@sifxprime/krouter 0.5.7 → 0.5.8

package/cli.js

@@ -55,6 +55,15 @@ try { ensureSqliteRuntime({ silent: true }); } catch {}
 // Self-heal tray runtime (systray for macOS/Linux only). Windows skipped.
 try { ensureTrayRuntime({ silent: true }); } catch {}
 
+// Upgrade safety: existing v0.5.6 users who had autostart enabled may have a
+// LaunchAgent / Startup .vbs / .desktop file pointing at the old `9router`
+// global binary that's been uninstalled. Sweep dangling entries so launchd
+// doesn't error every boot — user re-enables from the new tray when ready.
+try {
+  const { sweepDanglingAutostartEntries } = require("./src/cli/tray/autostart");
+  sweepDanglingAutostartEntries();
+} catch {}
+
 // Configuration constants
 const APP_NAME = pkg.name; // Use from package.json
 const INSTALL_CMD_LATEST = `npm i -g ${APP_NAME}@latest --prefer-online`;
@@ -141,6 +150,7 @@ function dataDirByName(name) {
     ? path.join(process.env.APPDATA || "", name)
     : path.join(os.homedir(), `.${name}`);
 }
+let legacyCoexistWarned = false;
 function getAppDataDir() {
   const target = dataDirByName(DATA_DIR_NAME);
   const legacy = dataDirByName(LEGACY_DATA_DIR_NAME);
@@ -148,6 +158,15 @@ function getAppDataDir() {
     if (!fs.existsSync(target) && fs.existsSync(legacy)) {
       fs.renameSync(legacy, target);
       console.log(`[cli] Migrated data dir: ${legacy} → ${target}`);
+    } else if (fs.existsSync(target) && fs.existsSync(legacy) && !legacyCoexistWarned) {
+      // Both dirs exist — auto-migration won't fire. Surface so user can reconcile.
+      // Don't auto-delete (user data); they decide how to merge / remove the legacy.
+      legacyCoexistWarned = true;
+      console.warn(
+        `[cli] Legacy ${legacy} still exists alongside ${target}. ` +
+        `New writes go to ${target}; the legacy is not read. ` +
+        `If unmerged settings exist there, back it up, merge manually, then: rm -rf ${legacy}`
+      );
     }
   } catch (e) {
     console.warn(`[cli] Data-dir auto-migration failed (${e.code || e.message}); continuing with ${target}`);
@@ -561,10 +580,30 @@ async function showInterfaceMenu(latestVersion) {
 const MAX_RESTARTS = 2;
 const RESTART_RESET_MS = 30000; // Reset counter if alive > 30s
 
+// First non-internal IPv4 — the address remote peers actually reach when bound to 0.0.0.0.
+function getLanIp() {
+  for (const ifaces of Object.values(os.networkInterfaces())) {
+    for (const i of ifaces || []) {
+      if (i.family === "IPv4" && !i.internal) return i.address;
+    }
+  }
+  return null;
+}
+
 function startServer(latestVersion) {
   const displayHost = host === DEFAULT_HOST ? "localhost" : host;
   const url = `http://${displayHost}:${port}/dashboard`;
 
+  // Surface real network exposure when bound to all interfaces (default 0.0.0.0).
+  // Ported from upstream — without this the user has no signal that their
+  // dashboard + API is reachable from anyone else on their LAN.
+  if (host === DEFAULT_HOST) {
+    const lanIp = getLanIp();
+    if (lanIp) {
+      console.log(`\x1b[33m⚠ Network-exposed: reachable at http://${lanIp}:${port} (bound 0.0.0.0). Use --host 127.0.0.1 for local-only.\x1b[0m`);
+    }
+  }
+
   let restartCount = 0;
   let serverStartTime = Date.now();
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sifxprime/krouter",
-  "version": "0.5.7",
+  "version": "0.5.8",
   "description": "kRouter (Kodelyth Router) CLI — Kodelyth AI Infrastructure",
   "homepage": "https://github.com/sifxprime/krouter",
   "repository": {
@@ -36,8 +36,8 @@
     "react": "19.2.1",
     "react-dom": "19.2.1"
   },
-  "comment_sqlite": "sql.js + better-sqlite3 are NOT bundled here. They are installed into ~/.9router/runtime/node_modules by hooks/postinstall.js (and re-checked at runtime by cli.js). This avoids Windows EBUSY errors when updating the global CLI, since native .node files no longer live under the locked install dir.",
-  "comment_systray": "systray2 is NOT bundled here. It is lazy-installed into ~/.9router/runtime/node_modules by hooks/postinstall.js on macOS/Linux only. Windows uses PowerShell NotifyIcon (zero binary). This avoids shipping unsigned Go binaries that trigger antivirus false positives (Kaspersky). We use the systray2 fork because the legacy systray@1.0.5 ships a 2017 x86_64 binary that fails on modern macOS dyld.",
+  "comment_sqlite": "sql.js + better-sqlite3 are NOT bundled here. They are installed into ~/.krouter/runtime/node_modules by hooks/postinstall.js (and re-checked at runtime by cli.js). This avoids Windows EBUSY errors when updating the global CLI, since native .node files no longer live under the locked install dir.",
+  "comment_systray": "systray2 is NOT bundled here. It is lazy-installed into ~/.krouter/runtime/node_modules by hooks/postinstall.js on macOS/Linux only. Windows uses PowerShell NotifyIcon (zero binary). This avoids shipping unsigned Go binaries that trigger antivirus false positives (Kaspersky). We use the systray2 fork because the legacy systray@1.0.5 ships a 2017 x86_64 binary that fails on modern macOS dyld.",
   "engines": {
     "node": ">=18.0.0"
   },

