
+runtime and launcher, the `/penny` Claude skill, the Claude settings overlay and statusline, the
+Codex provider profile, and the model labels and context-window settings in managed tool configs.
+Older installs are migrated forward, so retired model labels are replaced with the current ones.
+
+It never touches credentials and never re-runs browser authorization. Upstream provider tokens
+(Claude subscription, Anthropic, OpenAI, OpenRouter) are held encrypted at the gateway, and the
+existing `pr-` account key and gateway URL are read back from the local config, so the command is
+non-interactive and prompts for nothing.
+
+Per-tool choices are preserved rather than re-asked. Bare-command routing is read from the
+uninstall manifest, so a Penny-only install keeps bare `claude` and `codex` fully native and an
+install that opted into global routing keeps it. Subscription auth mode is likewise carried
+forward. Use `install` instead when the intent is to change those choices.
+
+Because the managed tool config is rewritten only for tools whose bare command already routes
+through PennyRouter, a Penny-only install leaves files such as `~/.claude/settings.json`
+untouched and needs no session shutdown. Updating a tool that owns global routing requires
+closing its running sessions, or passing `--allow-running-harnesses`. Unrelated keys and user
+settings inside managed config files are preserved, and re-running `update` is idempotent.
+
+Restart Claude Code or Codex afterwards to pick up the refreshed configuration.
+
 ## Supported Tools
 
 - Claude Code
@@ -97,10 +131,10 @@ named-model choices PIN the trunk to that exact model — you pick the model, Pe
 the bill via its side machinery (cache/compaction/swallowed background calls) without switching the
 model you chose. "Penny Custom" is the dynamic option: PennyRouter cost-routes each turn.
 
-- Penny Opus: pins `anthropic/claude-opus-4-8`
-- Penny Sonnet: pins `anthropic/claude-sonnet-4-6`
-- Penny Haiku: pins `anthropic/claude-haiku-4-5-20251001`
-- Penny Fable: pins `anthropic/claude-fable-5`
+- Opus 5 (PennyRouter): pins `anthropic/claude-opus-5`
+- Sonnet 5 (PennyRouter): pins `anthropic/claude-sonnet-5`
+- Haiku 4.5 (PennyRouter): pins `anthropic/claude-haiku-4-5-20251001`
+- Fable 5 (PennyRouter): pins `anthropic/claude-fable-5`
 - Penny Custom: `pennyrouter/auto` — dynamic routing on the bundle/profile saved in the user's account
 
 ## Claude Subscription Auth
@@ -178,6 +212,9 @@ directory, and records an uninstall manifest.
 `disable` temporarily removes PennyRouter from selected tools while retaining a local
 PennyRouter-managed snapshot for `enable`.
 
+`update` rewrites those same managed files for the installed version without re-authorizing,
+and without changing bare-command routing or stored credentials.
+
 It does not delete PennyRouter accounts, credits, or remote API keys.
 
 ## License

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pennyrouter",
-  "version": "0.2.4",
+  "version": "0.2.7",
   "description": "Install and manage PennyRouter local coding-agent integrations.",
   "homepage": "https://pennyrouter.com",
   "bugs": {

package/src/cli.js

@@ -85,6 +85,11 @@ export async function main(argv = process.argv.slice(2)) {
     return;
   }
 
+  if (command === "update") {
+    await update(flags);
+    return;
+  }
+
   if (command === "auth") {
     await authProvider(flags);
     return;
@@ -571,6 +576,143 @@ async function install(flags) {
   reportFailures(failures);
 }
 
