zevairouter 1.0.0

package/CHANGELOG.md

@@ -0,0 +1,260 @@
+# v0.4.84 (2026-06-14)
+
+Synced automation, CodeBuddy/Qoder, and auth/quota hardening from upstream (9router_wyx0 v0.4.81–v0.4.84). Runtime identifiers (`wyxrouter` bin, `~/.9router` data dir, upstream API hosts) are unchanged; user-facing surfaces are branded ZevaiRouter.
+
+## Bulk Import — Standalone Playwright Hotfix
+- Fixed bulk import failing in production (`npm run start`) with a misleading "Playwright not available. playwright installed but cannot be required" error even when Playwright and Chromium were installed correctly.
+- Root cause: the standalone server pulls in the `cli/hooks/*` runtime helpers through a dynamic `require()` that Next's file tracer can't follow, so `cli/hooks` was dropped from `.next/standalone`, and `launchChromium` threw on the helper's false-negative verdict *before* it ever tried `import("playwright")`.
+- `next.config.mjs` now force-includes `./cli/hooks/**/*` in `outputFileTracingIncludes`, and `bulkImportBrowserEngine.js` attempts `import("playwright")` first (the path that resolves inside the standalone bundle), only falling back to the runtime helper when the direct import genuinely fails.
+- Net effect: Chromium bulk import now works in both `npm run dev` and standalone `npm run start` with no manual Playwright juggling.
+
+## Bulk Import — Browser Engine Selection
+- Bulk-import modal now offers a Browser Engine dropdown: **Chromium (default)** or **Camoufox (stealth Firefox)**. The engine choice propagates through the job to the launcher.
+- Both engine paths route through `bulkImportBrowserEngine.js`, which wraps the Playwright/Camoufox runtime helpers and converts install/missing-binary failures into actionable error strings.
+- Camoufox ships as an optional dependency (`camoufox-js`) and lazy-installs its Firefox binary into the user data dir on first use; Chromium remains the default and needs no extra install.
+
+## Bulk Import — Playwright & Google Workspace Hotfixes
+- Playwright Chromium auto-installs lazily on the first bulk-import attempt (`cli/hooks/playwrightRuntime.js`), fixing "Executable doesn't exist" right after a global install.
+- Google Workspace "Welcome to your new account" consent screens no longer stall bulk login; the worker prioritises the primary "I understand" action with DOM-level click fallbacks.
+
+## Qoder
+- Added Qoder bulk auto-login (Google SSO + device flow) with a new Automation panel and `/api/oauth/qoder/bulk-import` job routes (cancel + manual session).
+- Executor refuses pre-flight when the requested model is `enable: false` for the account, returning HTTP 403 (`model_not_enabled`) with a plan-tier hint instead of a generic upstream `code: 112` error.
+
+## CodeBuddy
+- Bulk automation continues from Google login through Access Key creation; a worker only succeeds once the generated Access Key is saved. Existing keys are reused; restricted pages attempt key creation instead of skipping.
+- Generated Access Keys are the primary chat credential; the OAuth token, web-session metadata, `uid`, and enterprise identity are retained for upstream quota lookups.
+- Added CLI spoofing headers (`X-App: cli`, `X-Stainless-*`) to the default executor for CodeBuddy.
+- When upstream quota auth is unavailable, Quota Tracker reports the limitation and directs users to ZevaiRouter Usage for locally observed request/token tracking.
+
+## Accounts — Auto-Disable on Terminal Auth Errors
+- Accounts that hit 3 consecutive terminal auth errors are automatically disabled (`isActive: false`), recording `autoDisabledAt`, `autoDisabledReason`, and `consecutiveAuthFailures`. The counter resets on a successful request and re-enabling clears the state; the provider connection row surfaces the reason.
+
+## Tests
+- Added CodeBuddy CLI-header, header-simple, and usage unit suites; expanded CodeBuddy bulk-import and Qoder (plan-gate) coverage.
+
+## Distribution
+- Bumped the root and CLI packages to `0.4.84`, added `camoufox-js` as an optional dependency, and aligned the CLI bin to `wyxrouter`.
