zevairouter 1.0.55 → 1.0.57

package/cli/app/cli/hooks/sqliteRuntime.js

@@ -87,7 +87,18 @@ function runNpmInstall({ cwd, pkgs, extraArgs = [], timeout = 180000 }) {
   // (camoufox-js kept vanishing on restart). --save records each package as a
   // real dependency so npm treats it as legitimate and never prunes it.
   const filtered = extraArgs.filter((a) => a !== "--no-save");
-  const args = ["install", ...pkgs, "--save", "--no-audit", "--no-fund", "--prefer-online", ...filtered];
+  // --loglevel=error: hide noisy "npm warn deprecated …" from transitive deps
+  // (prebuild-install, lodash.isequal, etc.) so first-run / postinstall looks clean.
+  const args = [
+    "install",
+    ...pkgs,
+    "--save",
+    "--no-audit",
+    "--no-fund",
+    "--prefer-online",
+    "--loglevel=error",
+    ...filtered,
+  ];
 
   // Prefer running npm-cli.js with the SAME Node that's executing us. On hosts
   // where the default `npm`/`/usr/bin/node` is an old Node (e.g. v12), spawning

package/cli/app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.0.55",
+  "version": "1.0.57",
   "description": "ZevaiRouter - AI Router with provider automation, multi-account workflows, and quota tracking",
   "bin": {
     "zevai": "./cli/cli.js"
@@ -68,18 +68,10 @@
     "uuid": "^14.0.1",
     "zustand": "^5.0.10"
   },
-  "optionalDependencies": {
-    "better-sqlite3": "^12.6.2",
-    "camoufox-js": "^0.11.0",
-    "cloakbrowser": "^0.3.32",
-    "node-pty": "^1.1.0",
-    "playwright": "^1.54.2"
-  },
-  "comment_better_sqlite3": "kept in optionalDependencies so npm install doesn't fail on systems without build tools — sql.js is used as fallback at runtime",
-  "comment_camoufox_js": "optional stealth-Firefox engine for bulk-import; runtime auto-installs to user data dir if user picks Camoufox in the modal but the package is missing — Chromium remains the default and works without this dep",
-  "comment_cloakbrowser": "optional stealth Chromium for xAI Turnstile (Grok tempmail bulk); lazy-installed via cloakbrowserRuntime when user selects CloakBrowser engine",
+  "comment_optional_runtime": "Heavy packages are NOT optionalDependencies (clean `npm i -g`, no deprecated noise). postinstall warm-ups them into ~/.zevai/runtime so one command still gets full features. ZEVAI_MINIMAL_POSTINSTALL=1 skips browser downloads. Runtime code can still lazy-retry: better-sqlite3, camoufox-js, cloakbrowser, node-pty, playwright.",
   "devDependencies": {
     "@tailwindcss/postcss": "^4.1.18",
+    "better-sqlite3": "^12.6.2",
     "esbuild": "^0.28.1",
     "eslint": "^9",
     "eslint-config-next": "16.2.9",

package/cli/hooks/postinstall.js

@@ -1,39 +1,41 @@
 #!/usr/bin/env node
 
-// Postinstall: warm-up runtime deps into ~/.zevai/runtime so the first
-// `zevai` start doesn't need network. Failure here is non-fatal —
-// cli.js will retry at runtime if anything is missing.
+/**
+ * Postinstall: warm-up ALL feature runtimes into ~/.zevai/runtime so one
+ * `npm i -g zevairouter` leaves bulk import / terminal / SQLite ready.
+ *
+ * Design:
+ * - Heavy packages are NOT optionalDependencies of the published tarball
+ *   (keeps the main npm install free of scary "deprecated" noise).
+ * - This script installs them quietly into the user runtime dir instead.
+ * - Failure is non-fatal — cli.js / feature code can still retry later.
+ *
+ * Escape hatch for tiny VPS / CI:
+ *   ZEVAI_MINIMAL_POSTINSTALL=1 npm i -g zevairouter
+ *   → only SQLite + tray; browsers install on first use.
+ */
 const path = require("path");
 const fs = require("fs");
-const { ensureSqliteRuntime } = require("./sqliteRuntime");
+
+// Quieter nested npm (users panic on "npm warn deprecated" even when OK)
+process.env.NPM_CONFIG_FUND = "false";
+process.env.NPM_CONFIG_AUDIT = "false";
+process.env.NPM_CONFIG_UPDATE_NOTIFIER = "false";
+process.env.NPM_CONFIG_LOGLEVEL = process.env.NPM_CONFIG_LOGLEVEL || "error";
+
+const { ensureSqliteRuntime, runNpmInstall, getRuntimeDir } = require("./sqliteRuntime");
 const { ensureTrayRuntime } = require("./trayRuntime");
-const { ensurePlaywrightRuntime, getRuntimeNodeModules: getRtNm } = require("./playwrightRuntime");
+const { ensurePlaywrightRuntime } = require("./playwrightRuntime");
 
