zevairouter 1.1.21 → 1.1.23

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter-cli",
-  "version": "1.1.21",
+  "version": "1.1.23",
   "private": true,
   "description": "ZevaiRouter CLI - Start and manage ZevaiRouter server",
   "bin": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.1.21",
+  "version": "1.1.23",
   "description": "Self-hosted AI router: many providers, one OpenAI-compatible /v1 endpoint and dashboard",
   "bin": {
     "zevai": "cli/cli.js"

package/cli/app/.next-cli-build/server/chunks/static/media/server.f66733f4.js

@@ -1,8 +0,0 @@
-let rootCAPem,sslOptions;const https=require("https"),http2=require("http2"),tls=require("tls"),fs=require("fs"),path=require("path"),dns=require("dns"),{promisify:a}=require("util"),{execSync:b}=require("child_process"),{log:c,err:d,dumpRequest:e,createResponseDumper:f,clearDumpDir:g}=require("./logger"),{IS_DEV:h,LSOF_BIN:i,TARGET_HOSTS:j,URL_PATTERNS:k,MODEL_SYNONYMS:l,MODEL_PATTERNS:m,MODEL_NO_MAP:n,getToolForHost:o}=require("./config"),{DATA_DIR:p,MITM_DIR:q}=require("./paths"),{getCertForDomain:r}=require("./cert/generate"),{getMitmAlias:s}=require("./dbReader"),{applyAntigravityIdeVersionOverride:t}=require("./antigravityIdeVersion"),LOCAL_PORT=443,IS_WIN="win32"===process.platform,ENABLE_FILE_LOG=h;g();const INTERNAL_REQUEST_HEADER={name:"x-request-source",value:"local"},HOST_REWRITE={"cloudcode-pa.googleapis.com":"daily-cloudcode-pa.googleapis.com"},handlers={antigravity:require("./handlers/antigravity"),copilot:require("./handlers/copilot"),kiro:require("./handlers/kiro"),cursor:require("./handlers/cursor")},certCache=new Map;function sniCallback(a,b){try{if(certCache.has(a))return b(null,certCache.get(a));let c=r(a);if(!c)return b(Error(`Failed to generate cert for ${a}`));let d=require("tls").createSecureContext({key:c.key,cert:`${c.cert}
-${rootCAPem}`});certCache.set(a,d),b(null,d)}catch(c){d(`SNI error for ${a}: ${c.message}`),b(c)}}try{const a=fs.readFileSync(path.join(q,"rootCA.key")),b=fs.readFileSync(path.join(q,"rootCA.crt"));rootCAPem=b.toString("utf8"),sslOptions={key:a,cert:b,SNICallback:sniCallback}}catch(a){d(`Root CA not found: ${a.message}`),process.exit(1)}const cachedTargetIPs={},CACHE_TTL_MS=3e5;async function resolveTargetIP(b){let c=cachedTargetIPs[b];if(c&&Date.now()-c.ts<3e5)return c.ip;let d=new dns.Resolver;d.setServers(["8.8.8.8"]);let e=a(d.resolve4.bind(d)),f=await e(b);return cachedTargetIPs[b]={ip:f[0],ts:Date.now()},cachedTargetIPs[b].ip}function collectBodyRaw(a){return new Promise((b,c)=>{let d=[];a.on("data",a=>d.push(a)),a.on("end",()=>b(Buffer.concat(d))),a.on("error",c)})}function extractModel(a,b){let c=a.match(/\/models\/([^/:]+)/);if(c)return c[1];if(isBinaryData(b))return null;try{let a=JSON.parse(b.toString());if(a.conversationState)return a.conversationState.currentMessage?.userInputMessage?.modelId||null;return a.model||null}catch{return null}}function isBinaryData(a){if(!a||0===a.length)return!1;let b=a.slice(0,Math.min(100,a.length)),c=0;for(let a=0;a<b.length;a++){let d=b[a];(d>=0&&d<=8||d>=11&&d<=12||d>=14&&d<=31||127===d)&&c++}return c/b.length>.3}function getMappedModel(a,b){if(!b)return null;try{let c=s(a);if(!c)return null;let d=String(b).replace(/^models\//,""),e=l?.