Release v0.4.0: Dynamic Plugin Support, OAuth/PKCE Authentication, Enhanced Validation & Test Coverage (#20) (#21)

* feat: add authentication scope management for API and provisioning keys

* feat: refactor authentication scope management to use property accessors

* feat: enhance API key and provisioning key validation with improved error handling and UI feedback

* feat: update authentication handling to unify API and provisioning key fields with improved loading feedback

* feat: implement UI updates and event listeners for authentication scope changes and proxy settings

* feat: improve null safety and error handling in activity data processing and UI components

* feat: implement PKCE authentication flow with code exchange for API key

* feat: add OAuth app name constant for improved authorization flow clarity

* test: add comprehensive authentication tests for OpenRouterService

- Add PKCE auth code exchange tests
- Add API key validation tests
- Add provisioning key validation tests
- Add network error handling tests
- Use MockWebServer for realistic HTTP testing

These tests verify the authentication flow and error handling
that was refactored into helper classes.

refactor: integrate helper classes into SetupWizardDialog

- Replace inline PKCE logic with PkceAuthHandler (156 lines removed)
- Replace inline error handling with SetupWizardErrorHandler
- Replace PluginLogger calls with SetupWizardLogger
- Replace magic numbers with SetupWizardConfig constants
- Add proper cleanup in dispose() method

This integration reduces SetupWizardDialog from 1,194 to 1,048 lines
while improving maintainability and testability.

refactor: extract PKCE, error handling, logging, and config from SetupWizardDialog

- Extract PkceAuthHandler: 199-line dedicated OAuth/PKCE flow handler
- Extract SetupWizardConfig: centralize magic numbers and configuration
- Extract SetupWizardErrorHandler: standardize error handling with user-friendly messages
- Extract SetupWizardLogger: provide controlled logging with different levels
- Make OpenRouterService open and add baseUrlOverride for testability

This refactoring reduces complexity and improves maintainability while
maintaining all existing functionality. The original SetupWizardDialog
will be updated to use these helpers in a follow-up commit.

* feat: refactor endpoint methods in OpenRouterService for dynamic URL generation

* feat: add key validation for current auth scope and centralized error messages

* refactor: remove deprecated key validation methods and update endpoint logging

* feat: update auth scope to REGULAR and enhance logging for PKCE exchange process

* feat: synchronize authentication settings in OpenRouterSettingsPanel and enhance welcome notification formatting

* feat: release version 0.4.0 with OAuth/PKCE authentication flow, enhanced key validation, and UI improvements

* feat: implement settings migration for provisioning keys and update version to 0.4.0

* feat: implement dynamic plugin support with resource cleanup and lifecycle management

feat: add dynamic plugin support with resource cleanup and lifecycle management

* feat: refactor activity cost calculation and improve tooltip formatting in status bar

* feat: enhance dynamic plugin support tests with mocked dependencies and improved cleanup verification

