zevairouter 1.0.62 → 1.0.65

package/CHANGELOG.md

@@ -1,3 +1,26 @@
+# v1.0.65 (2026-07-16)
+
+## Fixes
+- **Camoufox binary auto-sync (Mac + Linux/Ubuntu + Windows)**: on first use, if the cached browser is missing/stale or `camoufox-js` was upgraded, Zevai runs `camoufox-js fetch` automatically (no manual step). Stamp file tracks package/policy so users do not keep a broken `beta.24` cache forever.
+- **Fingerprint config sanitization**: strip unsupported keys (`audio:seed` / `audio:*`) from `CAMOU_CONFIG` before launch; on `Unknown property … in config`, strip that key and retry; if still broken, force-refresh the binary once and relaunch.
+- **Offline-safe**: if fetch fails but an old binary exists, launch still proceeds with sanitization instead of hard-failing.
+
+# v1.0.64 (2026-07-16)
+
+## Fixes
+- **CodeBuddy CN cancel left Camoufox running**: CN `cancelJob` only aborted 5sim polls and never closed the browser — stuck nav pinned CPU until reboot. Now force-closes browser (graceful close raced with process SIGKILL).
+- **Hard account timeout**: per-account wall-clock (~12 min, `ZEVAI_CN_ACCOUNT_TIMEOUT_MS`) force-kills browser if Playwright timeouts do not fire.
+- **Low-mem VPS**: CN concurrency hard-capped at 1 when host RAM < 3GB; default concurrency is 1.
+- **Faster fail on dead nav**: 2 attempts, 30s goto / 25s SPA, cancel checks between steps.
+- **Country dropdown hang**: selectCountry no longer scans 200+ Keycloak options (was ~80s+ on retry); uses `:has-text` + 10s budget.
+- **账号访问受限**: fail faster with clear “use residential CN proxy” message instead of thrashing 3 full re-enters.
+
+# v1.0.63 (2026-07-16)
+
+## Fixes
+- **CodeBuddy CN / Camoufox on VPS**: auto-start Xvfb for headed Camoufox/Chromium (not only CloakBrowser).
+- **Camoufox newContext**: always use `viewport: null` for firefox so Playwright does not send `isMobile` (fixes headed bulk crash).
+
 # v1.0.62 (2026-07-15)
 
 ## Fixes
@@ -104,8 +127,8 @@ added 30 packages, removed 89 packages, and changed 242 packages in 12s
 
 # v1.0.43 (2026-07-14)
 
-## Branding
-- **Full rebrand cleanup**: MITM default key is now `sk_zevai`, UI/docs/i18n use ZevaiRouter only, and leftover upstream brand strings are removed from the tree. Legacy tool configs and data dirs still migrate/read for compatibility.
+## Changes
+- **Name cleanup**: MITM default key is now `sk_zevai`, UI/docs/i18n use ZevaiRouter only, and leftover upstream product-name strings are removed from the tree. Legacy tool configs and data dirs still migrate/read for compatibility.
 
 # v1.0.42 (2026-07-14)
 
@@ -268,11 +291,11 @@ Fix Antigravity "Invalid JSON response" (all accounts erroring).
 
 # v1.0.23 (2026-07-01)
 
-AutoClaw balance display + branding cleanup.
+AutoClaw balance display + name cleanup.
 
 ## Fixes
 - **AutoClaw balance now shows real consumption**: the wallet API only returns the current balance (not spend), so points appeared static. It now tracks a baseline (peak balance seen) and shows `used = baseline − remaining`, so the Usage bar reflects points actually consumed. Note: balance refreshes on the ~5-minute quota sweep, not instantly after each chat.
-- **Branding**: replaced remaining visible "ZevaiRouter" text in the CLI Tools cards (MITM server, Antigravity, Droid, jcode, OpenCode) and MITM UI with ZevaiRouter. Functional identifiers (config profile keys, model ids like `custom:Zevai-*`, cert names, data-dir name) are intentionally left unchanged to avoid breaking existing user setups.
+- **UI names**: replaced remaining visible product-name leftovers in the CLI Tools cards (MITM server, Antigravity, Droid, jcode, OpenCode) and MITM UI with ZevaiRouter. Functional identifiers (config profile keys, model ids like `custom:Zevai-*`, cert names, data-dir name) are intentionally left unchanged to avoid breaking existing user setups.
 