package/src/cli/tray/autostart.js

@@ -175,6 +175,71 @@ function cleanupLegacyMacOSAutostart() {
   } catch (e) { /* leave it alone if we can't write */ }
 }
 
+/**
+ * One-time best-effort sweep run at every kRouter startup: detect autostart
+ * entries (LaunchAgent / Startup .vbs / .desktop) that point at an executable
+ * which no longer exists on disk, and remove them. Catches the upgrade case
+ * where a v0.5.6 user:
+ *   1. had autostart enabled (entry points at npm-global path of the old
+ *      `9router` package)
+ *   2. ran `npm uninstall -g 9router` then `npm i -g @sifxprime/krouter`
+ *   3. the entry now references a binary that no longer exists, so launchd
+ *      logs an error every boot and no tray appears.
+ *
+ * After cleanup the user can re-enable autostart from the new tray menu and
+ * the cleanup helpers above write a fresh entry pointing at the new install.
+ */
+function sweepDanglingAutostartEntries() {
+  if (process.platform === "darwin") {
+    for (const label of [LEGACY_APP_LABEL, APP_LABEL]) {
+      const plistPath = path.join(os.homedir(), "Library", "LaunchAgents", `${label}.plist`);
+      if (!fs.existsSync(plistPath)) continue;
+      try {
+        const content = fs.readFileSync(plistPath, "utf-8");
+        // ProgramArguments are inside <string>…</string> tags; we care about the
+        // FIRST node executable and the SECOND argument (path to cli.js).
+        const argMatches = [...content.matchAll(/<string>([^<]+)<\/string>/g)].map((m) => m[1]);
+        // Find the path that looks like a cli.js entry (ends with cli.js or
+        // is the npm-global lib path for the old "9router" package).
+        const scriptArg = argMatches.find((a) => /cli\.js$/.test(a) || a.includes("9router"));
+        if (scriptArg && !fs.existsSync(scriptArg)) {
+          if (!isAgentSelfMacOS(label)) {
+            try { execSync(`launchctl unload "${plistPath}"`, { stdio: "ignore" }); } catch { /* ignore */ }
+          }
+          fs.unlinkSync(plistPath);
+        }
+      } catch { /* unreadable plist — skip */ }
+    }
+  } else if (process.platform === "win32") {
+    const startupDir = path.join(process.env.APPDATA || "", "Microsoft", "Windows", "Start Menu", "Programs", "Startup");
+    for (const name of [`${APP_NAME}.vbs`, `${LEGACY_APP_NAME}.vbs`]) {
+      const vbsPath = path.join(startupDir, name);
+      if (!fs.existsSync(vbsPath)) continue;
+      try {
+        const content = fs.readFileSync(vbsPath, "utf-8");
+        // VBS shape: WshShell.Run """{nodePath}"" ""{cliJsPath}"" --tray --skip-update", 0, False
+        const m = content.match(/WshShell\.Run\s+"""([^"]+)""\s+""([^"]+)""/);
+        if (m && (!fs.existsSync(m[1]) || !fs.existsSync(m[2]))) {
+          fs.unlinkSync(vbsPath);
+        }
+      } catch { /* unreadable vbs — skip */ }
+    }
+  } else if (process.platform === "linux") {
+    const autostartDir = path.join(os.homedir(), ".config", "autostart");
+    for (const name of [`${APP_NAME}.desktop`, `${LEGACY_APP_NAME}.desktop`]) {
+      const desktopPath = path.join(autostartDir, name);
+      if (!fs.existsSync(desktopPath)) continue;
+      try {
+        const content = fs.readFileSync(desktopPath, "utf-8");
+        const m = content.match(/^Exec=(\S+)\s+(\S+)/m);
+        if (m && (!fs.existsSync(m[1]) || !fs.existsSync(m[2]))) {
+          fs.unlinkSync(desktopPath);
+        }
+      } catch { /* unreadable desktop — skip */ }
+    }
+  }
+}
+
 function enableMacOS(cliPath) {
   // Migrate away from the pre-rename plist BEFORE writing the new one so the
   // user doesn't end up with two LaunchAgents both firing on next login.
@@ -364,5 +429,6 @@ function disableLinux() {
 module.exports = {
   enableAutoStart,
   disableAutoStart,
-  isAutoStartEnabled
+  isAutoStartEnabled,
+  sweepDanglingAutostartEntries
 };

