zevairouter 1.0.44 → 1.0.46

package/cli/hooks/cloakbrowserRuntime.js

@@ -0,0 +1,105 @@
+// Lazy-install helper for cloakbrowser (stealth Chromium that can pass Turnstile).
+// Same shape as camoufoxRuntime / playwrightRuntime — optional package, install on demand.
+const { createRequire } = require("module");
+const fs = require("fs");
+const path = require("path");
+
+const { runNpmInstall, getRuntimeDir, getRuntimeNodeModules } = require("./sqliteRuntime");
+
+const CLOAKBROWSER_PACKAGE = "cloakbrowser";
+const CLOAKBROWSER_VERSION = "^0.3.31";
+
+const nodeRequire =
+  typeof __non_webpack_require__ === "function" ? __non_webpack_require__ : require;
+
+function getRuntimeRequire() {
+  try {
+    const anchor = path.join(getRuntimeDir(), "noop.js");
+    return createRequire(anchor);
+  } catch {
+    return null;
+  }
+}
+
+let cachedReady = null;
+
+function tryRequireCloakbrowser() {
+  try {
+    const rreq = getRuntimeRequire();
+    const candidate = path.join(getRuntimeNodeModules(), CLOAKBROWSER_PACKAGE);
+    if (rreq && fs.existsSync(path.join(candidate, "package.json"))) {
+      return rreq(candidate);
+    }
+  } catch {}
+  try {
+    return nodeRequire(CLOAKBROWSER_PACKAGE);
+  } catch {}
+  try {
+    const candidate = path.join(getRuntimeNodeModules(), CLOAKBROWSER_PACKAGE);
+    if (fs.existsSync(path.join(candidate, "package.json"))) {
+      return nodeRequire(candidate);
+    }
+  } catch {}
+  // Dev / user global installs
+  try {
+    const home = process.env.HOME || process.env.USERPROFILE || "";
+    const aurix = path.join(home, ".aurix/agent/node_modules", CLOAKBROWSER_PACKAGE);
+    if (fs.existsSync(path.join(aurix, "package.json"))) {
+      return nodeRequire(aurix);
+    }
+  } catch {}
+  return null;
+}
+
+function loadCloakbrowserModule() {
+  return tryRequireCloakbrowser();
+}
+
+function ensureCloakbrowserRuntime({ silent = false } = {}) {
+  if (cachedReady?.ok && cachedReady.module) {
+    return cachedReady;
+  }
+
+  let mod = tryRequireCloakbrowser();
+  if (mod?.launch) {
+    cachedReady = { ok: true, module: mod };
+    return cachedReady;
+  }
+
+  if (!silent) {
+    console.log(`[cloakbrowser] Installing ${CLOAKBROWSER_PACKAGE}@${CLOAKBROWSER_VERSION} into runtime…`);
+  }
+
+  try {
+    runNpmInstall([`${CLOAKBROWSER_PACKAGE}@${CLOAKBROWSER_VERSION}`], {
+      cwd: getRuntimeDir(),
+      silent,
+    });
+  } catch (error) {
+    const err = new Error(
+      `Failed to install cloakbrowser. Run: npm install ${CLOAKBROWSER_PACKAGE}@${CLOAKBROWSER_VERSION} — ${error.message}`
+    );
+    err.code = "CLOAKBROWSER_INSTALL_FAILED";
+    err.cause = error;
+    return { ok: false, error: err };
+  }
+
+  mod = tryRequireCloakbrowser();
+  if (!mod?.launch) {
+    const err = new Error(
+      `cloakbrowser installed but launch() is missing. Reinstall ${CLOAKBROWSER_PACKAGE}.`
+    );
+    err.code = "CLOAKBROWSER_API_MISMATCH";
+    return { ok: false, error: err };
+  }
+
+  cachedReady = { ok: true, module: mod };
+  return cachedReady;
+}
+
+module.exports = {
+  ensureCloakbrowserRuntime,
+  loadCloakbrowserModule,
+  CLOAKBROWSER_PACKAGE,
+  CLOAKBROWSER_VERSION,
+};