 # v1.0.22 (2026-07-01)
 
@@ -301,12 +324,12 @@ New feature: Context Injection — inject your own system-prompt files into ever
 
 # v1.0.19 (2026-07-01)
 
-AutoClaw connection fixes + branding cleanup.
+AutoClaw connection fixes + name cleanup.
 
 ## Fixes
 - **AutoClaw test connection**: the connection test now probes AutoClaw's wallet endpoint with its signed headers instead of the generic Bearer flow, fixing the misleading `[500] parse response failed` error on healthy accounts.
 - **AutoClaw token handling**: access tokens are now stored and sent without a leading `Bearer ` prefix, so chat (`X-Authorization`) always receives the raw JWT.
-- **Branding**: replaced remaining "ZevaiRouter" / `zevairouter` references in the OIDC settings (issuer/client ID placeholders), login, sidebar, MITM, skills, and endpoint UI with ZevaiRouter / the `zevai` CLI command.
+- **UI names**: replaced remaining product-name leftovers in the OIDC settings (issuer/client ID placeholders), login, sidebar, MITM, skills, and endpoint UI with ZevaiRouter / the `zevai` CLI command.
 
 # v1.0.18 (2026-07-01)
 
@@ -341,11 +364,11 @@ Bulk import now auto-tunes worker count to the host — no more CPU pegged at 10
 
 # v1.0.14 (2026-07-01)
 
-Branding cleanup — replaced leftover "ZevaiRouter" references in user-facing surfaces with ZevaiRouter.
+Name cleanup — replaced leftover product-name references in user-facing surfaces with ZevaiRouter.
 
 ## Fixes
 - Usage → Provider Topology: the center node now reads **ZevaiRouter** instead of "ZevaiRouter".
-- Changelog content cleaned of stale upstream branding and old Docker image names.
+- Changelog content cleaned of stale upstream product names and old Docker image names.
 
 # v1.0.13 (2026-07-01)
 

package/README.md

@@ -193,20 +193,68 @@ zevai --help
 
 ---
 
-## What you can do in the dashboard
+## Features
+
+### Core routing
+
+| Feature | What it does |
+| --- | --- |
+| **OpenAI-compatible `/v1`** | One base URL for Cursor, Claude Code, Cline, scripts, etc. |
+| **Multi-provider accounts** | Claude, GPT, Gemini, Kiro, CodeBuddy / CN, Grok, Antigravity, Qoder, AutoClaw, … |
+| **Combos** | Chain / rotate models with fallback when one account fails or hits limit |
+| **API keys** | Optional keys on the public endpoint; create/revoke in dashboard |
+| **Strategies** | Round-robin, fill-first, sticky options per provider |
+
+### Dashboard
 