package/src/cli/tray/tray.ps1

@@ -1,4 +1,4 @@
-# 9Router tray icon for Windows using NotifyIcon
+# kRouter tray icon for Windows using NotifyIcon
 # IPC: stdin JSON commands, stdout JSON events
 param([string]$IconPath, [string]$Tooltip)
 

package/app/.next-cli-build/server/chunks/1051.js

@@ -1 +0,0 @@
-"use strict";exports.id=1051,exports.ids=[1051,1998],exports.modules={7803:(a,b,c)=>{c.r(b),c.d(b,{debug:()=>f,error:()=>i,info:()=>g,maskKey:()=>m,request:()=>j,response:()=>k,stream:()=>l,warn:()=>h});function d(){return new Date().toLocaleTimeString("en-US",{hour12:!1})}function e(a){if(!a)return"";if("string"==typeof a)return a;try{return JSON.stringify(a)}catch{return String(a)}}function f(a,b,c){!0;{let f=c?` ${e(c)}`:"";console.log(`[${d()}] 🔍 [${a}] ${b}${f}`)}}function g(a,b,c){!0;{let f=c?` ${e(c)}`:"";console.log(`[${d()}] ℹ️  [${a}] ${b}${f}`)}}function h(a,b,c){c&&e(c)}function i(a,b,c){!0;{let f=c?` ${e(c)}`:"";console.log(`[${d()}] ❌ [${a}] ${b}${f}`)}}function j(a,b,c){let f=c?` ${e(c)}`:"";console.log(`\x1b[36m[${d()}] 📥 ${a} ${b}${f}\x1b[0m`)}function k(a,b,c){let f=c?` ${e(c)}`:"";console.log(`[${d()}] ${a<400?"\uD83D\uDCE4":"\uD83D\uDCA5"} ${a} (${b}ms)${f}`)}function l(a,b){let c=b?` ${e(b)}`:"";console.log(`[${d()}] 🌊 [STREAM] ${a}${c}`)}function m(a){return!a||a.length<8?"***":`${a.slice(0,4)}...${a.slice(-4)}`}},19225:(a,b,c)=>{a.exports=c(44870)},39326:(a,b,c)=>{c.d(b,{B:()=>f});var d=c(71998);function e(a){return null==a?"":String(a).trim()}async function f(a={}){try{let b=e(a?.proxyPoolId),c="__none__"===b?"":b,f=function(a={}){let b=a?.connectionProxyEnabled===!0,c=e(a?.connectionProxyUrl);return{connectionProxyEnabled:b,connectionProxyUrl:c,connectionNoProxy:e(a?.connectionNoProxy)}}(a);if(c){let a=await (0,d.hr)(c),b=e(a?.proxyUrl),f=e(a?.noProxy);if(a&&!0===a.isActive&&b){if("vercel"===a.type||"cloudflare"===a.type||"deno"===a.type)return{source:a.type,proxyPoolId:c,proxyPool:a,connectionProxyEnabled:!1,connectionProxyUrl:"",connectionNoProxy:f,strictProxy:!0===a.strictProxy,vercelRelayUrl:b};return{source:"pool",proxyPoolId:c,proxyPool:a,connectionProxyEnabled:!0,connectionProxyUrl:b,connectionNoProxy:f,strictProxy:!0===a.strictProxy}}}if(f.connectionProxyEnabled&&f.connectionProxyUrl)return{source:"legacy",proxyPoolId:c||null,proxyPool:null,...f};return{source:"none",proxyPoolId:c||null,proxyPool:null,...f}}catch(a){return console.error("[resolveConnectionProxyConfig] Failed to resolve proxy config:",a),{source:"error",proxyPoolId:null,proxyPool:null,connectionProxyEnabled:!1,connectionProxyUrl:"",connectionNoProxy:"",strictProxy:!1}}}},71998:(a,b,c)=>{c.d(b,{Fh:()=>d.Fh,L9:()=>d.L9,Mc:()=>d.Mc,OM:()=>d.OM,P:()=>d.getProviderConnections,Pc:()=>d.Pc,Q_:()=>d.Q_,Qu:()=>d.Qu,S8:()=>d.S8,Yd:()=>d.Yd,ZO:()=>d.ZO,c:()=>d.c,createProviderConnection:()=>d.iE,fK:()=>d.fK,fv:()=>d.fv,ho:()=>d.ho,hr:()=>d.hr,i0:()=>d.i0,o5:()=>d.o5,op:()=>d.op,rj:()=>d.updateProviderConnection,uL:()=>d.uL,ui:()=>d.ui,uv:()=>d.uv});var