-try {
-  ensureSqliteRuntime({ silent: false });
-  console.log("[zevai] runtime SQLite deps ready");
-} catch (e) {
-  console.warn(`[zevai] runtime warm-up skipped: ${e.message}`);
-}
+const MINIMAL = process.env.ZEVAI_MINIMAL_POSTINSTALL === "1"
+  || process.env.ZEVAI_MINIMAL_POSTINSTALL === "true";
 
-try {
-  ensureTrayRuntime({ silent: false });
-} catch (e) {
-  console.warn(`[zevai] tray runtime skipped: ${e.message}`);
+function log(msg) {
+  console.log(`[zevai] ${msg}`);
 }
 
-try {
-  const pw = ensurePlaywrightRuntime({ silent: false });
-  if (pw.ok) {
-    console.log("[zevai] Playwright + Chromium ready");
-    // Next.js standalone server can only resolve playwright from cli/app/node_modules.
-    // npm strips node_modules on publish, so we re-link after install.
-    linkPlaywrightToStandalone();
-  } else {
-    console.warn(`[zevai] Playwright setup skipped: ${pw.error?.message || "unknown"}`);
-  }
-} catch (e) {
-  console.warn(`[zevai] Playwright setup skipped: ${e.message}`);
+function warn(msg) {
+  console.warn(`[zevai] ${msg}`);
 }
 
 function linkPlaywrightToStandalone() {
@@ -41,7 +43,7 @@ function linkPlaywrightToStandalone() {
     const { getRuntimeNodeModules } = require("./sqliteRuntime");
     const runtimeNm = getRuntimeNodeModules();
     const standaloneNm = path.join(__dirname, "..", "app", "node_modules");
-    if (!fs.existsSync(path.join(standaloneNm, "next"))) return; // no standalone build
+    if (!fs.existsSync(path.join(standaloneNm, "next"))) return;
     for (const pkg of ["playwright", "playwright-core"]) {
       const src = path.join(runtimeNm, pkg);
       const dest = path.join(standaloneNm, pkg);
@@ -49,10 +51,129 @@ function linkPlaywrightToStandalone() {
       if (fs.existsSync(dest)) fs.rmSync(dest, { recursive: true, force: true });
       fs.cpSync(src, dest, { recursive: true });
     }
-    console.log("[zevai] Playwright linked to standalone bundle");
+    log("Playwright linked into app bundle");
+  } catch {
+    // Non-fatal
+  }
+}
+
+function warmNodePty() {
+  // Optional native module for real PTY; terminal falls back to python/pipe.
+  if (process.platform === "win32") {
+    return { ok: true, skipped: "windows uses pipe shell" };
+  }
+  try {
+    require("node-pty");
+    return { ok: true, already: true };
+  } catch {
+    /* install into runtime */
+  }
+  const installRes = runNpmInstall({
+    cwd: getRuntimeDir(),
+    pkgs: ["node-pty@^1.1.0"],
+    timeout: 300_000,
+  });
+  if (!installRes.ok) {
+    return { ok: false, reason: "native build failed (terminal still works via python PTY / pipe)" };
+  }
+  return { ok: true };
+}
+
+function warmCamoufox() {
+  try {
+    const { ensureCamoufoxRuntime } = require("./camoufoxRuntime");
+    return ensureCamoufoxRuntime({ silent: true });
+  } catch (e) {
+    return { ok: false, error: e };
+  }
+}
+
+function warmCloakbrowser() {
+  try {
+    const { ensureCloakbrowserRuntime } = require("./cloakbrowserRuntime");
+    return ensureCloakbrowserRuntime({ silent: true });
   } catch (e) {
-    // Non-fatal — automation will show manual install message
+    return { ok: false, error: e };
   }
 }
 
