Overhaul onboarding routes and model controls

Author: gitcommit90

CHANGELOG.md

@@ -9,8 +9,19 @@ Release tags use the form `vX.Y.Z` and match `package.json`. GitHub Releases car
 
 ## [Unreleased]
 
+## [0.5.5] - 2026-07-20
+
+### Added
+
+- Back navigation throughout onboarding with in-progress form and route state preserved.
+- All On and All Off controls for every connected account's model list.
+- Direct API-key links for OpenRouter and NVIDIA NIM connection forms.
+
 ### Changed
 
+- Reworked Routes into a compact card grid with whole-card editing and a focused editor.
+- Added drag-and-drop route-member ordering alongside the existing accessible arrow controls.
+- Removed onboarding credential autodetection and its renderer, dashboard, CLI, and IPC paths.
 - Formalized project governance, release lifecycle, PR/release note expectations, and repository hygiene (branch cleanup, merge defaults, maintainer docs).
 
 ## [0.5.4] - 2026-07-18
@@ -63,7 +74,8 @@ Release tags use the form `vX.Y.Z` and match `package.json`. GitHub Releases car
 
 See [GitHub Releases](https://github.com/gitcommit90/rerouted/releases) for artifact digests and notes prior to the Keep a Changelog narrative. Notable themes in late 0.4.x included signed/notarized distribution, in-app updates, named routes, OAuth account pools, OpenAI chat completions and Responses routing, and launch hardening.
 
-[Unreleased]: https://github.com/gitcommit90/rerouted/compare/v0.5.4...HEAD
+[Unreleased]: https://github.com/gitcommit90/rerouted/compare/v0.5.5...HEAD
+[0.5.5]: https://github.com/gitcommit90/rerouted/releases/tag/v0.5.5
 [0.5.4]: https://github.com/gitcommit90/rerouted/releases/tag/v0.5.4
 [0.5.3]: https://github.com/gitcommit90/rerouted/releases/tag/v0.5.3
 [0.5.2]: https://github.com/gitcommit90/rerouted/releases/tag/v0.5.2

package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "@gitcommit90/rerouted",
   "productName": "ReRouted",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "description": "A local AI router for connected accounts, models, named routes, and automatic fallback.",
   "author": "gitcommit90",
   "license": "MIT",

package.json

@@ -293,29 +293,6 @@ function registerIpc() {
   ipcMain.handle("app:set-admin-password", async () => ({ ok: true }));
   ipcMain.handle("app:verify-admin-password", async () => ({ ok: true }));
   ipcMain.handle("app:change-admin-password", async () => ({ ok: true }));
-  ipcMain.handle("app:detect-providers", async () => ({
-    ok: true,
-    found: [
-      {
-        id: "det1",
-        type: "chatgpt",
-        name: "ChatGPT",
-        source: "codex-cli",
-        hasAccess: true,
-        hasRefresh: true,
-      },
-      {
-        id: "det2",
-        type: "antigravity",
-        name: "Antigravity (user@example.com)",
-        source: "antigravity-file",
-        email: "user@example.com",
-        hasAccess: true,
-        hasRefresh: true,
-      },
-    ],
-  }));
-  ipcMain.handle("app:import-detected", async () => ({ ok: true }));
   ipcMain.handle("app:oauth-start", async () => {
     oauthStartsInFlight += 1;
     await new Promise((resolve) => setTimeout(resolve, 150));
@@ -432,7 +409,6 @@ const ONBOARD_STEPS = [
   "permissions",
   "admin-password",
   "welcome",
-  "auto-detect",
   "oauth-providers",
   "api-keys",
   "endpoint-ready",
@@ -534,24 +510,18 @@ app.whenReady().then(async () => {
       })()
     `);
     await sleep(500);
-    // For auto-detect, click scan to show results state
-    if (step === "auto-detect") {
-      await win.webContents.executeJavaScript(`
-        (async () => {
-          const b = document.getElementById("btn-scan");
-          if (b) { b.click(); await new Promise(r => setTimeout(r, 400)); }
-          const results = document.getElementById("detect-results");
-          if (!results?.textContent.includes("use*@example.com")) {
-            throw new Error("Detected account email was not privacy masked");
-          }
-          if (results.outerHTML.includes("user@example.com")) {
-            throw new Error("Raw detected account email leaked into onboarding markup");
-          }
-          return true;
-        })()
-      `);
-      await sleep(400);
-    }
+    await win.webContents.executeJavaScript(`
+      (() => {
+        const step = ${JSON.stringify(step)};
+        if (step !== "permissions" && !document.querySelector("[data-onboarding-back], #btn-back")) {
+          throw new Error("Missing onboarding Back control for " + step);
+        }
+        if (step === "permissions" && document.querySelector("[data-onboarding-back], #btn-back")) {
+          throw new Error("First onboarding step must not show Back");
+        }
+        return true;
+      })()
+    `);
     await capture(`onboard-${step}.png`, "#view > *");
   }
 