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter-cli",
-  "version": "1.0.44",
+  "version": "1.0.46",
   "description": "ZevaiRouter CLI - Start and manage ZevaiRouter server",
   "bin": {
     "zevai": "./cli.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.0.44",
+  "version": "1.0.46",
   "description": "ZevaiRouter - AI Router with provider automation, multi-account workflows, and quota tracking",
   "bin": {
     "zevai": "./cli/cli.js"
@@ -68,10 +68,12 @@
   "optionalDependencies": {
     "better-sqlite3": "^12.6.2",
     "camoufox-js": "^0.11.0",
+    "cloakbrowser": "^0.3.32",
     "playwright": "^1.54.2"
   },
   "comment_better_sqlite3": "kept in optionalDependencies so npm install doesn't fail on systems without build tools — sql.js is used as fallback at runtime",
   "comment_camoufox_js": "optional stealth-Firefox engine for bulk-import; runtime auto-installs to user data dir if user picks Camoufox in the modal but the package is missing — Chromium remains the default and works without this dep",
+  "comment_cloakbrowser": "optional stealth Chromium for xAI Turnstile (Grok tempmail bulk); lazy-installed via cloakbrowserRuntime when user selects CloakBrowser engine",
   "devDependencies": {
     "@tailwindcss/postcss": "^4.1.18",
     "esbuild": "^0.28.1",

package/src/app/(dashboard)/dashboard/automation/page.js

@@ -596,6 +596,65 @@ function AutoClawAutomationPanel({ onRefresh }) {
   );
 }
 
+function GrokCliAutomationPanel({ providerInfo, onRefresh }) {
+  const [isBulkOpen, setIsBulkOpen] = useState(false);
+  const [isOAuthOpen, setIsOAuthOpen] = useState(false);
+
+  return (
+    <>
+      <div className="grid gap-3 sm:grid-cols-2 xl:grid-cols-3">
+        <button
+          type="button"
+          onClick={() => setIsBulkOpen(true)}
+          className="flex min-h-[112px] min-w-0 flex-col gap-2 rounded-lg border border-border bg-surface px-4 py-3 text-left transition-colors hover:border-primary/40 hover:bg-primary/5"
+        >
+          <span className="flex items-center gap-2 text-sm font-semibold text-text-main">
+            <span className="material-symbols-outlined text-[20px] text-primary">group_add</span>
+            Bulk Register / Login
+          </span>
+          <span className="text-xs leading-relaxed text-text-muted">
+            Tempmail (@zevai.web.id) + CloakBrowser (Turnstile) → xAI email signup → Grok CLI device token.
+            Paste <code className="text-[11px]">auto</code> / <code className="text-[11px]">auto:5</code> or existing <code className="text-[11px]">email:password</code>.
+          </span>
+        </button>
+        <button
+          type="button"
+          onClick={() => setIsOAuthOpen(true)}
+          className="flex min-h-[112px] min-w-0 flex-col gap-2 rounded-lg border border-border bg-surface px-4 py-3 text-left transition-colors hover:border-primary/40 hover:bg-primary/5"
+        >
+          <span className="flex items-center gap-2 text-sm font-semibold text-text-main">
+            <span className="material-symbols-outlined text-[20px] text-primary">login</span>
+            Device OAuth Login
+          </span>
+          <span className="text-xs leading-relaxed text-text-muted">
+            Open xAI device login in browser and poll until the Grok CLI token is saved.
+          </span>
+        </button>
+      </div>
+      <BulkAccountAutomationModal
+        isOpen={isBulkOpen}
+        provider="grok-cli"
+        title="Grok CLI Bulk (Tempmail + CloakBrowser)"
+        serviceName="Grok CLI"
+        defaultEngine="cloakbrowser"
+        accountsPlaceholder={"auto\nauto:3\n# or existing:\n# user@zevai.web.id:password"}
+        onSuccess={onRefresh}
+        onClose={() => setIsBulkOpen(false)}
+      />
+      <OAuthModal
+        isOpen={isOAuthOpen}
+        provider="grok-cli"
+        providerInfo={providerInfo}
+        onSuccess={() => {
+          onRefresh?.();
+          setIsOAuthOpen(false);
+        }}
+        onClose={() => setIsOAuthOpen(false)}
+      />
+    </>
+  );
+}
+
 const AUTOMATION_PROVIDERS = [
   {
     id: "kiro",
@@ -645,6 +704,14 @@ const AUTOMATION_PROVIDERS = [
     supportedModes: ["bulk-account"],
     component: AutoClawAutomationPanel,
   },
+  {
+    id: "grok-cli",
+    label: "Grok CLI",
+    icon: "auto_awesome",
+    description: "Bulk tempmail + CloakBrowser signup/login for Grok Build (Turnstile-capable).",
+    supportedModes: ["bulk-account", "device-oauth"],
+    component: GrokCliAutomationPanel,
+  },
 ];
 
