Use loaded admin key for dashboard writes

Author: yelixir-dev

src/dashboard.ts

@@ -51,7 +51,7 @@ const $=id=>document.getElementById(id); const esc=v=>String(v??'').replace(/[&<
 const expiredIds=new Set();
 function fullBridgeKey(){const raw=($('bridgeApiKey')?.value||'').trim(); if(!raw)return ''; return raw.startsWith('sk-')?raw:'sk-'+raw;}
 function displayBridgeKey(key){return key?.startsWith('sk-')?key.slice(3):(key||'')}
-function auth(){const key=localStorage.getItem('bridgeApiKey')||''; return key?{'authorization':'Bearer '+key,'content-type':'application/json'}:{'content-type':'application/json'}}
+function auth(){const key=cfg?.bridgeApiKey||localStorage.getItem('bridgeApiKey')||fullBridgeKey()||''; return key?{'authorization':'Bearer '+key,'content-type':'application/json'}:{'content-type':'application/json'}}
 function duplicateCredentialMessage(e){const text=String(e?.message||e||''); return text.includes('duplicate_commandcode_api_key')||text.includes('Duplicate CommandCode API key')?'이미 등록된 키입니다. 다른 CommandCode API key를 입력해주세요.':null;}
 function preventDuplicateVisibleKey(input){const value=input.value.trim(); if(!value)return false; const dup=Array.from(document.querySelectorAll('[data-ckey]')).some(el=>el!==input&&el.value.trim()===value); if(!dup)return false; const i=+input.dataset.ckey; input.value=''; if(cfg?.credentials?.[i])cfg.credentials[i].apiKey=''; toast('이미 등록된 키입니다. 입력하지 않았습니다.'); return true;}
 function syncBridgeKey(){const el=$('bridgeApiKey'); if(!el)return; const configured=cfg?.bridgeApiKey||''; const stored=localStorage.getItem('bridgeApiKey')||''; const key=configured||stored; if(configured&&stored!==configured)localStorage.setItem('bridgeApiKey',configured); if(document.activeElement!==el) el.value=displayBridgeKey(key); const wrap=$('bridgeKeyWrap'); if(wrap) wrap.style.display=$('bindHost')?.value==='0.0.0.0'?'grid':'none';}

tests/dashboard-ui.test.ts

@@ -106,4 +106,17 @@ describe("dashboard UI", () => {
     expect(html).toContain("이미 등록된 키입니다");
     expect(html).toContain("Duplicate CommandCode API key");
   });
+
+  it("uses the loaded admin API key for writes when browser storage is empty or stale", () => {
+    const html = dashboardHtml({
+      server: { host: "0.0.0.0", port: 9992 },
+      routing: { policy: "daily_burn_priority", maxInFlightPerCredential: 4 },
+      credentials: [],
+      models: [],
+      bridgeApiKey: "test-admin-token",
+    });
+
+    expect(html).toContain("cfg?.bridgeApiKey||localStorage.getItem('bridgeApiKey')");
+    expect(html).toContain("'authorization':'Bearer '+key");
+  });
 });