Author: DimazzzZ

CHANGELOG.md

@@ -5,6 +5,97 @@ All notable changes to the OpenRouter IntelliJ Plugin will be documented in this
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.0] - 2025-12-22
+
+### New Features
+
+#### 🔄 Dynamic Plugin Support (NEW!)
+- **No Restart Required** - Install, update, and uninstall plugin without restarting IDE
+- **Disposable Services** - All 4 core services (ProxyService, OpenRouterService, SettingsService, GenerationTrackingService) implement Disposable
+- **PluginLifecycleListener** - Tracks plugin load/unload events with detailed logging
+- **Resource Cleanup** - Graceful shutdown of Jetty server (10s timeout), HTTP client connection pool, and async tasks
+- **State Persistence** - Settings and generation tracking data saved before plugin unload
+- **Memory Leak Prevention** - Proper cleanup prevents memory leaks and allows safe plugin reload
+- **IntelliJ Compliance** - Meets all dynamic plugin requirements and restrictions
+
+#### 🔐 OAuth/PKCE Authentication Flow
+- **PKCE Authentication** - Implemented full PKCE (Proof Key for Code Exchange) authentication flow for secure API key generation
+- **OAuth Code Exchange** - Secure OAuth code exchange mechanism for API key creation
+- **PkceAuthHandler** - Dedicated 208-line OAuth/PKCE flow handler for improved security and maintainability
+- **OAuth App Integration** - Added OAuth app name constant for improved authorization flow clarity
+
+#### 🔑 Authentication Scope Management
+- **Unified Authentication** - Unified API and provisioning key fields with improved loading feedback
+- **Scope Management** - Added authentication scope management for API and provisioning keys
+- **Property Accessors** - Refactored authentication scope management to use property accessors for better encapsulation
+- **Synchronized Settings** - Synchronized authentication settings across UI components for consistency
+
+#### ✅ Enhanced Key Validation
+- **Comprehensive Validation** - Enhanced API key and provisioning key validation with improved error handling
+- **Scope-Aware Validation** - Added key validation for current authentication scope
+- **KeyValidator Utility** - Created 96-line KeyValidator utility for centralized validation logic
+- **Centralized Error Messages** - Created 145-line ErrorMessages utility for consistent user feedback
+
+### Code Quality & Architecture
+
+#### Setup Wizard Refactoring
+- **Extracted PkceAuthHandler** - 208-line dedicated OAuth/PKCE flow handler
+- **Extracted SetupWizardConfig** - 44-line centralized configuration constants
+- **Extracted SetupWizardErrorHandler** - 88-line standardized error handling with user-friendly messages
+- **Extracted SetupWizardLogger** - 79-line controlled logging with different levels
+- **Reduced Complexity** - Reduced SetupWizardDialog from 1,194 to 1,048 lines (146 lines removed)
+- **Improved Testability** - Made OpenRouterService open with baseUrlOverride for better testing
+
+#### Service Layer Improvements
+- **Dynamic URL Generation** - Refactored endpoint methods in OpenRouterService for dynamic URL generation
+- **Enhanced Logging** - Updated auth scope to REGULAR and enhanced logging for PKCE exchange process
+- **Deprecated Method Removal** - Removed deprecated key validation methods and updated endpoint logging
+
+#### UI/UX Enhancements
+- **Event Listeners** - Implemented UI updates and event listeners for authentication scope changes
+- **Null Safety** - Improved null safety and error handling in activity data processing and UI components
+- **Welcome Notification** - Enhanced welcome notification formatting for better user experience
+- **Proxy Settings** - Better proxy settings management and UI feedback
+
+### Testing & Quality
+
+#### Comprehensive Test Coverage
+- **Authentication Tests** - Added comprehensive authentication tests for OpenRouterService (312 lines)
+- **PKCE Tests** - PKCE auth code exchange tests with MockWebServer for realistic HTTP testing
+- **Validation Tests** - API key and provisioning key validation tests
+- **Network Error Tests** - Network error handling tests for robust error recovery
+- **Integration Tests** - Added OpenRouterConfigurableIntegrationTest (161 lines)
+- **Settings Panel Tests** - Enhanced OpenRouterSettingsPanelIntegrationTest and OpenRouterSettingsPanelUITest (243 lines)
+
+### Technical Improvements
+
+#### New Utility Classes
+- **OpenRouterConstants** - 140-line constants file for OpenRouter API configuration
+- **UIConstants** - 125-line constants file for UI configuration and magic numbers
+- **ErrorMessages** - 145-line centralized error message management
+- **KeyValidator** - 96-line validation utility for API and provisioning keys
+- **OkHttpExtensions** - Enhanced HTTP client extensions for better request handling
+- **OpenRouterRequestBuilder** - Improved request builder with better error handling
+
+#### New Dynamic Plugin Support Files
+- **PluginLifecycleListener** - 72-line listener for plugin load/unload events
+- **DynamicPluginSupportTest** - 150-line test suite for dynamic plugin functionality
+- **DYNAMIC_PLUGIN_SUPPORT.md** - 150-line comprehensive documentation with troubleshooting guide
+
+#### Refactoring & Cleanup
+- **Constants Extraction** - Replaced magic numbers with proper constants throughout codebase
+- **Helper Classes** - Extracted helper classes from SetupWizardDialog for better separation of concerns
+- **Improved Maintainability** - Better code organization and reduced method complexity
+- **Enhanced Error Handling** - Standardized error handling across all components
+- **Disposable Implementation** - All services properly implement Disposable for resource cleanup
+
+### Statistics
+- **38+ files changed**
+- **3,800+ insertions(+), 550+ deletions(-)**
+- **Net change: +3,250+ lines**
+- **13 new files** - Utilities, handlers, listeners, tests, and documentation
+- **10 new files created** (utilities, handlers, tests)
+
 ## [0.3.0] - 2025-12-05
 