 export default function AutomationPage() {

package/src/app/api/oauth/grok-cli/bulk-import/[jobId]/cancel/route.js

@@ -0,0 +1,19 @@
+import { NextResponse } from "next/server";
+import { getGrokCliBulkImportManager } from "@/lib/oauth/services/grokCliBulkImportManager";
+
+export const dynamic = "force-dynamic";
+
+export async function POST(_request, { params }) {
+  const { jobId } = await params;
+  const manager = getGrokCliBulkImportManager();
+  const job = manager.cancelJob(jobId);
+
+  if (!job) {
+    return NextResponse.json({ error: "Bulk import job not found" }, { status: 404 });
+  }
+
+  return NextResponse.json({
+    success: true,
+    job,
+  });
+}

package/src/app/api/oauth/grok-cli/bulk-import/[jobId]/manual/[workerId]/route.js

@@ -0,0 +1,30 @@
+import { NextResponse } from "next/server";
+import { getGrokCliBulkImportManager } from "@/lib/oauth/services/grokCliBulkImportManager";
+
+export const dynamic = "force-dynamic";
+
+export async function POST(_request, { params }) {
+  const { jobId, workerId } = await params;
+  const manager = getGrokCliBulkImportManager();
+  const result = await manager.openManualSession(jobId, workerId);
+
+  if (!result) {
+    return NextResponse.json({ error: "Bulk import job not found" }, { status: 404 });
+  }
+
+  if (!result.ok) {
+    return NextResponse.json(
+      {
+        error: result.error || "Manual session not found for this worker",
+        job: result.job,
+      },
+      { status: 404 }
+    );
+  }
+
+  return NextResponse.json({
+    success: true,
+    job: result.job,
+    account: result.account,
+  });
+}

package/src/app/api/oauth/grok-cli/bulk-import/[jobId]/route.js

@@ -0,0 +1,23 @@
+import { NextResponse } from "next/server";
+import { getGrokCliBulkImportManager, buildLookupResponse } from "@/lib/oauth/services/grokCliBulkImportManager";
+
+export const dynamic = "force-dynamic";
+
+export async function GET(_request, { params }) {
+  const { jobId } = await params;
+  const manager = getGrokCliBulkImportManager();
+
+  const job = await manager.getJobWithPreview(jobId);
+
+  if (!job) {
+    return NextResponse.json({
+      success: true,
+      ...buildLookupResponse(null, { stale: true }),
+    });
+  }
+
+  return NextResponse.json({
+    success: true,
+    ...buildLookupResponse(job),
+  });
+}

package/src/app/api/oauth/grok-cli/bulk-import/latest/route.js

@@ -0,0 +1,24 @@
+import { NextResponse } from "next/server";
+import { getGrokCliBulkImportManager, buildLookupResponse } from "@/lib/oauth/services/grokCliBulkImportManager";
+
+export const dynamic = "force-dynamic";
+
+export async function GET(request) {
+  const manager = getGrokCliBulkImportManager();
+  const searchParams = new URL(request.url).searchParams;
+  const scope = searchParams.get("scope");
+  const includeRecentTerminal = scope === "recent" || scope === "recoverable" || scope === "all";
+  const job = await manager.getLatestJobWithPreview({ includeRecentTerminal });
+
+  if (!job) {
+    return NextResponse.json({
+      success: true,
+      ...buildLookupResponse(null),
+    });
+  }
+
+  return NextResponse.json({
+    success: true,
+    ...buildLookupResponse(job),
+  });
+}