@@ -682,7 +652,7 @@ app.whenReady().then(async () => {
     await win.webContents.executeJavaScript(`
       (async () => {
         window.__rr_goto_page("combos");
-        document.querySelector("button[data-edit]")?.click();
+        document.querySelector("button[data-edit-index]")?.click();
         await new Promise((resolve) => requestAnimationFrame(() => requestAnimationFrame(resolve)));
         let account = document.getElementById("c-add-account");
         let model = document.getElementById("c-add-model");
@@ -1151,7 +1121,7 @@ app.whenReady().then(async () => {
   await win.webContents.executeJavaScript(`
     (() => {
       window.__rr_goto_page("combos");
-      document.querySelector("button[data-edit]")?.click();
+      document.querySelector("button[data-edit-index]")?.click();
       return true;
     })()
   `);

scripts/capture-ui.js

@@ -35,27 +35,6 @@ async function createPassword(prompts, invoke, output) {
   }
 }
 
-async function importDetected(prompts, invoke, output) {
-  if (!(await prompts.confirm("Scan this machine for supported provider credentials?"))) return;
-  output.write("Scanning local credential files…\n");
-  const result = await invoke("app:detect-providers");
-  const found = result.found || [];
-  if (!found.length) {
-    output.write("No supported credentials were found.\n");
-    return;
-  }
-  const indexes = await prompts.multiSelect(
-    "Import detected accounts",
-    found.map((item) => ({
-      label: `${item.name || item.type}${item.email ? ` · ${item.email}` : ""} (${item.source})`,
-    })),
-    { defaultAll: true }
-  );
-  if (!indexes.length) return;
-  await invoke("app:import-detected", indexes.map((index) => found[index].id));
-  output.write(`Imported ${indexes.length} account${indexes.length === 1 ? "" : "s"}.\n`);
-}
-
 async function connectOauth(prompts, invoke, output) {
   output.write(`\n${OAUTH_NOTICE}\n`);
   while (await prompts.confirm("Connect an OAuth subscription account now?", { defaultValue: false })) {
@@ -172,8 +151,6 @@ async function runFirstSetup({ prompts, controlPlane, dashboardUrl, output = pro
 
   await invoke("app:set-onboarding-step", "admin-password");
   await createPassword(prompts, invoke, output);
-  await invoke("app:set-onboarding-step", "auto-detect");
-  await importDetected(prompts, invoke, output);
   await invoke("app:set-onboarding-step", "oauth-providers");
   await connectOauth(prompts, invoke, output);
   await invoke("app:set-onboarding-step", "api-keys");

src/cli/setup.js

@@ -154,7 +154,6 @@ const ONBOARDING_STEPS = [
   "permissions",
   "admin-password",
   "welcome",
-  "auto-detect",
   "oauth-providers",
   "api-keys",
   "endpoint-ready",

src/lib/constants.js

@@ -2,7 +2,6 @@
 
 const { hydrateUsageIdentity } = require("./usage");
 const { hashPassword, verifyPassword, generateId, generateApiKey } = require("./password");
-const { detectAll, summarizeDetected } = require("./detect");
 const { startOAuth, completeOAuth, oauthStatus, clearPending } = require("./oauth");
 const {
   canInvoke,
@@ -54,7 +53,6 @@ function createControlPlane({
     throw new TypeError("Control plane requires the ReRouted runtime services");
   }
 