 ### New Features

README.md

@@ -1,7 +1,7 @@
 # OpenRouter IntelliJ Plugin
 
 [![JetBrains Plugin](https://img.shields.io/badge/JetBrains-Plugin-orange.svg)](https://plugins.jetbrains.com/plugin/28520)
-[![Version](https://img.shields.io/badge/version-0.3.0-blue.svg)](https://github.com/DimazzzZ/openrouter-intellij-plugin/releases)
+[![Version](https://img.shields.io/badge/version-0.4.0-blue.svg)](https://github.com/DimazzzZ/openrouter-intellij-plugin/releases)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
 An IntelliJ IDEA plugin for integrating with [OpenRouter.ai](https://openrouter.ai), providing access to 400+ AI models with usage monitoring, quota tracking, and seamless JetBrains AI Assistant integration.
@@ -10,14 +10,14 @@ An IntelliJ IDEA plugin for integrating with [OpenRouter.ai](https://openrouter.
 
 - **🤖 AI Assistant Proxy** - Configurable local proxy server (ports 8880-8899 by default) with auto-start control and flexible port selection
 - **📊 Status Bar Widget** - Real-time usage display with comprehensive popup menu
-- **🔑 API Key Management** - Secure provisioning key support with automatic API key creation
+- **🔑 Flexible Authentication** - OAuth/PKCE or Provisioning Key support with secure credential storage
 - **📈 Usage Analytics** - Track token consumption, costs, and model performance
 - **🔴 Real-time Monitoring** - Live connection status with color-coded indicators
 - **📋 Statistics Popup** - Detailed usage analytics in modal dialog
 - **⚙️ Settings Panel** - Configuration with validation and testing
 - **🌐 OpenAI Compatibility** - Full OpenAI API compatibility layer for custom integrations
 - **🔒 Security** - Encrypted API key storage with localhost-only proxy access
-- **🧪 Comprehensive Testing** - 207+ tests covering unit, integration, and E2E scenarios
+- **🧪 Comprehensive Testing** - 475+ tests covering unit, integration, and E2E scenarios
 - **🛠️ Developer-Friendly** - Extensive documentation and debugging capabilities
 - **⭐ Favorite Models** - Quick access to your preferred AI models with advanced filtering:
   - Filter by provider (OpenAI, Anthropic, Google, Meta, etc.)
@@ -48,28 +48,23 @@ An IntelliJ IDEA plugin for integrating with [OpenRouter.ai](https://openrouter.
 When you first install the plugin, a **welcome notification** will appear with a "Quick Setup" button. This launches a step-by-step wizard that guides you through:
 
 1. **Welcome** - Introduction to OpenRouter and what you'll need
-2. **Provisioning Key** - Add and automatically validate your key from [OpenRouter](https://openrouter.ai/settings/provisioning-keys)
+2. **Authentication** - Choose your authentication method:
+   - **Regular API Key** - OAuth/PKCE flow (one-click browser authorization)
+   - **Provisioning Key** - Extended mode with full monitoring capabilities
 3. **Favorite Models** - Select your preferred models with embedded search and filtering
 4. **Completion** - Copy proxy server URL and configure AI Assistant
 
-**New in v0.2.0+:**
-- ✅ Automatic provisioning key validation with visual feedback
-- ✅ Embedded model selection UI with real-time search
-- ✅ Smart button states (Next/Finish only enabled when ready)
-- ✅ Polished layout with proper spacing and typography
-- ✅ Back button navigation between steps
-
 The wizard makes setup quick and easy, especially for first-time users!
 
