zevairouter 1.0.27 → 1.0.29

package/cli/app/cli/hooks/sqliteRuntime.js

@@ -80,13 +80,36 @@ function summarizeNpmError(stderr = "") {
 }
 
 function runNpmInstall({ cwd, pkgs, extraArgs = [], timeout = 180000 }) {
-  const args = ["install", ...pkgs, "--no-audit", "--no-fund", "--prefer-online", ...extraArgs];
-  const npmCmd = process.platform === "win32" ? "npm.cmd" : "npm";
-  const res = spawnSync(npmCmd, args, {
+  // Use --save (NOT --no-save): the runtime dir hosts several lazily-installed
+  // optional packages (better-sqlite3, camoufox-js, playwright, systray2). npm
+  // v11 prunes anything NOT declared in package.json on every `npm install`, so
+  // --no-save made each install wipe the previously-installed optional packages
+  // (camoufox-js kept vanishing on restart). --save records each package as a
+  // real dependency so npm treats it as legitimate and never prunes it.
+  const filtered = extraArgs.filter((a) => a !== "--no-save");
+  const args = ["install", ...pkgs, "--save", "--no-audit", "--no-fund", "--prefer-online", ...filtered];
+
+  // Prefer running npm-cli.js with the SAME Node that's executing us. On hosts
+  // where the default `npm`/`/usr/bin/node` is an old Node (e.g. v12), spawning
+  // the `npm` shim re-execs under that old runtime and crashes. process.execPath
+  // is the live (new) Node; pair it with its own npm-cli.js when resolvable.
+  let command = process.platform === "win32" ? "npm.cmd" : "npm";
+  let finalArgs = args;
+  let useShell = process.platform === "win32";
+  try {
+    const npmCliPath = path.join(path.dirname(process.execPath), "..", "lib", "node_modules", "npm", "bin", "npm-cli.js");
+    if (fs.existsSync(npmCliPath)) {
+      command = process.execPath;
+      finalArgs = [npmCliPath, ...args];
+      useShell = false;
+    }
+  } catch { /* fall back to npm shim */ }
+
+  const res = spawnSync(command, finalArgs, {
     cwd,
     stdio: ["ignore", "pipe", "pipe"],
     timeout,
-    shell: process.platform === "win32",
+    shell: useShell,
     encoding: "utf8",
   });
   return { ok: res.status === 0, code: res.status, stderr: res.stderr || "", stdout: res.stdout || "" };

package/cli/app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.0.27",
+  "version": "1.0.29",
   "description": "ZevaiRouter - AI Router with provider automation, multi-account workflows, and quota tracking",
   "bin": {
     "zevai": "./cli/cli.js"

package/cli/hooks/sqliteRuntime.js

@@ -80,13 +80,36 @@ function summarizeNpmError(stderr = "") {
 }
 
 function runNpmInstall({ cwd, pkgs, extraArgs = [], timeout = 180000 }) {
-  const args = ["install", ...pkgs, "--no-audit", "--no-fund", "--prefer-online", ...extraArgs];
-  const npmCmd = process.platform === "win32" ? "npm.cmd" : "npm";
-  const res = spawnSync(npmCmd, args, {
+  // Use --save (NOT --no-save): the runtime dir hosts several lazily-installed
+  // optional packages (better-sqlite3, camoufox-js, playwright, systray2). npm
+  // v11 prunes anything NOT declared in package.json on every `npm install`, so
+  // --no-save made each install wipe the previously-installed optional packages
+  // (camoufox-js kept vanishing on restart). --save records each package as a
+  // real dependency so npm treats it as legitimate and never prunes it.
+  const filtered = extraArgs.filter((a) => a !== "--no-save");
+  const args = ["install", ...pkgs, "--save", "--no-audit", "--no-fund", "--prefer-online", ...filtered];
+
+  // Prefer running npm-cli.js with the SAME Node that's executing us. On hosts
+  // where the default `npm`/`/usr/bin/node` is an old Node (e.g. v12), spawning
+  // the `npm` shim re-execs under that old runtime and crashes. process.execPath
+  // is the live (new) Node; pair it with its own npm-cli.js when resolvable.
+  let command = process.platform === "win32" ? "npm.cmd" : "npm";
+  let finalArgs = args;
+  let useShell = process.platform === "win32";
+  try {
+    const npmCliPath = path.join(path.dirname(process.execPath), "..", "lib", "node_modules", "npm", "bin", "npm-cli.js");
+    if (fs.existsSync(npmCliPath)) {
+      command = process.execPath;
+      finalArgs = [npmCliPath, ...args];
+      useShell = false;
+    }
+  } catch { /* fall back to npm shim */ }
+
+  const res = spawnSync(command, finalArgs, {
     cwd,
     stdio: ["ignore", "pipe", "pipe"],
     timeout,
-    shell: process.platform === "win32",
+    shell: useShell,
     encoding: "utf8",
   });
   return { ok: res.status === 0, code: res.status, stderr: res.stderr || "", stdout: res.stdout || "" };

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter-cli",
-  "version": "1.0.27",
+  "version": "1.0.29",
   "description": "ZevaiRouter CLI - Start and manage ZevaiRouter server",
   "bin": {
     "zevai": "./cli.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.0.27",
+  "version": "1.0.29",
   "description": "ZevaiRouter - AI Router with provider automation, multi-account workflows, and quota tracking",
   "bin": {
     "zevai": "./cli/cli.js"