+
+# v0.4.71 (2026-06-06)
+
+## Features
+- Caveman: add wenyan classical Chinese levels and sync upstream prompts; locale-based visibility on endpoint page
+- i18n: endpoint exposure notice across multiple languages + Russian README
+- Antigravity: add gemini-3.5-flash-extra-low (Low) model
+- xiaomi-tokenplan: add Claude-native MiMo V2.5 Pro alias via dedicated executor
+- Qoder: fetch latest model + dashboard import-model button (#1642)
+- MiniMax: add MiniMax-M3 + update Quota Tracker coding/CN (#1631)
+
+## Fixes
+- Codex: harden streaming timeouts (stall/connect raised to 60s, configurable per-provider), accept `response.done` event, and always emit a terminal `response.failed` + `[DONE]` for Responses passthrough when a stream closes, stalls, or aborts before a terminal event — prevents codex clients from hanging (#1648, #1680, #1688, #1618)
+- Codex: durable OAuth refresh lifecycle (#1664)
+- Tunnel: skip virtual interfaces to prevent false netchange watchdog
+- Claude: fix forced tool_choice 400 on cc/ OAuth route (#1592)
+- Proxy: raise Next client body limit to 128MB via `NINEROUTER_PROXY_CLIENT_MAX_BODY_SIZE` (#1529, #1572)
+- MiniMax: echo `reasoning_content` on follow-up turns to avoid 400 (#1543)
+- Kiro: handle 400 on tool-bearing history without client tools; add mappable "auto" model slot; fix binary EventStream crash + add models & TTS tool filtering
+- Antigravity: passthrough tab-autocomplete + mark default agent slot mandatory
+- Qoder: allow `qmodel_latest` model key (#1638)
+- Providers: restore one-connection guard for compatible/embedding nodes
+- Model-test: route image/STT probes to their real endpoints, harden STT ping; add opencode-go + xiaomi-tokenplan to connection test (#1576, #1628)
+
+## Improvements
+- Dashboard: reorganize menu actions across sidebar/header/profile
+- Translator: add data-driven coverage, bug-exposing cases, and real provider smoke tests
+
+# v0.4.66 (2026-05-29)
+
+## Features
+- Add Qoder provider: device-flow OAuth, COSY signing, WAF-bypass body encoding, live model catalog, dashboard quota tracker, 11 models (#1372)
+- Add new models: Claude Opus 4.8 (Claude Code), GPT 5.4 Mini (Codex)
+
+## Fixes
+- DeepSeek thinking mode: echo `reasoning_content` back on follow-up/tool-call turns so OpenCode-free and custom providers no longer 400 with "reasoning_content must be passed back" (#1543)
+- Reasoning injector: match deepseek/kimi model ids case-insensitively (covers custom providers using capitalized model names)
+- OpenCode suggested-models: include free models without the `-free` suffix, e.g. `big-pickle` (#1535)
+
+## Improvements
+- Codex: trim sunset models, keep gpt-5.5 / gpt-5.4 / gpt-5.3-codex family, add gpt-5.4-mini
+- volcengine-ark: refresh model list (add DeepSeek-V4-Flash/Pro, drop EOL entries)
+- Lower stream stall timeout 35s → 30s for faster hang detection
+
+# v0.4.63 (2026-05-26)
+
+## Fixes
+- GitHub Copilot: never route Gemini/Claude models to the `/responses` endpoint; prevents misleading "does not support Responses API" 400s (#1062)
+- proxyFetch: restore missing `Readable` import causing runtime `ReferenceError` in DNS-bypass fetch path
+
+## Improvements
+- Lower stream stall timeout from 60s → 35s for faster hang detection
+
+# v0.4.62 (2026-05-26)
+
+## Fixes
+- Codex: auto-retry when upstream drops mid-stream (no more hangs)
+- Codex: fix random 400/404 errors, tool-calling failures, and unstable prompt cache
+- MITM: support Antigravity 2.x 
+- Sanitize Read tool args to prevent retry loops from non-Anthropic models (#1144)
+- Implement json_schema fallback for OpenAI-compatible providers without native Structured Output (#1343)