 ### Manual Setup
 
-1. **Get Provisioning Key**: Visit [OpenRouter Provisioning Keys](https://openrouter.ai/settings/provisioning-keys)
-2. **Configure**: `Settings` → `Tools` → `OpenRouter` → Enter Provisioning Key
+1. **Open Settings**: `Settings` → `Tools` → `OpenRouter`
+2. **Choose Authentication Method**:
+   - **Regular API Key**: Click "Connect to OpenRouter" for OAuth/PKCE browser authorization
+   - **Provisioning Key**: Get from [OpenRouter Provisioning Keys](https://openrouter.ai/settings/provisioning-keys) and paste
 3. **Select Models**: `Settings` → `Tools` → `OpenRouter` → `Favorite Models` → Choose your models
 4. **Start Using**: Click status bar widget to access features
 
-The plugin automatically creates and configures an API key when you provide a provisioning key.
-
 ## 🤖 AI Assistant Integration
 
 **NEW**: Connect JetBrains AI Assistant to OpenRouter's 400+ AI models using the plugin's local proxy server!
@@ -79,19 +74,20 @@ The plugin automatically creates and configures an API key when you provide a pr
 2. **Configure Proxy Server**: Auto-start is disabled by default - manually start via Settings or enable auto-start
 3. **Configure AI Assistant**: Settings → Tools → AI Assistant → Models → Add custom model
    - **Provider**: Custom
-   - **Server URL**: Copy from OpenRouter settings (e.g., `http://127.0.0.1:8080`)
+   - **Server URL**: Copy from OpenRouter settings (e.g., `http://127.0.0.1:8880`)
    - **API Key**: Any text (not validated by proxy)
    - **Model**: Choose from OpenRouter's model catalog
 4. **Start Using**: Access 400+ models through AI Assistant
 
 📖 **[Complete Setup Guide](docs/AI_ASSISTANT_SETUP.md)** - Step-by-step instructions with screenshot placeholders
 
 ### Supported Models
-- **OpenAI**: GPT-4, GPT-4 Turbo, GPT-3.5 Turbo
-- **Anthropic**: Claude 3 Opus, Claude 3 Sonnet, Claude 3 Haiku  
-- **Meta**: Llama 2 70B, Code Llama
-- **Google**: Gemini Pro, PaLM 2
-- **Mistral**: Mistral 7B, Mixtral 8x7B
+- **OpenAI**: GPT-4o, GPT-4 Turbo, o1, o3-mini
+- **Anthropic**: Claude 3.5 Sonnet, Claude 3 Opus, Claude 3 Haiku
+- **Meta**: Llama 3.3, Llama 3.1, Code Llama
+- **Google**: Gemini 2.0 Flash, Gemini 1.5 Pro
+- **Mistral**: Mistral Large, Mixtral 8x22B
+- **DeepSeek**: DeepSeek V3, DeepSeek R1
 - **And 390+ more models from 40+ providers!**
 
 ### Benefits
@@ -142,23 +138,18 @@ proxyPortRangeEnd = 8899        // Range end for auto-selection
 - **Settings Management** - Encrypted credential storage with validation
 - **Status Bar Integration** - Real-time monitoring with minimal UI footprint
 
-### API Key Handling
-The plugin uses a sophisticated API key management system:
-- **Provisioning Keys** - Primary authentication for quota/usage data
-- **API Keys** - Automatically created for chat completions
+### Authentication Methods
+The plugin supports two authentication methods:
+- **Regular API Key** (OAuth/PKCE) - One-click browser authorization, minimal permissions, no usage monitoring
+- **Provisioning Key** (Extended) - Full functionality with quota tracking, usage monitoring, and API key management
 - **Security** - All keys encrypted using IntelliJ's credential store
 - **Validation** - Real-time key testing and status verification
 