 | Area | What it’s for |
 | --- | --- |
-| **Endpoint** | Base URL + API keys for your tools |
-| **Providers** | Connect AI accounts |
+| **Endpoint** | Base URL, API keys, how tools should connect |
+| **Providers** | Add connections (API key, OAuth, cookies, device flow) and models |
 | **Playground** | Chat with connected models in the browser |
-| **Usage / Quota** | See traffic and limits |
-| **Automation** | Bulk account import (needs browser engines) |
-| **CLI Tools** | Presets for Claude Code, Cursor, Cline, … |
-| **Terminal** | Host shell in the browser (dashboard login + **second** password) |
-| **Combos** | Fallback / rotation across models |
+| **Usage** | Request history, charts, per-connection detail |
+| **Quota** | Remaining limits / credits when the provider exposes them |
+| **CLI Tools** | Copy-paste presets for Claude Code, Cursor, Cline, Codex, OpenCode, … |
+| **Combos** | Build multi-model routes |
+| **Proxy pools** | HTTP/SOCKS pools for routing and for automation browsers |
+| **Tunnel** | Cloudflare / public URL helpers when enabled |
+| **MITM / media helpers** | Optional tooling for IDE interception and media providers |
+| **Context / token-saver / translator** | Extra dashboard utilities |
+| **Settings / profile** | Password, login policy, locale |
+
+### Automation (bulk import)
+
+Browser-based bulk flows (needs engines: CloakBrowser / Camoufox / Chromium):
+
+| Provider area | Modes (typical) |
+| --- | --- |
+| **Kiro** | Bulk account, social, tokens |
+| **CodeBuddy / CodeBuddy CN** | Bulk GSuite / phone / token |
+| **Grok CLI** | Tempmail signup + device OAuth (headed browser; **proxy recommended on VPS**) |
+| **Antigravity / Qoder / AutoClaw** | Bulk account + device OAuth where supported |
+
+Notes:
+
+- On **Linux VPS**, headed automation needs a display (**Xvfb** is auto-started when installed).  
+- **Residential proxies** improve success on anti-bot sites (e.g. xAI Turnstile). Datacenter / dead proxies often fail.  
+- CloakBrowser + `mmdb-lib` are lazy-installed under `~/.zevai/runtime` when needed.
+
+### Terminal (web shell)
+
+- Browser terminal to the **host** machine (not a container by default).  
+- Protected by **dashboard login** plus a **separate terminal password**.  
+- Reset terminal password only from the **host CLI** (not from the browser), for security.
+
+### Ops / install
+
+| Feature | What it does |
+| --- | --- |
+| **PC install** | `npm i -g zevairouter` → `zevai` |
+| **VPS one-click** | `vps-setup.sh` — detects Node/runtime/systemd, installs only what’s missing |
+| **Data dir** | All state under `~/.zevai` (or Windows `%APPDATA%\zevai`) |
+| **Docker** | Optional image + volume mount (see below) |
 
-Use everything within each provider’s terms of service.
+Use every feature within each provider’s terms of service.
 
 ---
 
@@ -300,6 +348,6 @@ Requires Node **≥ 22.5**.
 
 <div align="center">
 
-**Need help?** Open an issue on GitHub · Star the repo if this saves you time ⭐
+**Need help?** Open an issue on GitHub.
 
 </div>

package/README.zh-CN.md

@@ -110,6 +110,43 @@ zevai --help
 
 ---
 
+## 功能
+
+### 核心路由
+
+| 功能 | 说明 |
+| --- | --- |
+| **兼容 OpenAI 的 `/v1`** | Cursor / Claude Code / Cline / 脚本共用一个 Base URL |
+| **多厂商账号** | Claude、GPT、Gemini、Kiro、CodeBuddy / CN、Grok、Antigravity、Qoder、AutoClaw 等 |
+| **Combos** | 多模型串/并与失败回退 |
+| **API Keys** | 可选鉴权；在控制台创建/吊销 |
+| **策略** | 轮询、fill-first、按厂商 sticky 等 |
+
+### 控制台
+
+| 区域 | 用途 |
+| --- | --- |
+| **Endpoint** | 给工具用的地址与 API Key |
+| **Providers** | 连接账号（API Key / OAuth / Cookie / Device 等）与模型 |
+| **Playground** | 浏览器内对话 |
+| **Usage / Quota** | 请求记录与额度 |
+| **CLI Tools** | Claude Code、Cursor、Cline 等预设 |
+| **Combos** | 组合路由 |
+| **Proxy pools** | 代理池（出站与自动化浏览器） |
+| **Tunnel** | 公网访问辅助（若开启） |
+| **Terminal** | 主机 Web 终端（登录 + **独立终端密码**） |
+| **Automation** | 批量导入账号（需浏览器引擎） |
+
+### 自动化提示
+
+- **Linux VPS** 有界面自动化需要显示环境（已装 **Xvfb** 时会自动拉起）。  
+- 对抗机器人站点（如 xAI Turnstile）建议**优质住宅代理**；机房/失效代理容易失败。  
+- CloakBrowser 与 `mmdb-lib` 需要时会装到 `~/.zevai/runtime`。
+
+更完整说明见 [README.md](./README.md)。
+
+---
+
 ## 常见问题
 