+- Strip empty Read pages argument in OpenAI-to-Claude translator (#1354)
+- Forward Gemini output dimensions for embeddings (#1366)
+- Resolve setState-in-effect errors in dashboard components (#1362)
+- Gemini CLI: reuse stored OAuth project IDs for quota checks and show clearer setup guidance when the project is missing (#1271, #1428)
+
+## Features
+- Add Cloudflare Workers proxy deployer and pool integration (#1360)
+- Add Deno Deploy relays support and improved proxy pools dashboard layout (#1437)
+
+## Improvements
+- Refactor Tunnel into dedicated Cloudflare and Tailscale manager modules
+- Refactor tokenRefresh service with in-flight dedup to prevent refresh_token_reused errors
+
+# v0.4.59 (2026-05-21)
+
+## Fixes
+- OAuth: fix login flow on Windows
+
+# v0.4.58 (2026-05-21)
+
+## Features
+- xAI Grok provider (OAuth, API key, image)
+- Provider limits: paginated accounts with page size controls
+
+## Fixes
+- Tailscale: fix connection status on Windows (#1300)
+- Tunnel: fix false "checking" when tunnel URL is reachable
+- Stream: fix pipe errors on client disconnect/abort
+
+# v0.4.55 (2026-05-18)
+
+## Features
+- Xiaomi MiMo Token Plan: region selector (Singapore / China / Europe) — keys are cluster-specific
+- Antigravity: risk confirmation dialog before first connection
+- Gemini CLI: surface upstream retry delay on 429 errors
+
+## Fixes
+- MITM: cannot kill process on macOS under sudo (lsof not found in PATH)
+- Stream: false-positive stall timeout on Claude reasoning / Kiro responses
+- Tunnel: cannot re-enable after disable (stuck state)
+- Tunnel: cloudflared error messages now include log tail for easier debugging
+- Language switcher: applies selected locale immediately on close (#1234)
+- Antigravity OAuth: metadata now matches the official client
+
+## Improvements
+- Gemini CLI: bump engine to 0.34.0
+- Re-hide `qwen` (OAuth EOL) and `iflow` (not ready) providers
+
+# v0.4.52 (2026-05-17)
+
+## Features
+- Add Vercel AI Gateway provider support (#1183)
+- rtk: Kiro format tool result compression — handle conversationState.history & currentMessage, preserve error results, ~13.6% savings (#1194)
+
+## Fixes
+- openclaw: normalize agent.model object form `{primary, fallbacks}` before .startsWith → fix TypeError & 'not configured' status (#1216)
+- Usage Details pagination: stay inside mobile viewport <640px (#1218)
+- Fix test model error
+- Fix MIMO provider in Codex
+- Disable log file creation when using MITM AG
+
+# v0.4.50 (2026-05-16)
+
+## Fixes
+- Fix duplicate tray icon on macOS when hiding to tray
+- Fix tray not showing in background mode on macOS
+- Fix hide to tray broken on Windows/Linux
+- Fix Shutdown button in web UI not working
+
+# v0.4.49 (2026-05-16)
+
+## Features
+- Add Kiro provider support: full request/response translation, live model listing, reasoning content support
+- Add `buildOutput` RTK filter with autodetect for npm/yarn/cargo build logs
+- Add MITM warning notification in tray and dashboard
+
+## Improvements
+- Add modalities (input/output) to model configuration for OpenCode
+- Fix tray hide-to-tray: keep current process alive instead of spawning detached child (fixes macOS NSStatusItem ghost icon)
+- Fix tray kill: graceful shutdown with SIGTERM/SIGKILL escalation
+- Fix SIGHUP handling so macOS terminal close doesn't kill tray process
+- Hide deprecated providers (qwen, iflow, antigravity)
+- Update i18n across 32 languages
+
+## Fixes
+- Fix model check (test-models) blocked by dashboardGuard: pass machineId-based CLI token in internal self-calls
+
+# v0.4.46 (2026-05-15)
+
+## Breaking Changes