+// Refresh the managed local files to this package version WITHOUT re-running any of the
+// account/credential flow. Everything an update needs is already on disk: the pr- key and
+// gateway URL live in the penny config (and, for older installs, in the harness config the
+// installer wrote), and the upstream provider tokens live server-side, encrypted against the
+// account. So no browser claim, no provider checkboxes, no token prompts — this command is
+// non-interactive by construction and never touches a credential.
+//
+// What it DOES rewrite is everything regenerated from code constants, which is exactly what
+// goes stale on a version bump: the copied runtime + `penny` shim, the /penny skill, the
+// Claude launch settings overlay, the Codex provider profile, and the model labels +
+// context-window env in the harness configs.
+//
+// Per-user choices are read back from the manifest, never re-asked: `default_routing` decides
+// whether the bare `claude`/`codex` command keeps pointing at the gateway, and
+// `anthropic_token_stored`/`openai_subscription_auth` decide which auth shape gets rewritten.
+// Re-deriving either from prompt defaults would silently flip a --penny-only user into
+// default routing, or drop subscription auth from a working install.
+async function update(flags) {
+  const manifest = await loadManifest();
+  if (pruneUnsupportedManifestRecords(manifest).length > 0) await saveManifest(manifest);
+  const records = manifest.installations || [];
+
+  const requested = parseHarnessList(flags.harness);
+  const targets = records.filter((record) => {
+    if (record.disabled) return false;
+    if (flags.all || requested.length === 0) return true;
+    return requested.includes(record.harness);
+  });
+
+  if (records.length === 0) {
+    throw new Error("No PennyRouter installation found. Run `npx pennyrouter install` first.");
+  }
+  if (targets.length === 0) {
+    console.log("No enabled PennyRouter installations matched. Nothing to update.");
+    return;
+  }
+
+  const launchConfig = await loadPennyConfig();
+  const globalAuth = await readClaudeCodeGatewayAuth();
+  const apiKey = flags.pennyKey || launchConfig.api_key || globalAuth.apiKey;
+  const gatewayBaseUrl = flags.gatewayBaseUrl
+    || launchConfig.gateway_base_url
+    || globalAuth.gatewayBaseUrl
+    || process.env.PENNYROUTER_GATEWAY_BASE_URL
+    || "https://api.pennyrouter.com";
+
+  if (!apiKey) {
+    throw new Error(
+      "Could not find your PennyRouter key in the local config. Pass `--penny-key pr-...`, "
+      + "or run `npx pennyrouter install` to re-authorize.",
+    );
+  }
+
+  console.log("PennyRouter update");
+  console.log("");
+  console.log(`Key ${maskKey(apiKey)} · gateway ${gatewayBaseUrl}`);
+  console.log("Subscription and API keys are left untouched.");
+  console.log("");
+
+  if (flags.dryRun) {
+    for (const record of targets) {
+      const routing = record.default_routing === false ? "penny command only" : "default routing";
+      console.log(`Will refresh ${record.harness} (${routing}).`);
+    }
+    console.log("Will refresh the penny runtime and shim.");
+    console.log("Dry run only. No files changed.");
+    return;
+  }
+
+  const failures = [];
+  let runtimeResult = null;
+  if (targets.some((record) => ["claude-code", "codex"].includes(record.harness))
+      && process.platform !== "win32") {
+    runtimeResult = await installPennyRuntime({ updatePath: !flags.noPathUpdate });
+  }
+
+  for (const record of targets) {
+    const harness = HARNESS_BY_ID[record.harness];
+    if (!harness) continue;
+
+    await runHarnessJob(failures, record.harness, "update", async () => {
+      const supportsPennyCommand = ["claude-code", "codex"].includes(record.harness)
+        && process.platform !== "win32";
+      // An update rewrites the harness's own config only when that config is ours to
+      // rewrite — i.e. the bare command still routes through the gateway. In penny-only
+      // mode the harness config belongs to the user and we touch just the launch profile.
+      const ownsGlobalRouting = !record.launch_available || record.default_routing !== false;
+      if (ownsGlobalRouting) assertNoRunningHarness(record.harness, flags);
+
+      const claudeSubscriptionAuth = record.harness === "claude-code"
+        && Boolean(record.anthropic_token_stored);
+      const codexSubscriptionAuth = record.harness === "codex"
+        ? await detectCodexChatgptAuth()
+        : false;
+
+      if (supportsPennyCommand) {
+        await configurePennyHarness(record.harness, {
+          apiKey,
+          gatewayBaseUrl,
+          subscriptionAuth: record.harness === "claude-code"
+            ? claudeSubscriptionAuth
+            : codexSubscriptionAuth,
+          models: record.harness === "claude-code" ? CLAUDE_CODE_MODELS : null,
+        });
+      }
+
+      let next = record;
+      if (ownsGlobalRouting) {
+        const plan = await harness.planInstall();
+        // Pass the existing record through so install-time state the harness stashed
+        // (previous_model_provider, claude_ai_connectors_before) survives the rewrite
+        // and a later uninstall still restores the user's original values.
+        const installed = record.harness === "claude-code" && claudeSubscriptionAuth
+          ? await harness.installStoredToken({ apiKey, gatewayBaseUrl, plan, existingRecord: record })
+          : await harness.install({ apiKey, gatewayBaseUrl, plan, existingRecord: record });
+        next = { ...record, ...installed, installed_at: record.installed_at };
+      }
+
+      next.updated_at = new Date().toISOString();
+      if (record.harness === "codex") next.openai_subscription_auth = codexSubscriptionAuth;
+      upsertManifestRecord(manifest, next);
+      await saveManifest(manifest);
+      console.log(`Updated ${record.harness}.`);
+    });
+  }
+
+  await saveManifest(manifest);
+  console.log("");
+  if (runtimeResult && !runtimeResult.available) {
+    console.log("Add ~/.local/bin to PATH before using the `penny` command.");
+  } else if (runtimeResult?.changed) {
+    console.log("Open a new terminal (or reload your shell) before using the `penny` command.");
+  }
+  console.log("Restart any running Claude Code or Codex sessions to pick up the update.");
+  reportFailures(failures);
+}
+
 async function chooseDefaultRouting(flags, selected, manifest) {
   const out = new Map();
   const launchable = selected.filter((harness) => ["claude-code", "codex"].includes(harness.id));
@@ -1560,13 +1702,20 @@ function printHelp() {
 