-### Recent Fixes
-- **401 Error Resolution** - Fixed API key handling to use settings instead of Authorization headers
-- **Model Name Compatibility** - Updated to use full OpenRouter model names (e.g., `openai/gpt-4-turbo`)
-- **Security Cleanup** - Removed all real API keys from codebase and documentation
-
 ## Compatibility
 
 **Supported IDEs**: IntelliJ IDEA, WebStorm, PyCharm, PhpStorm, RubyMine, CLion, Android Studio, GoLand, Rider
-**IDE Versions**: 2023.2+ to 2025.3+
-**Requirements**: OpenRouter.ai account with Provisioning Key
+**IDE Versions**: 2024.1+ to 2025.3+
+**Requirements**: OpenRouter.ai account (free or paid)
 
 ## Development
 
@@ -173,7 +164,7 @@ cd openrouter-intellij-plugin
 
 ### Testing
 ```bash
-# Run all tests (207+ tests)
+# Run all tests (475+ tests)
 ./gradlew test
 
 # Run core functionality tests only
@@ -183,13 +174,36 @@ cd openrouter-intellij-plugin
 ./gradlew runIde --no-daemon
 ```
 
-**Test Coverage**:
-- **Unit Tests** - 109 tests covering data models, settings, and business logic
-- **Integration Tests** - 50+ tests for API key handling and proxy server functionality
-- **Request Builder Tests** - 12 tests validating refactored HTTP request construction
-- **Favorite Models Tests** - 11 tests for favorite models management
-- **Security Tests** - Comprehensive validation of API key handling and encryption
-- **Total** - 207+ tests with 100% pass rate
+### Testing Dynamic Plugin Support
+
+The plugin supports installation, updates, and uninstallation **without IDE restart** (dynamic plugin).
+
+**Quick Test** (Enable/Disable):
+```bash
+# Start development IDE and test enable/disable
+./scripts/test-enable-disable.sh
+
+# In the IDE: Settings → Plugins → Toggle OpenRouter OFF/ON
+# Should work without restart ✅
+```
+
+**Full Test** (Multiple Versions):
+```bash
+# Build 3 test versions (0.4.0, 0.4.1, 0.4.2)
+./scripts/build-test-versions.sh
+
+# Install v0.4.0 (may require restart on first install)
+# Update to v0.4.1 (should NOT require restart)
+# Update to v0.4.2 (should NOT require restart)
+```
+
+See [LOCAL_DYNAMIC_PLUGIN_TESTING.md](docs/LOCAL_DYNAMIC_PLUGIN_TESTING.md) for detailed testing instructions.
+
+**Test Coverage**: 475+ tests with 100% pass rate
+- Unit tests for data models, settings, and business logic
+- Integration tests for API key handling and proxy server functionality
+- Authentication tests with MockWebServer for realistic HTTP testing
+- Security tests for API key handling and encryption
 
 For detailed testing information, see [TESTING.md](TESTING.md).
 

build.gradle.kts

@@ -114,7 +114,7 @@ tasks {
         systemProperty("java.awt.headless", "true")
         jvmArgs = listOf(
             "-Dnet.bytebuddy.experimental=true",  // For Mockito Java 21+ compatibility
-            "--add-opens=java.base/java.lang=ALL-UNNAMED",  // For Java 25 compatibility
+            "--add-opens=java.base/java.lang=ALL-UNNAMED",
             "--add-opens=java.base/java.util=ALL-UNNAMED"
         )
         testLogging {

gradle.properties

@@ -3,7 +3,7 @@
 pluginGroup = org.zhavoronkov
 pluginName = OpenRouter
 pluginRepositoryUrl = https://github.com/DimazzzZ/openrouter-intellij-plugin
-pluginVersion = 0.3.0
+pluginVersion = 0.4.0
 
 # Plugin metadata
 pluginId = org.zhavoronkov.openrouter