+- Tunnel public URL changed — old tunnel links no longer work, please reconnect to get the new URL
+
+# v0.4.44 (2026-05-15)
+
+## Features
+- Add Blackbox provider with `bb` alias (#1143)
+- Add Xiaomi token plan provider
+- Enhance model select modal UX + modal traffic lights (#1111)
+- Default Usage dashboard period to Today (#1141)
+
+## Fixes
+- Fix Cowork model selection and Windows CLI packaging (#1129)
+- Update provider name retrieval for compatibility provider (#1135)
+- Update JWT_SECRET handling
+
+# v0.4.41 (2026-05-14)
+
+## Features
+- Add jcode CLI tool integration with auto-configuration (#1047)
+- Redesign CLI Tools dashboard: grid layout (1/2/3 cols) + dedicated detail page per tool
+- Add drag-and-drop reordering for combo models (#1108)
+- Add Today period option to Usage & Analytics (#1063)
+- Add DeepSeek V4 Pro effort aliases (#950)
+
+## Fixes
+- fix(autostart): work on nvm + npm 9/10, actually register with launchctl (#1104, fixes #1082)
+- Fix Ollama usage not tracked/shown in UI (#1102)
+- fix(opencode): preserve DeepSeek reasoning content (#1099, fixes #1093)
+- Fix TUI input lag (replace enquirer with native readline, persistent raw mode)
+- fix(ui): show API key row actions on mobile (#1112)
+
+## Improvements
+- Sync DeepSeek TUI card style with other CLI tools (badges, layout, manual config modal)
+- Add official logos for Amp CLI, jcode, Qwen Code (replace generic icons)
+- Resize deepseek-tui icon 1024→128 with padding for visual consistency
+
+# v0.4.39 (2026-05-14)
+
+## Fixes
+- fix(docker): restore `/app/server.js` (v0.4.38 regression)
+
+# v0.4.38 (2026-05-13)
+
+## Features
+- Add DeepSeek TUI as CLI tool in dashboard (#1088)
+
+## Fixes
+- Fix broken Docker image in v0.4.36/v0.4.37 (#1096, #1097)
+
+## Improvements
+- Clean Docker tags + clearer pulls badge
+
+# v0.4.37 (2026-05-13)
+
+## Improvements
+- Security hardening — upgrade recommended
+
+# v0.4.36 (2026-05-13)
+
+## Features
+- Add MiniMax TTS provider support (#1043)
+- Docker images now published on both Docker Hub (`decolua/9router`) and GHCR — pull from your preferred registry
+
+## Improvements
+- Replace browser confirm dialogs with custom ConfirmModal (#1060)
+
+## Fixes
+- Fix Docker `Cannot find module 'next'` error in standalone build
+- Restore /app/server.js in Docker standalone build (#1064, #1067)
+- Fix CLI TUI menu arrow-key escape sequences leaking (^[[A^[[B)
+- Switch macOS/Linux tray to systray2 fork (fixes Kaspersky AV false-positive) (#1080)
+- Fix zoom controls contrast in topology view (#1066)

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024-2026 decolua and contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,124 @@
+<div align="center">
+
+# ZevaiRouter
+
+### One dashboard to route, automate, and track every AI provider.
+
+ZevaiRouter is a self-hosted AI router with an **OpenAI-compatible API**, **multi-account browser automation**, and **built-in quota tracking** — all wrapped in a sleek **3D dashboard**.
+
+![Next.js](https://img.shields.io/badge/Next.js-16-black?logo=next.js)
+![React](https://img.shields.io/badge/React-19-61DAFB?logo=react&logoColor=white)
+![Tailwind CSS](https://img.shields.io/badge/Tailwind-v4-38BDF8?logo=tailwindcss&logoColor=white)
+![Node](https://img.shields.io/badge/Node-%E2%89%A520-339933?logo=node.js&logoColor=white)
+![License](https://img.shields.io/badge/License-MIT-blue)
+
+</div>
+
+---
+
+## ✨ Features
+
+- **Unified router** — a single OpenAI-compatible endpoint (`/v1`) in front of many AI providers.
+- **Multi-account automation** — connect and rotate multiple provider accounts automatically, with a **Live Browser Preview** that drives real provider logins via Playwright.