 Usage:
   pennyrouter install [--harness ${SUPPORTED_HARNESS_IDS}] [--all] [--yes] [--dry-run] [--make-default|--penny-only] [--no-path-update] [--anthropic-auth|--no-anthropic-auth] [--anthropic-api-key KEY] [--openai-api-key KEY] [--openrouter-api-key KEY] [--local[=URL]] [--allow-running-harnesses]
+  pennyrouter update [--harness ${SUPPORTED_HARNESS_IDS}] [--all] [--dry-run] [--penny-key pr-...] [--gateway-base-url URL] [--allow-running-harnesses]
   pennyrouter auth anthropic [--penny-key pr-...] [--token oauth-token] [--token-command CMD] [--gateway-base-url URL] [--forget]
   pennyrouter disable [--harness ${SUPPORTED_HARNESS_IDS}] [--all] [--yes]
   pennyrouter enable [--harness ${SUPPORTED_HARNESS_IDS}] [--all] [--yes]
   pennyrouter uninstall [--harness ${SUPPORTED_HARNESS_IDS}] [--all] [--yes] [--forget-token]
   pennyrouter status
 
+Update refreshes the managed local config and the penny runtime to this package version.
+It reuses your existing key and never re-asks for subscription or API credentials.
+
 Examples:
+  npx pennyrouter update
+  npx pennyrouter update --dry-run
+  npx pennyrouter update --harness claude-code
   npx pennyrouter install
   npx pennyrouter install --make-default
   npx pennyrouter install --penny-only

