zevairouter 1.0.33 → 1.0.34

package/cli/app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.0.33",
+  "version": "1.0.34",
   "description": "ZevaiRouter - AI Router with provider automation, multi-account workflows, and quota tracking",
   "bin": {
     "zevai": "./cli/cli.js"

package/cli/app/src/lib/oauth/services/bulkImportBrowserEngine.js

@@ -58,13 +58,29 @@ const STEALTH_INIT_SCRIPT = `
   };
 `;
 
+function getStealthUserAgent(browserVersion) {
+  const ver = browserVersion || "131.0.0.0";
+  // Match the UA platform string to the actual OS so Google doesn't flag a
+  // mismatch between the User-Agent header and navigator.platform / other
+  // client-side signals that leak the real OS.
+  const platform = typeof process !== "undefined" ? process.platform : "linux";
+  if (platform === "darwin") {
+    return `Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/${ver} Safari/537.36`;
+  }
+  if (platform === "win32") {
+    return `Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/${ver} Safari/537.36`;
+  }
+  // Linux (the VPS default)
+  return `Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/${ver} Safari/537.36`;
+}
+
 function wrapBrowserWithStealth(browser) {
   const origNewContext = browser.newContext.bind(browser);
   browser.newContext = async function (options = {}) {
     // Fix HeadlessChrome in User-Agent — Google detects this server-side
     if (!options.userAgent) {
       const ver = browser.version ? browser.version() : "131.0.0.0";
-      options.userAgent = `Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/${ver} Safari/537.36`;
+      options.userAgent = getStealthUserAgent(ver);
     }
     const ctx = await origNewContext(options);
     await ctx.addInitScript(STEALTH_INIT_SCRIPT);
@@ -113,7 +129,6 @@ async function launchChromium({ proxyUrl } = {}) {
   }
 
   const options = {
-    channel: "chrome",
     headless: true,
     args: [
       "--disable-blink-features=AutomationControlled",

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter-cli",
-  "version": "1.0.33",
+  "version": "1.0.34",
   "description": "ZevaiRouter CLI - Start and manage ZevaiRouter server",
   "bin": {
     "zevai": "./cli.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.0.33",
+  "version": "1.0.34",
   "description": "ZevaiRouter - AI Router with provider automation, multi-account workflows, and quota tracking",
   "bin": {
     "zevai": "./cli/cli.js"

package/src/lib/oauth/services/bulkImportBrowserEngine.js

@@ -58,13 +58,29 @@ const STEALTH_INIT_SCRIPT = `
   };
 `;
 
+function getStealthUserAgent(browserVersion) {
+  const ver = browserVersion || "131.0.0.0";
+  // Match the UA platform string to the actual OS so Google doesn't flag a
+  // mismatch between the User-Agent header and navigator.platform / other
+  // client-side signals that leak the real OS.
+  const platform = typeof process !== "undefined" ? process.platform : "linux";
+  if (platform === "darwin") {
+    return `Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/${ver} Safari/537.36`;
+  }
+  if (platform === "win32") {
+    return `Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/${ver} Safari/537.36`;
+  }
+  // Linux (the VPS default)
+  return `Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/${ver} Safari/537.36`;
+}
+
 function wrapBrowserWithStealth(browser) {
   const origNewContext = browser.newContext.bind(browser);
   browser.newContext = async function (options = {}) {
     // Fix HeadlessChrome in User-Agent — Google detects this server-side
     if (!options.userAgent) {
       const ver = browser.version ? browser.version() : "131.0.0.0";
-      options.userAgent = `Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/${ver} Safari/537.36`;
+      options.userAgent = getStealthUserAgent(ver);
     }
     const ctx = await origNewContext(options);
     await ctx.addInitScript(STEALTH_INIT_SCRIPT);
@@ -113,7 +129,6 @@ async function launchChromium({ proxyUrl } = {}) {
   }
 
   const options = {
-    channel: "chrome",
     headless: true,
     args: [
       "--disable-blink-features=AutomationControlled",

package/src/lib/oauth/services/kiroGoogleAutomation.js

@@ -1387,6 +1387,10 @@ export async function runGoogleAccountAutomation({
     } else {
       reportStep("submitting_email", "Submitting email");
       await clickFirstVisible(page, NEXT_BUTTON_SELECTORS);
+      // Wait for the page to transition away from the email step so the
+      // polling loop doesn't immediately re-detect the disappearing email
+      // field and type the email value into the password input.
+      await page.waitForTimeout(2_500);
     }
   }
 
@@ -1465,29 +1469,33 @@ export async function runGoogleAccountAutomation({
       continue;
     }
 
-    const nextEmailInput = await getFirstVisibleLocator(page, EMAIL_INPUT_SELECTOR);
-    if (nextEmailInput) {
-      reportStep("entering_email", "Entering Google email");
-      const filled = await fillInputResilient(nextEmailInput, email);
+    // Check password BEFORE email — after submitting the email the password
+    // page loads and during the transition the old email input can briefly
+    // remain visible; if we checked email first we'd re-type the email
+    // address into whatever field is focused (often the password input).
+    const passwordInput = await getFirstVisibleLocator(page, PASSWORD_INPUT_SELECTOR);
+    if (passwordInput) {
+      reportStep("entering_password", "Entering Google password");
+      const filled = await fillInputResilient(passwordInput, password);
       if (filled) {
-        reportStep("submitting_email", "Submitting email");
+        reportStep("submitting_password", "Submitting password");
         await clickFirstVisible(page, NEXT_BUTTON_SELECTORS);
       } else {
-        reportStep("email_fill_failed", "Could not fill the Google email field; retrying loop");
+        reportStep("password_fill_failed", "Could not fill the Google password field; retrying loop");
       }
       await page.waitForTimeout(700);
       continue;
     }
 
-    const passwordInput = await getFirstVisibleLocator(page, PASSWORD_INPUT_SELECTOR);
-    if (passwordInput) {
-      reportStep("entering_password", "Entering Google password");
-      const filled = await fillInputResilient(passwordInput, password);
+    const nextEmailInput = await getFirstVisibleLocator(page, EMAIL_INPUT_SELECTOR);
+    if (nextEmailInput) {
+      reportStep("entering_email", "Entering Google email");
+      const filled = await fillInputResilient(nextEmailInput, email);
       if (filled) {
-        reportStep("submitting_password", "Submitting password");
+        reportStep("submitting_email", "Submitting email");
         await clickFirstVisible(page, NEXT_BUTTON_SELECTORS);
       } else {
-        reportStep("password_fill_failed", "Could not fill the Google password field; retrying loop");
+        reportStep("email_fill_failed", "Could not fill the Google email field; retrying loop");
       }
       await page.waitForTimeout(700);
       continue;