+- **Quota tracker** — see real-time usage and limits for every provider and account in one place.
+- **3D dashboard** — a modern glassmorphism UI with depth, layered soft shadows, and smooth hover motion.
+- **Self-hosted** — run it locally or on your own server. Your API keys stay with you.
+- **Drop-in compatible** — works instantly with any tool or coding agent that already speaks the OpenAI format.
+
+## ✅ Prerequisites
+
+- **Node.js ≥ 20** — required. Some runtime dependencies (`undici` 8, `socks-proxy-agent` 10) no longer support Node 18.
+- **npm** (or **Bun** — see the `*:bun` scripts in `package.json`).
+- For **browser automation / Live Browser Preview**: a Chromium build for Playwright (see below).
+
+## 🚀 Quick Start
+
+```bash
+# 1. Set up your environment
+cp .env.example .env
+
+# 2. Install dependencies
+npm install
+
+# 3. (Optional) Install the Chromium browser used by automation
+npx playwright install chromium
+
+# 4. Build & run
+npm run build
+npm run start
+```
+
+Once it's running, open:
+
+| Page | URL |
+| --- | --- |
+| Dashboard | `http://localhost:20128/dashboard` |
+| API (OpenAI-compatible) | `http://localhost:20128/v1` |
+| Automation | `http://localhost:20128/dashboard/automation` |
+| Quota Tracker | `http://localhost:20128/dashboard/quota` |
+
+> For development with hot reload, run `npm run dev` instead.
+
+## 🤖 Browser Automation (Live Browser Preview)
+
+The automation page uses **Playwright** to drive real browser sessions for provider logins and multi-account rotation.
+
+- `playwright` lives in `optionalDependencies`, so a normal `npm install` tries to set it up automatically. If the Chromium binary is missing, install it explicitly:
+  ```bash
+  npx playwright install chromium
+  ```
+- Chromium binaries are stored in Playwright's global cache (`~/Library/Caches/ms-playwright` on macOS, `~/.cache/ms-playwright` on Linux) — **not** inside the project, so they don't need to be bundled into the build.
+- Automation works the same in both run modes:
+  - **Dev:** `npm run dev`
+  - **Production / standalone:** `npm run start`
+
+> **Note:** Older standalone builds could crash with `Cannot find module .../playwright-core/browsers.json`, or fail bulk import with a misleading `playwright installed but cannot be required` error even when Playwright was installed correctly. Both are now fixed — the standalone build force-includes the Playwright packages **and** the `cli/hooks` runtime helpers (`next.config.mjs` → `serverExternalPackages` + `outputFileTracingIncludes`), the start script links the Playwright packages into `.next/standalone/node_modules` (`scripts/start-standalone.mjs`), and the bulk-import launcher (`bulkImportBrowserEngine.js`) imports Playwright directly before falling back to the runtime helper.
+
+## 🌐 Public Access / Hosting
+
+By default the app binds to all interfaces (`0.0.0.0`) so it can be reached beyond localhost. For production:
+
+```bash
+npm run build
+PORT=20128 HOSTNAME=0.0.0.0 NEXT_PUBLIC_BASE_URL=http://<your-host-or-domain>:20128 npm run start
+```
+
+## ⚙️ Configuration (`.env`)
+
+| Variable | Description |
+| --- | --- |
+| `JWT_SECRET` | Random secret used to sign login sessions (**must** be changed). |
+| `INITIAL_PASSWORD` | Initial password for the first dashboard login. |
+| `REQUIRE_API_KEY` | Set `true` to require an API key when calling `/v1`. |
+| `API_KEY_SECRET` | Secret used to derive/validate endpoint proxy API keys. |
+| `AUTH_COOKIE_SECURE` | Set `true` when serving over HTTPS. |
+| `BASE_URL` / `NEXT_PUBLIC_BASE_URL` | The base URL where the app is served. |
+| `PORT` / `HOSTNAME` | Port (default `20128`) and bind host (default `0.0.0.0`). |
+| `HTTP_PROXY` / `HTTPS_PROXY` / `ALL_PROXY` / `NO_PROXY` | Optional outbound proxy for upstream provider calls (lowercase variants also supported). |
+
+See `.env.example` for the full list.