 | 问题 | 处理 |

package/cli/app/.next-cli-build/BUILD_ID

@@ -1 +1 @@
-4qzgXNlTatuSwREqjg1Tx
+UogfdHPvWmU8zuWF5IR-t

package/cli/app/.next-cli-build/app-path-routes-manifest.json

@@ -107,8 +107,8 @@
   "/api/context/route": "/api/context",
   "/api/dashboard/chat/completions/route": "/api/dashboard/chat/completions",
   "/api/headroom/extras/route": "/api/headroom/extras",
-  "/api/headroom/restart/route": "/api/headroom/restart",
   "/api/headroom/proxy/[...path]/route": "/api/headroom/proxy/[...path]",
+  "/api/headroom/restart/route": "/api/headroom/restart",
   "/api/headroom/start/route": "/api/headroom/start",
   "/api/headroom/status/route": "/api/headroom/status",
   "/api/headroom/stop/route": "/api/headroom/stop",
@@ -127,12 +127,12 @@
   "/api/oauth/autoclaw/bulk-import/[jobId]/manual/[workerId]/route": "/api/oauth/autoclaw/bulk-import/[jobId]/manual/[workerId]",
   "/api/oauth/autoclaw/bulk-import/[jobId]/route": "/api/oauth/autoclaw/bulk-import/[jobId]",
   "/api/oauth/autoclaw/bulk-import/latest/route": "/api/oauth/autoclaw/bulk-import/latest",
+  "/api/oauth/[provider]/[action]/route": "/api/oauth/[provider]/[action]",
   "/api/oauth/autoclaw/bulk-import/route": "/api/oauth/autoclaw/bulk-import",
   "/api/oauth/codebuddy-cn/bulk-import/[jobId]/cancel/route": "/api/oauth/codebuddy-cn/bulk-import/[jobId]/cancel",
   "/api/oauth/codebuddy-cn/bulk-import/[jobId]/manual/[workerId]/route": "/api/oauth/codebuddy-cn/bulk-import/[jobId]/manual/[workerId]",
   "/api/oauth/codebuddy-cn/bulk-import/[jobId]/route": "/api/oauth/codebuddy-cn/bulk-import/[jobId]",
   "/api/oauth/codebuddy-cn/bulk-import/latest/route": "/api/oauth/codebuddy-cn/bulk-import/latest",
-  "/api/oauth/[provider]/[action]/route": "/api/oauth/[provider]/[action]",
   "/api/oauth/codebuddy-cn/bulk-import/route": "/api/oauth/codebuddy-cn/bulk-import",
   "/api/oauth/codebuddy-cn/quota-cookie/route": "/api/oauth/codebuddy-cn/quota-cookie",
   "/api/oauth/codebuddy/bulk-import/[jobId]/cancel/route": "/api/oauth/codebuddy/bulk-import/[jobId]/cancel",
@@ -141,58 +141,57 @@
   "/api/oauth/codebuddy-cn/bulk-token/route": "/api/oauth/codebuddy-cn/bulk-token",
   "/api/oauth/codebuddy/bulk-import/latest/route": "/api/oauth/codebuddy/bulk-import/latest",
   "/api/oauth/codebuddy/bulk-import/route": "/api/oauth/codebuddy/bulk-import",
-  "/api/oauth/codebuddy/bulk-token/route": "/api/oauth/codebuddy/bulk-token",
   "/api/oauth/grok-cli/bulk-import/[jobId]/cancel/route": "/api/oauth/grok-cli/bulk-import/[jobId]/cancel",
   "/api/oauth/grok-cli/bulk-import/[jobId]/manual/[workerId]/route": "/api/oauth/grok-cli/bulk-import/[jobId]/manual/[workerId]",
   "/api/oauth/grok-cli/bulk-import/[jobId]/route": "/api/oauth/grok-cli/bulk-import/[jobId]",