package/src/app/api/oauth/grok-cli/bulk-import/route.js

@@ -0,0 +1,39 @@
+import { NextResponse } from "next/server";
+import { getGrokCliBulkImportManager } from "@/lib/oauth/services/grokCliBulkImportManager";
+
+export const dynamic = "force-dynamic";
+
+export async function POST(request) {
+  try {
+    const body = await request.json();
+    const accounts = Array.isArray(body?.accounts) ? body.accounts : [];
+
+    if (!accounts.length) {
+      return NextResponse.json(
+        { error: "At least one account entry is required (e.g. auto, auto:3, or email:password)" },
+        { status: 400 }
+      );
+    }
+
+    const manager = getGrokCliBulkImportManager();
+    const job = await manager.startJob({
+      accounts,
+      concurrency: body?.concurrency ?? 1,
+      engine: body?.engine || "cloakbrowser",
+    });
+
+    return NextResponse.json({
+      success: true,
+      job,
+    });
+  } catch (error) {
+    const status = Array.isArray(error?.invalidLines) ? 400 : 500;
+    return NextResponse.json(
+      {
+        error: error?.error || error?.message || "Failed to start Grok CLI bulk import",
+        ...(Array.isArray(error?.invalidLines) ? { invalidLines: error.invalidLines } : {}),
+      },
+      { status }
+    );
+  }
+}

package/src/lib/oauth/services/bulkImportBrowserEngine.js

@@ -2,12 +2,14 @@ import { createRequire } from "node:module";
 
 const requireFromHere = createRequire(import.meta.url);
 
-const SUPPORTED_ENGINES = new Set(["chromium", "camoufox"]);
+const SUPPORTED_ENGINES = new Set(["chromium", "camoufox", "cloakbrowser"]);
 export const DEFAULT_BULK_IMPORT_ENGINE = "chromium";
 
 export function normalizeBulkImportEngine(value) {
   if (typeof value !== "string") return DEFAULT_BULK_IMPORT_ENGINE;
   const lower = value.trim().toLowerCase();
+  // aliases
+  if (lower === "cloak" || lower === "cloackbrowser" || lower === "cloack") return "cloakbrowser";
   return SUPPORTED_ENGINES.has(lower) ? lower : DEFAULT_BULK_IMPORT_ENGINE;
 }
 
@@ -222,6 +224,49 @@ async function launchCamoufox({ proxyUrl, headless = true, windowSize = null } =
   return firefox.launch(launchOptions);
 }
 
+/**
+ * CloakBrowser — patched stealth Chromium. Required for xAI Turnstile during
+ * Grok email signup. Prefer headed (headless=false); Turnstile often fails headless.
+ */
+async function launchCloakbrowser({ proxyUrl, headless = false, windowSize = null } = {}) {
+  const runtime = loadRuntimeHelper("cloakbrowserRuntime");
+  let cloak = null;
+  if (runtime?.ensureCloakbrowserRuntime) {
+    const ready = runtime.ensureCloakbrowserRuntime({ silent: false });
+    if (!ready.ok && ready.error) throw ready.error;
+    cloak = ready.module || runtime.loadCloakbrowserModule?.();
+  }
+  if (!cloak?.launch) {
+    try {
+      cloak = await import("cloakbrowser");
+    } catch (err) {
+      const friendly = new Error(
+        `cloakbrowser is not installed. Pick CloakBrowser engine again to auto-install, or run: npm install cloakbrowser`
+      );
+      friendly.code = "CLOAKBROWSER_PACKAGE_MISSING";
+      friendly.cause = err;
+      throw friendly;
+    }
+  }
+
+  const useHeadless = headless === true; // default headed for Turnstile
+  const launchOpts = {
+    headless: useHeadless,
+    humanize: true,
+  };
+  if (proxyUrl) {
+    launchOpts.proxy = proxyUrl;
+  }
+  if (windowSize?.width && windowSize?.height) {
+    launchOpts.viewport = { width: windowSize.width, height: windowSize.height };
+  }
+
+  const browser = await cloak.launch(launchOpts);
+  // Do not wrap with STEALTH_INIT_SCRIPT — CloakBrowser already patches at binary level;
+  // extra webdriver spoofing can conflict with its fingerprint.
+  return browser;
+}
+
 export async function launchBulkImportBrowser({
   engine = DEFAULT_BULK_IMPORT_ENGINE,
   proxyUrl,
@@ -232,6 +277,11 @@ export async function launchBulkImportBrowser({
   if (normalized === "camoufox") {
     return launchCamoufox({ proxyUrl, headless, windowSize });
   }
+  if (normalized === "cloakbrowser") {
+    // Turnstile needs a real window unless caller forces headless
+    const cloakHeadless = headless === true;
+    return launchCloakbrowser({ proxyUrl, headless: cloakHeadless, windowSize });
+  }
   return launchChromium({ proxyUrl, headless, windowSize });
 }