d=c(89718)},80238:(a,b,c)=>{c.d(b,{Pt:()=>m,Tr:()=>n,c1:()=>k,kI:()=>o,vk:()=>l});var d=c(89718),e=c(39326),f=c(12557),g=c(3662),h=c(75681),i=c(7803);let j=Promise.resolve();async function k(a,b=null,c=null,g={}){let l,m=b instanceof Set?b:b?new Set([b]):new Set,n=g?.preferredConnectionId||null,o=j;j=new Promise(a=>{l=a});try{let b;await o;let g=(0,h.rs)(a);if(h.IS[g]?.noAuth){let a=((await (0,d.mt)()).providerStrategies||{})[g]||{},b=await (0,e.B)({proxyPoolId:a.proxyPoolId||""});return{id:"noauth",connectionName:"Public",isActive:!0,accessToken:"public",providerSpecificData:{connectionProxyEnabled:b.connectionProxyEnabled,connectionProxyUrl:b.connectionProxyUrl,connectionNoProxy:b.connectionNoProxy,connectionProxyPoolId:b.proxyPoolId||null,vercelRelayUrl:b.vercelRelayUrl||""}}}let j=await (0,d.getProviderConnections)({provider:g,isActive:!0});if(i.debug("AUTH",`${a} | total connections: ${j.length}, excludeIds: ${m.size>0?[...m].join(","):"none"}, model: ${c||"any"}`),0===j.length)return i.warn("AUTH",`No credentials for ${a}`),null;let k=j.filter(a=>!(m.has(a.id)||(0,f.Bl)(a,c)));if(i.debug("AUTH",`${a} | available: ${k.length}/${j.length}`),j.forEach(a=>{let b=m.has(a.id),d=(0,f.Bl)(a,c);if(b||d){let e=(0,f.kJ)(a);i.debug("AUTH",`  → ${a.id?.slice(0,8)} | ${b?"excluded":""} ${d?`modelLocked(${c}) until ${e}`:""}`)}}),0===k.length){let b=j.filter(a=>(0,f.Bl)(a,c)),d=b.map(a=>(0,f.kJ)(a)).filter(Boolean).sort()[0]||null;if(d){let e=b[0];return i.warn("AUTH",`${a} | all ${j.length} accounts locked for ${c||"all"} (${(0,f.Qo)(d)}) | lastError=${e?.lastError?.slice(0,50)}`),{allRateLimited:!0,retryAfter:d,retryAfterHuman:(0,f.Qo)(d),lastError:e?.lastError||null,lastErrorCode:e?.errorCode||null}}return i.warn("AUTH",`${a} | all ${j.length} accounts unavailable`),null}let l=await (0,d.mt)(),p=(l.providerStrategies||{})[g]||{},q=p.fallbackStrategy||l.fallbackStrategy||"fill-first";if(n&&(b=k.find(a=>a.id===n))&&i.info("AUTH",`${a} | pinned to ${b.id?.slice(0,8)} (${b.name||b.email||"unnamed"})`),b);else if("round-robin"===q){let a=p.stickyRoundRobinLimit||l.stickyRoundRobinLimit||3,c=[...k].sort((a,b)=>a.lastUsedAt||b.lastUsedAt?a.lastUsedAt?b.lastUsedAt?new Date(b.lastUsedAt)-new Date(a.lastUsedAt):-1:1:(a.priority||999)-(b.priority||999))[0],e=c?.consecutiveUseCount||0;c&&c.lastUsedAt&&e<a?(b=c,await (0,d.updateProviderConnection)(b.id,{lastUsedAt:new Date().toISOString(),consecutiveUseCount:(b.consecutiveUseCount||0)+1})):(b=[...k].sort((a,b)=>a.lastUsedAt||b.lastUsedAt?a.lastUsedAt?b.lastUsedAt?new Date(a.lastUsedAt)-new Date(b.lastUsedAt):1:-1:(a.priority||999)-(b.priority||999))[0],await (0,d.updateProviderConnection)(b.id,{lastUsedAt:new Date().toISOString(),consecutiveUseCount:1}))}else b=k[0];let r=await (0,e.B)(b.providerSpecificData||{});return{authType:b.authType,apiKey:b.apiKey,accessToken:b.accessToken,refreshToken:b.refreshToken,idToken:b.idToken,expiresAt:b.expiresAt,expiresIn:b.expiresIn,lastRefreshAt:b.lastRefreshAt,projectId:b.projectId,connectionName:b.displayName||b.name||b.email||b.id,copilotToken:b.providerSpecificData?.copilotToken,providerSpecificData:{...b.providerSpecificData||{},connectionProxyEnabled:r.connectionProxyEnabled,connectionProxyUrl:r.connectionProxyUrl,connectionNoProxy:r.connectionNoProxy,connectionProxyPoolId:r.proxyPoolId||null,vercelRelayUrl:r.vercelRelayUrl||""},connectionId:b.id,testStatus:b.testStatus,lastError:b.lastError,_connection:b}}finally{l&&l()}}async function l(a,b,c,e=null,h=null,j=null){if(!a||"noauth"===a)return{shouldFallback:!1,cooldownMs:0};let k="string"==typeof c?c.slice(0,100):"Provider error",m={shouldFallback:!1,cooldownMs:0},n=null,o=a.slice(0,8);return await (0,d.Q9)(a,a=>{let d,e,i,l=a?.backoffLevel||0;if(o=a?.displayName||a?.name||a?.email||o,j&&j>Date.now()?(d=!0,e=Math.min(j-Date.now(),g.fh),i=0):{shouldFallback:d,cooldownMs:e,newBackoffLevel:i}=(0,f.hk)(b,c,l),!d)return m={shouldFallback:!1,cooldownMs:0},null;let p=(0,f.S5)(h,e);return n=Object.keys(p)[0],m={shouldFallback:!0,cooldownMs:e},{...p,testStatus:"unavailable",lastError:k,errorCode:b,lastErrorAt:new Date().toISOString(),backoffLevel:i??l}})&&m.shouldFallback&&(i.warn("AUTH",`${o} locked ${n} for ${Math.round(m.cooldownMs/1e3)}s [${b}]`),e&&b&&k&&console.error(`❌ ${e} [${b}]: ${k}`)),m}async function m(a,b,c=null){if(!a||"noauth"===a)return;let e=b._connection||b,f=Date.now(),g=Object.keys(e).filter(a=>a.startsWith("modelLock_"));if(!e.testStatus&&!e.lastError&&0===g.length)return;let h=g.filter(a=>{if(c&&a===`modelLock_${c}`||c&&"modelLock___all"===a)return!0;let b=e[a];return b&&new Date(b).getTime()<=f});if(0===h.length&&"unavailable"!==e.testStatus&&!e.lastError)return;let i=g.filter(a=>{if(h.includes(a))return!1;let b=e[a];return b&&new Date(b).getTime()>f}),j=Object.fromEntries(h.map(a=>[a,null]));0===i.length&&Object.assign(j,{testStatus:"active",lastError:null,lastErrorAt:null,backoffLevel:0}),await (0,d.updateProviderConnection)(a,j)}function n(a){let b=a.headers.get("Authorization");if(b?.startsWith("Bearer "))return b.slice(7);let c=a.headers.get("x-api-key");return c||null}async function o(a){return!!a&&await (0,d.ek)(a)}},92280:(a,b,c)=>{Object.defineProperty(b,"I",{enumerable:!0,get:function(){return g}});let d=c(28208),e=c(47617),f=c(62018);async function g(a,b,c,g){if((0,d.isNodeNextResponse)(b)){var h;b.statusCode=c.status,b.statusMessage=c.statusText;let d=["set-cookie","www-authenticate","proxy-authenticate","vary"];null==(h=c.headers)||h.forEach((a,c)=>{if("x-middleware-set-cookie"!==c.toLowerCase())if("set-cookie"===c.toLowerCase())for(let d of(0,f.splitCookiesString)(a))b.appendHeader(c,d);else{let e=void 0!==b.getHeader(c);(d.includes(c.toLowerCase())||!e)&&b.appendHeader(c,a)}});let{originalResponse:i}=b;c.body&&"HEAD"!==a.method?await (0,e.pipeToNodeResponse)(c.body,i,g):i.end()}}}};