+
+## 🐳 Docker
+
+```bash
+docker build -t zevairouter .
+docker run -d -p 20128:20128 \
+  -e JWT_SECRET="replace-with-a-random-string" \
+  -e INITIAL_PASSWORD="your-password" \
+  --name zevairouter zevairouter
+```
+
+See [DOCKER.md](DOCKER.md) for more detail.
+
+## 🧩 Tech Stack
+
+- **Next.js 16** + **React 19** (App Router, standalone output)
+- **Tailwind CSS v4**
+- **Express** for the proxy/API layer
+- **Playwright** for browser-based provider automation
+- **undici** + **socks-proxy-agent** for upstream / proxy HTTP
+- **SQLite** (`better-sqlite3` optional, `sql.js` fallback) for local storage
+
+## 📄 License
+
+Released under the **MIT** License — see [LICENSE](LICENSE).

package/README.zh-CN.md

@@ -0,0 +1,124 @@
+<div align="center">
+
+# ZevaiRouter
+
+### 一个控制面板，路由、自动化并跟踪所有 AI 提供商。
+
+ZevaiRouter 是一个自托管的 AI 路由器，提供 **兼容 OpenAI 的 API**、**多账户浏览器自动化** 以及 **内置配额跟踪** —— 全部集成在一个精美的 **3D 控制面板** 中。
+
+![Next.js](https://img.shields.io/badge/Next.js-16-black?logo=next.js)
+![React](https://img.shields.io/badge/React-19-61DAFB?logo=react&logoColor=white)
+![Tailwind CSS](https://img.shields.io/badge/Tailwind-v4-38BDF8?logo=tailwindcss&logoColor=white)
+![Node](https://img.shields.io/badge/Node-%E2%89%A520-339933?logo=node.js&logoColor=white)
+![License](https://img.shields.io/badge/License-MIT-blue)
+
+</div>
+
+---
+
+## ✨ 功能特点
+
+- **统一路由** — 在众多 AI 提供商前提供单一的兼容 OpenAI 的端点（`/v1`）。
+- **多账户自动化** — 自动连接并轮询多个提供商账户，并通过 **实时浏览器预览（Live Browser Preview）** 使用 Playwright 驱动真实的提供商登录。
+- **配额跟踪** — 在一处查看每个提供商和账户的实时使用量与限额。
+- **3D 控制面板** — 现代的拟态玻璃 UI，具有立体感、多层柔和阴影和流畅的悬停动画。
+- **自托管** — 在本地或你自己的服务器上运行。你的 API 密钥始终掌握在自己手中。
+- **即插即用** — 与任何已经使用 OpenAI 格式的工具或编程代理立即兼容。
+
+## ✅ 前置要求
+
+- **Node.js ≥ 20** — 必需。部分运行时依赖（`undici` 8、`socks-proxy-agent` 10）已不再支持 Node 18。
+- **npm**（或 **Bun** — 参见 `package.json` 中的 `*:bun` 脚本）。
+- 用于 **浏览器自动化 / 实时浏览器预览**：需要 Playwright 的 Chromium 构建（详见下文）。
+
+## 🚀 快速开始
+
+```bash
+# 1. 设置环境变量
+cp .env.example .env
+
+# 2. 安装依赖
+npm install
+
+# 3.（可选）安装自动化使用的 Chromium 浏览器
+npx playwright install chromium
+
+# 4. 构建并运行
+npm run build
+npm run start
+```
+
+运行后，打开：
+
+| 页面 | URL |
+| --- | --- |
+| 控制面板 | `http://localhost:20128/dashboard` |
+| API（兼容 OpenAI） | `http://localhost:20128/v1` |
+| 自动化 | `http://localhost:20128/dashboard/automation` |
+| 配额跟踪器 | `http://localhost:20128/dashboard/quota` |
+
+> 如需带热重载的开发模式，请改用 `npm run dev`。
+