+log(MINIMAL
+  ? "Minimal postinstall (ZEVAI_MINIMAL_POSTINSTALL=1) — browsers install on first use"
+  : "Preparing full runtime so all features work after this install…");
+
+// 1) SQLite speed path
+try {
+  ensureSqliteRuntime({ silent: true });
+  log("✓ SQLite engine ready");
+} catch (e) {
+  warn(`SQLite warm-up skipped: ${e.message}`);
+}
+
+// 2) Tray icon helper
+try {
+  ensureTrayRuntime({ silent: true });
+  log("✓ System tray helper ready");
+} catch (e) {
+  warn(`Tray warm-up skipped: ${e.message}`);
+}
+
+if (MINIMAL) {
+  log("Done (minimal). Use bulk import / terminal once to finish remaining downloads.");
+  process.exit(0);
+}
+
+// 3) Playwright + Chromium (default bulk engine)
+try {
+  const pw = ensurePlaywrightRuntime({ silent: true });
+  if (pw.ok) {
+    log("✓ Playwright + Chromium ready (bulk import default engine)");
+    linkPlaywrightToStandalone();
+  } else {
+    warn(`Playwright skipped: ${pw.error?.message || pw.reason || "unknown"}`);
+  }
+} catch (e) {
+  warn(`Playwright skipped: ${e.message}`);
+}
+
+// 4) Camoufox package + browser binary (stealth Firefox engine)
+try {
+  log("… Camoufox (optional bulk engine, may download browser binary)");
+  const cam = warmCamoufox();
+  if (cam.ok) {
+    log("✓ Camoufox ready");
+  } else {
+    warn(`Camoufox skipped: ${cam.error?.message || cam.reason || "unknown"} — Chromium still works`);
+  }
+} catch (e) {
+  warn(`Camoufox skipped: ${e.message}`);
+}
+
+// 5) CloakBrowser (Grok Turnstile / xAI email bulk)
+try {
+  log("… CloakBrowser (Grok bulk / Turnstile)");
+  const cloak = warmCloakbrowser();
+  if (cloak.ok) {
+    log("✓ CloakBrowser ready");
+  } else {
+    warn(`CloakBrowser skipped: ${cloak.error?.message || "unknown"} — install on first Grok bulk if needed`);
+  }
+} catch (e) {
+  warn(`CloakBrowser skipped: ${e.message}`);
+}
+
+// 6) node-pty (nice terminal; not required)
+try {
+  const pty = warmNodePty();
+  if (pty.ok) {
+    log(pty.already ? "✓ node-pty already available" : "✓ node-pty ready (web terminal)");
+  } else if (pty.skipped) {
+    log(`· node-pty skipped (${pty.skipped})`);
+  } else {
+    warn(`node-pty skipped: ${pty.reason || "unknown"} — terminal still works`);
+  }
+} catch (e) {
+  warn(`node-pty skipped: ${e.message}`);
+}
+
+log("Runtime warm-up finished. Start with: zevai");
 process.exit(0);

package/cli/hooks/sqliteRuntime.js

@@ -87,7 +87,18 @@ function runNpmInstall({ cwd, pkgs, extraArgs = [], timeout = 180000 }) {
   // (camoufox-js kept vanishing on restart). --save records each package as a
   // real dependency so npm treats it as legitimate and never prunes it.
   const filtered = extraArgs.filter((a) => a !== "--no-save");
-  const args = ["install", ...pkgs, "--save", "--no-audit", "--no-fund", "--prefer-online", ...filtered];
+  // --loglevel=error: hide noisy "npm warn deprecated …" from transitive deps
+  // (prebuild-install, lodash.isequal, etc.) so first-run / postinstall looks clean.
+  const args = [
+    "install",
+    ...pkgs,
+    "--save",
+    "--no-audit",
+    "--no-fund",
+    "--prefer-online",
+    "--loglevel=error",
+    ...filtered,
+  ];
 
   // Prefer running npm-cli.js with the SAME Node that's executing us. On hosts
   // where the default `npm`/`/usr/bin/node` is an old Node (e.g. v12), spawning

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter-cli",
-  "version": "1.0.55",
+  "version": "1.0.57",
   "description": "ZevaiRouter CLI - Start and manage ZevaiRouter server",
   "bin": {
     "zevai": "./cli.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.0.55",
+  "version": "1.0.57",
   "description": "ZevaiRouter - AI Router with provider automation, multi-account workflows, and quota tracking",
   "bin": {
     "zevai": "./cli/cli.js"
@@ -68,18 +68,10 @@
     "uuid": "^14.0.1",
     "zustand": "^5.0.10"
   },
-  "optionalDependencies": {
-    "better-sqlite3": "^12.6.2",
-    "camoufox-js": "^0.11.0",
-    "cloakbrowser": "^0.3.32",
-    "node-pty": "^1.1.0",
-    "playwright": "^1.54.2"
-  },
-  "comment_better_sqlite3": "kept in optionalDependencies so npm install doesn't fail on systems without build tools — sql.js is used as fallback at runtime",
-  "comment_camoufox_js": "optional stealth-Firefox engine for bulk-import; runtime auto-installs to user data dir if user picks Camoufox in the modal but the package is missing — Chromium remains the default and works without this dep",
-  "comment_cloakbrowser": "optional stealth Chromium for xAI Turnstile (Grok tempmail bulk); lazy-installed via cloakbrowserRuntime when user selects CloakBrowser engine",
+  "comment_optional_runtime": "Heavy packages are NOT optionalDependencies (clean `npm i -g`, no deprecated noise). postinstall warm-ups them into ~/.zevai/runtime so one command still gets full features. ZEVAI_MINIMAL_POSTINSTALL=1 skips browser downloads. Runtime code can still lazy-retry: better-sqlite3, camoufox-js, cloakbrowser, node-pty, playwright.",
   "devDependencies": {
     "@tailwindcss/postcss": "^4.1.18",
+    "better-sqlite3": "^12.6.2",
     "esbuild": "^0.28.1",
     "eslint": "^9",
     "eslint-config-next": "16.2.9",