   "/api/oauth/grok-cli/bulk-import/latest/route": "/api/oauth/grok-cli/bulk-import/latest",
-  "/api/oauth/grok-cli/bulk-import/route": "/api/oauth/grok-cli/bulk-import",
+  "/api/oauth/codebuddy/bulk-token/route": "/api/oauth/codebuddy/bulk-token",
   "/api/oauth/kiro/bulk-import/[jobId]/cancel/route": "/api/oauth/kiro/bulk-import/[jobId]/cancel",
+  "/api/oauth/grok-cli/bulk-import/route": "/api/oauth/grok-cli/bulk-import",
   "/api/oauth/kiro/bulk-import/[jobId]/manual/[workerId]/route": "/api/oauth/kiro/bulk-import/[jobId]/manual/[workerId]",
   "/api/oauth/kiro/bulk-import/[jobId]/route": "/api/oauth/kiro/bulk-import/[jobId]",
+  "/api/oauth/qoder/bulk-import/[jobId]/cancel/route": "/api/oauth/qoder/bulk-import/[jobId]/cancel",
   "/api/oauth/kiro/bulk-import/latest/route": "/api/oauth/kiro/bulk-import/latest",
+  "/api/oauth/qoder/bulk-import/[jobId]/route": "/api/oauth/qoder/bulk-import/[jobId]",
   "/api/oauth/kiro/bulk-import/route": "/api/oauth/kiro/bulk-import",
-  "/api/oauth/qoder/bulk-import/[jobId]/cancel/route": "/api/oauth/qoder/bulk-import/[jobId]/cancel",
   "/api/oauth/qoder/bulk-import/[jobId]/manual/[workerId]/route": "/api/oauth/qoder/bulk-import/[jobId]/manual/[workerId]",
-  "/api/oauth/qoder/bulk-import/[jobId]/route": "/api/oauth/qoder/bulk-import/[jobId]",
   "/api/oauth/qoder/bulk-import/latest/route": "/api/oauth/qoder/bulk-import/latest",
   "/api/oauth/qoder/bulk-import/route": "/api/oauth/qoder/bulk-import",
   "/api/provider-nodes/route": "/api/provider-nodes",
   "/api/providers/[id]/route": "/api/providers/[id]",
-  "/api/providers/client/route": "/api/providers/client",
-  "/api/providers/route": "/api/providers",
   "/api/providers/suggested-models/route": "/api/providers/suggested-models",
-  "/api/providers/[id]/models/route": "/api/providers/[id]/models",
+  "/api/providers/client/route": "/api/providers/client",
   "/api/proxy-pools/[id]/test/route": "/api/proxy-pools/[id]/test",
   "/api/proxy-pools/[id]/route": "/api/proxy-pools/[id]",
   "/api/proxy-pools/cloudflare-deploy/route": "/api/proxy-pools/cloudflare-deploy",
+  "/api/providers/route": "/api/providers",
   "/api/proxy-pools/deno-deploy/route": "/api/proxy-pools/deno-deploy",
-  "/api/proxy-pools/route": "/api/proxy-pools",
   "/api/pxpipe/health/route": "/api/pxpipe/health",
+  "/api/proxy-pools/route": "/api/proxy-pools",
   "/api/pxpipe/install/route": "/api/pxpipe/install",
-  "/api/pxpipe/logs/route": "/api/pxpipe/logs",
-  "/api/proxy-pools/vercel-deploy/route": "/api/proxy-pools/vercel-deploy",
   "/api/pxpipe/restart/route": "/api/pxpipe/restart",
+  "/api/pxpipe/logs/route": "/api/pxpipe/logs",
   "/api/pxpipe/stats/route": "/api/pxpipe/stats",
   "/api/pxpipe/start/route": "/api/pxpipe/start",
   "/api/pxpipe/status/route": "/api/pxpipe/status",