+## 🤖 浏览器自动化（实时浏览器预览）
+
+自动化页面使用 **Playwright** 驱动真实的浏览器会话，用于提供商登录和多账户轮询。
+
+- `playwright` 位于 `optionalDependencies` 中，因此普通的 `npm install` 会尝试自动设置它。如果缺少 Chromium 二进制文件，请显式安装：
+  ```bash
+  npx playwright install chromium
+  ```
+- Chromium 二进制文件存储在 Playwright 的全局缓存中（macOS 为 `~/Library/Caches/ms-playwright`，Linux 为 `~/.cache/ms-playwright`）—— **不在**项目内部，因此无需打包到构建产物中。
+- 自动化在两种运行模式下表现一致：
+  - **开发模式：** `npm run dev`
+  - **生产 / standalone：** `npm run start`
+
+> **注意：** 较早的 standalone 构建可能会以 `Cannot find module .../playwright-core/browsers.json` 报错，或者在批量导入时报出误导性的 `playwright installed but cannot be required` 错误（即使 Playwright 已正确安装）。两个问题现均已修复 —— standalone 构建会强制包含 Playwright 包 **以及** `cli/hooks` 运行时助手（`next.config.mjs` 中的 `serverExternalPackages` + `outputFileTracingIncludes`），启动脚本会将 Playwright 包链接到 `.next/standalone/node_modules`（`scripts/start-standalone.mjs`），且批量导入启动器（`bulkImportBrowserEngine.js`）会在回退到运行时助手之前先直接 `import` Playwright。
+
+## 🌐 公网访问 / 部署
+
+默认情况下应用程序绑定到所有网络接口（`0.0.0.0`），因此可以超出 localhost 访问。生产环境：
+
+```bash
+npm run build
+PORT=20128 HOSTNAME=0.0.0.0 NEXT_PUBLIC_BASE_URL=http://<your-host-or-domain>:20128 npm run start
+```
+
+## ⚙️ 配置（`.env`）
+
+| 变量 | 描述 |
+| --- | --- |
+| `JWT_SECRET` | 用于签名登录会话的随机密钥（**必须**更改）。 |
+| `INITIAL_PASSWORD` | 首次控制面板登录的初始密码。 |
+| `REQUIRE_API_KEY` | 设为 `true` 以在调用 `/v1` 时要求 API 密钥。 |
+| `API_KEY_SECRET` | 用于生成/验证端点代理 API 密钥的密钥。 |
+| `AUTH_COOKIE_SECURE` | 通过 HTTPS 提供服务时设为 `true`。 |
+| `BASE_URL` / `NEXT_PUBLIC_BASE_URL` | 应用程序提供服务的基础 URL。 |
+| `PORT` / `HOSTNAME` | 端口（默认 `20128`）和绑定主机（默认 `0.0.0.0`）。 |
+| `HTTP_PROXY` / `HTTPS_PROXY` / `ALL_PROXY` / `NO_PROXY` | 用于上游提供商调用的可选出站代理（也支持小写变体）。 |
+
+完整列表请参见 `.env.example`。
+
+## 🐳 Docker
+
+```bash
+docker build -t zevairouter .
+docker run -d -p 20128:20128 \
+  -e JWT_SECRET="replace-with-a-random-string" \
+  -e INITIAL_PASSWORD="your-password" \
+  --name zevairouter zevairouter
+```
+
+更多详情请参见 [DOCKER.md](DOCKER.md)。
+
+## 🧩 技术栈
+
+- **Next.js 16** + **React 19**（App Router，standalone 输出）
+- **Tailwind CSS v4**
+- **Express** 作为代理/API 层
+- **Playwright** 用于基于浏览器的提供商自动化
+- **undici** + **socks-proxy-agent** 用于上游 / 代理 HTTP
+- **SQLite**（`better-sqlite3` 可选，`sql.js` 作为回退）用于本地存储
+
+## 📄 许可证
+
+基于 **MIT** 许可证发布 —— 详见 [LICENSE](LICENSE)。

package/cli/LICENSE

@@ -0,0 +1,42 @@
+MIT License
+
+Copyright (c) 2026 9Router Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+