shiplightai 0.1.104 → 0.1.106

package/CHANGELOG.md

@@ -2,6 +2,38 @@
 
 All notable changes to `shiplightai` are documented here. This file is generated automatically at release time from the commits that touch the published package and its bundled SDK.
 
+## 0.1.106 (2026-09-28)
+
+### Bug Fixes
+
+- **sdk-core:** send thinkingLevel, not thinkingBudget, to Gemini 3 models (5818e0f)
+- address round-2 review findings (724b5b8)
+- address local multi-lens review findings (fd94a40)
+
+### Other Changes
+
+- **cli:** cover the token half of the cloud-upload gate (237db60)
+- document the Cloud shutdown and add a self-hosting guide (e3794ac)
+
+## 0.1.105 (2026-09-21)
+
+### Features
+
+- **cli:** allow explicit action cache backend selection (32ddd0f)
+- **cli:** add native OpenRouter support (272538d)
+
+### Bug Fixes
+
+- **deps:** upgrade sharp to patch libheif vulnerabilities (c9cceea)
+- **cli:** keep OpenRouter provider external to bundles (1135a95)
+- **llm:** use OpenRouter dotted Claude model identifiers (7775aee)
+
+## Unreleased
+
+### Features
+
+- **llm:** add native OpenRouter routing with `OPENROUTER_API_KEY` and `openrouter:<provider>/<model>`
+
 ## 0.1.104 (2026-09-08)
 
 ### Other Changes

package/README.md

@@ -11,13 +11,20 @@ Scaffold a new test project in under a minute:
 ```bash
 npx shiplightai@latest create ./my-tests
 cd my-tests
-cp .env.example .env            # configure credentials after install
+cp .env.example .env
+$EDITOR .env                        # required: every key in the template is commented out
 npm install
-npx shiplight setup-api-token   # writes SHIPLIGHT_API_TOKEN; skip if using a provider key
 npx playwright install chromium
-npx shiplight test              # runs the scaffolded starter test
+npx shiplight test                  # runs the scaffolded starter test
 ```
 
+> Any one provider key works — `GOOGLE_API_KEY`, `ANTHROPIC_API_KEY`,
+> `OPENAI_API_KEY`, or `OPENROUTER_API_KEY` (OpenRouter additionally needs an
+> explicit `WEB_AGENT_MODEL`; the others derive a default model from the key).
+> Without one, `shiplight test` exits with `No AI model configured`.
+> `SHIPLIGHT_API_TOKEN` also works today but stops on **October 31, 2026**,
+> when Shiplight Cloud shuts down.
+
 The scaffolder writes `package.json`, `playwright.config.ts`, `.env.example`, `.gitignore`, and a runnable `tests/example.test.yaml` that exercises a live site. Open `shiplight-report/index.html` after the run to see per-step screenshots, videos, and traces.
 
 Or add Shiplight to an existing Playwright project:
@@ -32,7 +39,7 @@ Every command is invoked via `npx shiplight <command>` from inside a project tha
 
 | Command                      | Purpose                                                                                                                                                                                                                                                                           |
 | ---------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `shiplight setup-api-token`  | Authenticate with Shiplight and write `SHIPLIGHT_API_TOKEN` to the current project's `.env`                                                                                                                                                                                       |
+| `shiplight setup-api-token`  | **Retiring October 31, 2026** — authenticate with Shiplight and write `SHIPLIGHT_API_TOKEN` to the current project's `.env`. Use a provider API key instead; see [self-hosting](./docs/self-hosting.md)                                                                                                                                                                                       |
 | `shiplight create <path>`    | Scaffold a new test project                                                                                                                                                                                                                                                       |
 | `shiplight test [args]`      | Run your YAML and Playwright test suite (forwards all Playwright flags)                                                                                                                                                                                                           |
 | `shiplight debug <file>`     | Launch the interactive visual debugger for a YAML test. The server picks a free port automatically; the chosen URL is printed on startup. Pass `--port N` for a stable URL (CI, bookmarks). Multiple concurrent `shiplight debug` invocations work without any port coordination. |
@@ -101,18 +108,23 @@ For the YAML statement language, authentication, variables, templates, and custo
 
 ## Environment variables
 
-Run `npx shiplight setup-api-token` to configure Shiplight's LLM proxy, or set
-at least one provider API key in `.env` before running tests:
+Set at least one provider API key in `.env` before running tests:
 
 ```
-SHIPLIGHT_API_TOKEN=...
-# or
 GOOGLE_API_KEY=...
 # or ANTHROPIC_API_KEY=sk-ant-...
 # or OPENAI_API_KEY=sk-...
+# or OPENROUTER_API_KEY=sk-or-v1-...  # also set WEB_AGENT_MODEL=openrouter:<provider>/<model>
 ```
 
+> **Shiplight Cloud shuts down on October 31, 2026.** After that date
+> `SHIPLIGHT_API_TOKEN` stops working — the hosted LLM proxy, the cloud action
+> cache, and report upload all go with it. Set a provider API key instead and
+> keep the action cache local: see [self-hosting](./docs/self-hosting.md).
+
 The AI model is auto-selected from the first key set. Override with `WEB_AGENT_MODEL=<model>`.
+OpenRouter requires an explicit upstream-qualified model, for example
+`WEB_AGENT_MODEL=openrouter:openai/gpt-4o`.
 
 Shiplight uses an **explicit env var allowlist**: only the vars it forwards into its internal SDK config are accessible to the agent. Any env var not on the list is invisible to the SDK by design. Full list (`OPENAI_BASE_URL`, Vertex AI routing, Mailgun keys, etc.): **[docs.shiplight.ai/local/cli-reference#environment-variables](https://docs.shiplight.ai/local/cli-reference)**.
 
@@ -143,4 +155,4 @@ DO_NOT_TRACK=1
 
 - **Documentation:** [docs.shiplight.ai](https://docs.shiplight.ai)
 - **VS Code extension:** [github.com/ShiplightAI/vscode-extension](https://github.com/ShiplightAI/vscode-extension)
-- **Cloud platform:** [shiplight.ai](https://www.shiplight.ai)
+- **Cloud platform:** [shiplight.ai](https://www.shiplight.ai) — shutting down October 31, 2026