package/src/harnesses/claude-code.js

@@ -7,22 +7,29 @@ const CONNECTOR_SETTING = "disableClaudeAiConnectors";
 // Values written into Claude Code's four model slots. CC displays a slot's VALUE verbatim in
 // its /model menu AND sends it as the request `model`, so each value is both the menu label
 // and the gateway's routing key. The three concrete Claude slots carry friendly PINNED labels
-// ("Penny Opus/Sonnet/Haiku/Fable") that the gateway maps to that exact model — the user's pick
-// runs on the model they chose, no dynamic tier switching on the trunk (background/utility
-// calls still route cheap, which is where the savings come from). The separate Fable slot is
-// pinned to Fable; the DYNAMIC "Penny Custom" option lets PennyRouter cost-route. Legacy
-// "Penny Speed/Core/Power"
-// installs (dynamic bundles) are still recognized for uninstall (see isPennyRouterModelValue).
+// ("Opus 5/Sonnet 5/Haiku 4.5/Fable 5 (PennyRouter)") that the gateway maps to that exact
+// model — the user's pick runs on the model they chose, no dynamic tier switching on the
+// trunk (background/utility calls still route cheap, which is where the savings come from).
+// Named "<Model> (PennyRouter)" rather than "Penny <Model>" so CC's own generated "Custom ...
+// model" subtext still reads as a real Claude model routed through Penny, not a distinct
+// custom model. The separate Fable slot is pinned to Fable; the DYNAMIC "Penny Custom" option
+// lets PennyRouter cost-route. Legacy "Penny Speed/Core/Power/Opus/Sonnet/Haiku/Fable"
+// installs (dynamic bundles, or the pre-rename pinned labels) are still recognized for
+// uninstall (see isPennyRouterModelValue).
 export const CLAUDE_CODE_MODELS = {
-  haiku: "Penny Haiku",     // -> pinned anthropic/claude-haiku-4-5-20251001
-  sonnet: "Penny Sonnet",   // -> pinned anthropic/claude-sonnet-4-6
-  opus: "Penny Opus",       // -> pinned anthropic/claude-opus-4-8
-  fable: "Penny Fable",     // -> pinned anthropic/claude-fable-5
-  custom: "Penny Custom",   // -> dynamic (PennyRouter cost-routing)
+  haiku: "Haiku 4.5 (PennyRouter)",   // -> pinned anthropic/claude-haiku-4-5-20251001
+  sonnet: "Sonnet 5 (PennyRouter)",   // -> pinned anthropic/claude-sonnet-5
+  opus: "Opus 5 (PennyRouter)",       // -> pinned anthropic/claude-opus-5
+  fable: "Fable 5 (PennyRouter)",     // -> pinned anthropic/claude-fable-5
+  custom: "Penny Custom",             // -> dynamic (PennyRouter cost-routing)
 };
-// Retired dynamic-bundle labels (pre-pinned-trunk). Not written by a fresh install; matched
-// only so uninstall/detect still recognize and clean up an older install.
-const LEGACY_PENNY_LABELS = ["Penny Speed", "Penny Core", "Penny Power"];
+// Retired dynamic-bundle labels (pre-pinned-trunk) and the pre-rename pinned labels. Not
+// written by a fresh install; matched only so uninstall/detect still recognize and clean up
+// an older install.
+const LEGACY_PENNY_LABELS = [
+  "Penny Speed", "Penny Core", "Penny Power",
+  "Penny Opus", "Penny Sonnet", "Penny Haiku", "Penny Fable",
+];
 
 export const claudeCodeHarness = {
   id: "claude-code",
@@ -60,6 +67,10 @@ export const claudeCodeHarness = {
     current.env.ANTHROPIC_DEFAULT_SONNET_MODEL = CLAUDE_CODE_MODELS.sonnet;
     current.env.ANTHROPIC_DEFAULT_HAIKU_MODEL = CLAUDE_CODE_MODELS.haiku;
     current.env.ANTHROPIC_DEFAULT_FABLE_MODEL = CLAUDE_CODE_MODELS.fable;
+    // The pinned labels above aren't real Anthropic model ids, so CC can't infer their
+    // context window from the name and falls back to a conservative 200K default. Tell it
+    // directly: every pinned slot is a Claude model with the 1M-context beta enabled upstream.
+    current.env.CLAUDE_CODE_MAX_CONTEXT_TOKENS = "1000000";
 
     const statusline = await configureClaudeCodeStatusline(current);
 
@@ -82,6 +93,7 @@ export const claudeCodeHarness = {
           "ANTHROPIC_DEFAULT_SONNET_MODEL",
           "ANTHROPIC_DEFAULT_HAIKU_MODEL",
           "ANTHROPIC_DEFAULT_FABLE_MODEL",
+          "CLAUDE_CODE_MAX_CONTEXT_TOKENS",
         ],
       },
     };
@@ -105,6 +117,10 @@ export const claudeCodeHarness = {
     current.env.ANTHROPIC_DEFAULT_SONNET_MODEL = CLAUDE_CODE_MODELS.sonnet;
     current.env.ANTHROPIC_DEFAULT_HAIKU_MODEL = CLAUDE_CODE_MODELS.haiku;
     current.env.ANTHROPIC_DEFAULT_FABLE_MODEL = CLAUDE_CODE_MODELS.fable;
+    // The pinned labels above aren't real Anthropic model ids, so CC can't infer their
+    // context window from the name and falls back to a conservative 200K default. Tell it
+    // directly: every pinned slot is a Claude model with the 1M-context beta enabled upstream.
+    current.env.CLAUDE_CODE_MAX_CONTEXT_TOKENS = "1000000";
 
     const statusline = await configureClaudeCodeStatusline(current);
 
