unbrowse 8.3.0-preview.0 → 8.3.0-preview.2

package/bin/unbrowse.js

@@ -4,14 +4,17 @@
  * Auditable runtime launcher.
  *
  * The package ships a READABLE, UNSIGNED runtime at `runtime/cli.js` (an
- * unminified Bun bundle of the source) and runs it here. The source IS the
- * runtime, so the client — including the zk/crypto verification path — is fully
- * auditable on disk. There is nothing to hide: every secret is wallet-sealed
- * (AES-GCM under a key only the holder derives), so reverse-engineering the
- * client yields nothing. Security lives in the wallet, not in obfuscation.
+ * unminified bundle of the source, built `--target=node`) and runs it here under
+ * the same Node that launched this script. The source IS the runtime, so the
+ * client — including the zk/crypto verification path — is fully auditable on disk.
+ * There is nothing to hide: every secret is wallet-sealed (AES-GCM under a key only
+ * the holder derives), so reverse-engineering the client yields nothing. Security
+ * lives in the wallet, not in obfuscation.
  *
- * The runtime requires Bun. If a compiled binary was downloaded post-install,
- * the wrapper runs that instead and never reaches this launcher.
+ * No Bun is required at the user's runtime: the bundle runs on plain Node (>= 22.5,
+ * for the built-in `node:sqlite` driver the route graph uses). If a compiled
+ * single-file binary was injected via UNBROWSE_INSTALL_BINARY_PATH, the wrapper runs
+ * that instead and never reaches this launcher.
  */
 
 import { existsSync } from "node:fs";
@@ -27,33 +30,21 @@ function fail(msg, code = 1) {
   process.exit(code);
 }
 
-function findBun() {
-  const candidates = [
-    process.env.UNBROWSE_BUN_BIN,
-    "bun",
-    join(process.env.HOME || "", ".bun", "bin", "bun"),
-  ].filter(Boolean);
-  for (const candidate of candidates) {
-    try {
-      const probe = spawnSync(candidate, ["--version"], { stdio: "ignore" });
-      if (probe.status === 0) return candidate;
-    } catch {
-      /* try the next candidate */
-    }
-  }
-  return null;
-}
-
 if (!existsSync(runtime)) {
   fail("readable runtime missing (runtime/cli.js). Reinstall: npm install -g unbrowse@latest");
 }
 
-const bun = findBun();
-if (!bun) {
-  fail("this build runs on Bun. Install it from https://bun.sh, then re-run (or set UNBROWSE_BUN_BIN).");
+// The route graph uses Node's built-in node:sqlite (Node >= 22.5). Fail clearly,
+// not with a cryptic module error, when the host Node is too old.
+const [maj, min] = process.versions.node.split(".").map(Number);
+if (maj < 22 || (maj === 22 && min < 5)) {
+  fail(
+    `unbrowse needs Node >= 22.5 (you have ${process.versions.node}). ` +
+      `Upgrade Node (e.g. via nvm or https://nodejs.org), then re-run.`,
+  );
 }
 
-const child = spawnSync(bun, [runtime, ...process.argv.slice(2)], {
+const child = spawnSync(process.execPath, [runtime, ...process.argv.slice(2)], {
   stdio: "inherit",
   cwd: process.cwd(),
   env: process.env,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unbrowse",
-  "version": "8.3.0-preview.0",
+  "version": "8.3.0-preview.2",
   "description": "Reverse-engineer any website into reusable API skills. Zero-dep single binary with embedded browser engine.",
   "mcpName": "io.github.unbrowse-ai/unbrowse",
   "type": "module",
@@ -25,6 +25,7 @@
     "vendor/utls-proxy",
     "scripts/release-assets.mjs",
     "scripts/postinstall.mjs",
+    "scripts/prune-foreign-binaries.mjs",
     "scripts/postinstall-ping.mjs",
     "scripts/verify-release-assets.mjs",
     "README.md",
@@ -42,22 +43,21 @@
   },
   "dependencies": {
     "@fastify/cors": "^11.2.0",
-    "@fastify/rate-limit": "^10.3.0",
-    "@solana/kit": "^6.6.0",
-    "@x402/fetch": "^2.9.0",
     "bs58": "^6.0.0",
     "cheerio": "^1.2.0",
     "dotenv": "^17.3.1",
     "fastify": "^5.7.4",
     "nanoid": "^5.1.6",
-    "tsx": "^4.20.6",
     "ws": "^8.19.0"
   },
   "optionalDependencies": {
-    "keytar": "^7.9.0",
-    "@faremeter/flex-solana": "^0.2.1"
+    "keytar": "^7.9.0"
   },
   "devDependencies": {
-    "@types/node": "^24.6.1"
+    "@types/node": "^24.6.1",
+    "tsx": "^4.20.6"
+  },
+  "engines": {
+    "node": ">=22.5"
   }
 }