-  let detectedCache = [];
   const handlers = new Map();
   const handle = (channel, handler) => {
     if (handlers.has(channel)) throw new Error(`Duplicate control-plane handler: ${channel}`);
@@ -173,9 +171,11 @@ function createControlPlane({
   });
 
 handle("app:set-onboarding-step", async (_e, step) => {
+  if (!ONBOARDING_STEPS.includes(step) || step === "done") {
+    return { ok: false, error: "Unknown onboarding step" };
+  }
   store.update((cfg) => {
     cfg.onboardingStep = step;
-    if (step === "done") cfg.onboardingComplete = true;
   });
   return { ok: true };
 });
@@ -235,45 +235,6 @@ handle("app:change-admin-password", async (_e, { current, next }) => {
   return { ok: true };
 });
 
-handle("app:detect-providers", async () => {
-  detectedCache = await detectAll();
-  return { ok: true, found: summarizeDetected(detectedCache) };
-});
-
-handle("app:import-detected", async (_e, ids) => {
-  const want = new Set(ids || []);
-  const toImport = detectedCache.filter((d) => want.has(d.id));
-  store.update((cfg) => {
-    for (const d of toImport) {
-      // Avoid duplicate by type+email/source path
-      const exists = cfg.providers.some(
-        (p) =>
-          p.type === d.type &&
-          ((d.email && p.email === d.email) || (d.path && p.importPath === d.path))
-      );
-      if (exists) continue;
-      cfg.providers.push({
-        id: d.id || generateId("prov"),
-        type: d.type,
-        name: d.name,
-        email: d.email,
-        accessToken: d.accessToken,
-        refreshToken: d.refreshToken,
-        accountId: d.accountId,
-        projectId: d.projectId,
-        clientId: d.clientId,
-        clientSecret: d.clientSecret,
-        models: d.models,
-        enabled: true,
-        importPath: d.path,
-        source: d.source,
-        createdAt: Date.now(),
-      });
-    }
-  });
-  return { ok: true };
-});
-
 handle("app:oauth-start", async (_e, type) => {
   try {
     logger.oauth(`UI requested OAuth start for ${type}`);
@@ -583,6 +544,21 @@ handle("app:set-model-enabled", async (_e, { providerId, modelId, enabled }) =>
   return { ok: true };
 });
 
+handle("app:set-all-models-enabled", async (_e, { providerId, enabled }) => {
+  let updated = 0;
+  store.update((cfg) => {
+    const provider = cfg.providers.find((item) => item.id === providerId);
+    if (!provider || !Array.isArray(provider.models)) return;
+    provider.models = provider.models.map((model) => {
+      updated += 1;
+      return typeof model === "string"
+        ? { id: model, name: model, enabled: !!enabled }
+        : { ...model, enabled: !!enabled };
+    });
+  });
+  return { ok: updated > 0, updated, enabled: !!enabled };
+});
+
 handle("app:add-model", async (_e, { providerId, modelId }) => {
   const mid = String(modelId || "").trim();
   if (!mid) return { ok: false, error: "Model name required" };

src/lib/control-plane.js

@@ -19,8 +19,6 @@ const PUBLIC_ONBOARDING_CHANNELS = new Set([
   "app:get-state",
   "app:set-onboarding-step",
   "app:set-admin-password",
-  "app:detect-providers",
-  "app:import-detected",
   "app:oauth-start",
   "app:oauth-status",
   "app:oauth-cancel",