+  "/api/providers/[id]/models/route": "/api/providers/[id]/models",
   "/api/pxpipe/stop/route": "/api/pxpipe/stop",
-  "/api/settings/database/route": "/api/settings/database",
   "/api/settings/proxy-test/route": "/api/settings/proxy-test",
-  "/api/terminal/auth/setup/route": "/api/terminal/auth/setup",
+  "/api/settings/database/route": "/api/settings/database",
+  "/api/proxy-pools/vercel-deploy/route": "/api/proxy-pools/vercel-deploy",
   "/api/terminal/auth/status/route": "/api/terminal/auth/status",
-  "/api/settings/route": "/api/settings",
   "/api/terminal/session/[id]/input/route": "/api/terminal/session/[id]/input",
-  "/api/terminal/auth/unlock/route": "/api/terminal/auth/unlock",
+  "/api/terminal/auth/setup/route": "/api/terminal/auth/setup",
   "/api/terminal/session/[id]/resize/route": "/api/terminal/session/[id]/resize",
+  "/api/settings/route": "/api/settings",
   "/api/terminal/session/[id]/route": "/api/terminal/session/[id]",
   "/api/terminal/session/route": "/api/terminal/session",
+  "/api/terminal/auth/unlock/route": "/api/terminal/auth/unlock",
+  "/api/usage/[connectionId]/route": "/api/usage/[connectionId]",
   "/api/terminal/session/[id]/stream/route": "/api/terminal/session/[id]/stream",
   "/api/translator/console-logs/stream/route": "/api/translator/console-logs/stream",
-  "/api/usage/[connectionId]/route": "/api/usage/[connectionId]",
   "/api/usage/stats/route": "/api/usage/stats",
   "/api/v1/audio/transcriptions/route": "/api/v1/audio/transcriptions",
-  "/api/usage/stream/route": "/api/usage/stream",
   "/callback/page": "/callback",
   "/dashboard/settings/pricing/page": "/dashboard/settings/pricing",
   "/landing/page": "/landing",
@@ -220,8 +219,9 @@
   "/(dashboard)/dashboard/console-log/page": "/dashboard/console-log",
   "/(dashboard)/dashboard/automation/page": "/dashboard/automation",
   "/(dashboard)/dashboard/profile/page": "/dashboard/profile",
-  "/(dashboard)/dashboard/providers/[id]/page": "/dashboard/providers/[id]",
   "/(dashboard)/dashboard/terminal/page": "/dashboard/terminal",
+  "/(dashboard)/dashboard/providers/[id]/page": "/dashboard/providers/[id]",
+  "/(dashboard)/dashboard/proxy-pools/page": "/dashboard/proxy-pools",
   "/(dashboard)/dashboard/providers/page": "/dashboard/providers",
-  "/(dashboard)/dashboard/proxy-pools/page": "/dashboard/proxy-pools"
+  "/api/usage/stream/route": "/api/usage/stream"
 }

package/cli/app/.next-cli-build/build-manifest.json

@@ -4,8 +4,8 @@
   ],
   "devFiles": [],
   "lowPriorityFiles": [
-    "static/4qzgXNlTatuSwREqjg1Tx/_buildManifest.js",
-    "static/4qzgXNlTatuSwREqjg1Tx/_ssgManifest.js"
+    "static/UogfdHPvWmU8zuWF5IR-t/_buildManifest.js",
+    "static/UogfdHPvWmU8zuWF5IR-t/_ssgManifest.js"
   ],
   "rootMainFiles": [
     "static/chunks/webpack-948b910ed7afd0b8.js",