@@ -127,6 +143,7 @@ export const claudeCodeHarness = {
           "ANTHROPIC_DEFAULT_SONNET_MODEL",
           "ANTHROPIC_DEFAULT_HAIKU_MODEL",
           "ANTHROPIC_DEFAULT_FABLE_MODEL",
+          "CLAUDE_CODE_MAX_CONTEXT_TOKENS",
         ],
       },
     };
@@ -146,6 +163,10 @@ export const claudeCodeHarness = {
     current.env.ANTHROPIC_DEFAULT_SONNET_MODEL = CLAUDE_CODE_MODELS.sonnet;
     current.env.ANTHROPIC_DEFAULT_HAIKU_MODEL = CLAUDE_CODE_MODELS.haiku;
     current.env.ANTHROPIC_DEFAULT_FABLE_MODEL = CLAUDE_CODE_MODELS.fable;
+    // The pinned labels above aren't real Anthropic model ids, so CC can't infer their
+    // context window from the name and falls back to a conservative 200K default. Tell it
+    // directly: every pinned slot is a Claude model with the 1M-context beta enabled upstream.
+    current.env.CLAUDE_CODE_MAX_CONTEXT_TOKENS = "1000000";
 
     const statusline = await configureClaudeCodeStatusline(current);
 
@@ -168,6 +189,7 @@ export const claudeCodeHarness = {
           "ANTHROPIC_DEFAULT_SONNET_MODEL",
           "ANTHROPIC_DEFAULT_HAIKU_MODEL",
           "ANTHROPIC_DEFAULT_FABLE_MODEL",
+          "CLAUDE_CODE_MAX_CONTEXT_TOKENS",
         ],
       },
     };
@@ -202,6 +224,7 @@ export const claudeCodeHarness = {
       ]) {
         if (current.env[k] === LEGACY_MODEL_LABEL || isPennyRouterModelValue(current.env[k])) delete current.env[k];
       }
+      delete current.env.CLAUDE_CODE_MAX_CONTEXT_TOKENS;
     }
     restoreClaudeAiConnectors(current, record);
     if (current["anthropic.baseURL"] && isPennyRouterValue(current["anthropic.baseURL"])) {

package/src/launch.js

@@ -344,6 +344,10 @@ export function buildPennyInvocation(harness, args, config) {
     if (models.sonnet) env.ANTHROPIC_DEFAULT_SONNET_MODEL = models.sonnet;
     if (models.opus) env.ANTHROPIC_DEFAULT_OPUS_MODEL = models.opus;
     if (models.fable) env.ANTHROPIC_DEFAULT_FABLE_MODEL = models.fable;
+    // The pinned labels above aren't real Anthropic model ids, so CC can't infer their
+    // context window from the name and falls back to a conservative 200K default. Tell it
+    // directly: every pinned slot is a Claude model with the 1M-context beta enabled upstream.
+    env.CLAUDE_CODE_MAX_CONTEXT_TOKENS = "1000000";
     return {
       command: "claude",
       args: ["--settings", claudeLaunchSettingsPath(), ...args],

package/src/launch.test.js

@@ -73,7 +73,7 @@ async function main() {
       apiKey: "pr-super-secret",
       gatewayBaseUrl: "https://gateway.example/",
       subscriptionAuth: true,
-      models: { haiku: "Penny Haiku", sonnet: "Penny Sonnet", opus: "Penny Opus" },
+      models: { haiku: "Haiku 4.5 (PennyRouter)", sonnet: "Sonnet 5 (PennyRouter)", opus: "Opus 5 (PennyRouter)" },
     });
     await configurePennyHarness("codex", {
       apiKey: "pr-super-secret",
@@ -100,7 +100,7 @@ async function main() {
     assert.ok(!claude.args.includes("--plugin-dir"));
     assert.equal(claude.env.ANTHROPIC_AUTH_TOKEN, "pr-super-secret");
     assert.equal(claude.env.ANTHROPIC_BASE_URL, "https://gateway.example/");
-    assert.equal(claude.env.ANTHROPIC_DEFAULT_OPUS_MODEL, "Penny Opus");
+    assert.equal(claude.env.ANTHROPIC_DEFAULT_OPUS_MODEL, "Opus 5 (PennyRouter)");
 
     const codex = buildPennyInvocation("codex", ["resume", "--last"], config);
     assert.deepEqual(codex.args, ["--profile", "pennyrouter", "resume", "--last"]);

package/src/session.js

@@ -97,7 +97,7 @@ export async function probeClaudeCodeGateway({ gatewayBaseUrl, apiKey }) {
         "anthropic-beta": "compact-2026-01-12",
       },
       body: JSON.stringify({
-        model: "Penny Sonnet",
+        model: "Sonnet 5 (PennyRouter)",
         max_tokens: 1,
         stream: false,
         messages: [{ role: "user", content: "Reply OK." }],