[a]?.[d]||d;if(c[e])return c[e];let f=Object.keys(c).find(a=>a&&c[a]&&(e.startsWith(a)||a.startsWith(e)));if(f)return c[f];for(let{match:b,alias:d}of m?.[a]||[])if(b.test(e)&&c[d])return c[d];return null}catch{return null}}async function passthrough(a,b,c,e){let g=(a.headers.host||j[0]).split(":")[0],i=(a.url.includes(":generateContent")||a.url.includes(":streamGenerateContent"))&&HOST_REWRITE[g]||g,k=h?f(a,"passthrough"):null,l="antigravity"===o(a.headers.host)?t(c,a.headers):{bodyBuffer:c,headers:a.headers},m=l.bodyBuffer,n={...l.headers,host:i};m!==c&&(n["content-length"]=String(m.length));try{let c=await negotiateAlpn(i);if("h2"===c)return await passthroughHttp2(a,b,m,n,i,e,k)}catch(a){d(`[mitm] ALPN negotiate failed: ${a.message}, fallback to HTTP/1.1`)}return passthroughHttps(a,b,m,n,i,e,k)}const alpnCache=new Map;async function negotiateAlpn(a){if(alpnCache.has(a))return alpnCache.get(a);let b=await resolveTargetIP(a);return new Promise((d,e)=>{let f=tls.connect({host:b,port:443,servername:a,ALPNProtocols:["h2","http/1.1"],rejectUnauthorized:!1},()=>{let b=f.alpnProtocol||"http/1.1";alpnCache.set(a,b),c(`🔗 [mitm] ALPN ${a} → ${b}`),f.end(),d(b)});f.once("error",e),f.setTimeout(5e3,()=>{f.destroy(Error("ALPN timeout"))})})}async function passthroughHttp2(a,b,c,e,f,g,h){let i=await resolveTargetIP(f),j={};for(let[a,b]of Object.entries(e)){let c=a.toLowerCase();"host"!==c&&"connection"!==c&&"keep-alive"!==c&&"transfer-encoding"!==c&&"upgrade"!==c&&"proxy-connection"!==c&&(j[c]=b)}return j[":method"]=a.method,j[":path"]=a.url,j[":scheme"]="https",j[":authority"]=f,new Promise(a=>{let e=http2.connect(`https://${f}`,{createConnection:()=>tls.connect({host:i,port:443,servername:f,ALPNProtocols:["h2"],rejectUnauthorized:!1})});e.once("error",c=>{d(`[mitm] http2 client error: ${c.message}`),h&&(h.writeChunk(`
-[ERROR h2] ${c.message}
-`),h.end()),b.headersSent||b.writeHead(502),b.writableEnded||b.end("Bad Gateway");try{e.close()}catch{}a()});let k=e.request(j,{endStream:0===c.length});c.length>0&&k.end(c),k.once("response",c=>{let d=c[":status"],f={};for(let[a,b]of Object.entries(c))a.startsWith(":")||"connection"!==a&&"keep-alive"!==a&&"transfer-encoding"!==a&&(f[a]=b);b.writeHead(d,f),h&&h.writeHeader(d,f);let i=[];k.on("data",a=>{h&&h.writeChunk(a),g&&i.push(a),b.write(a)}),k.on("end",()=>{if(h&&h.end(),b.writableEnded||b.end(),g)try{g(Buffer.concat(i),f)}catch{}try{e.close()}catch{}a()})}),k.once("error",c=>{d(`[mitm] http2 stream error: ${c.message}`),h&&(h.writeChunk(`
-[ERROR h2-stream] ${c.message}
-`),h.end()),b.headersSent||b.writeHead(502),b.writableEnded||b.end();try{e.close()}catch{}a()})})}async function passthroughHttps(a,b,c,e,f,g,h){let i=await resolveTargetIP(f),j=new AbortController,k=()=>j.abort();a.once("aborted",k),b.once("close",k);let l=https.request({hostname:i,port:443,path:a.url,method:a.method,headers:e,servername:f,rejectUnauthorized:!1,signal:j.signal},a=>{if(b.writeHead(a.statusCode,a.headers),h&&h.writeHeader(a.statusCode,a.headers),!g&&!h)return void a.pipe(b);let c=[];a.on("data",a=>{h&&h.writeChunk(a),g&&c.push(a),b.write(a)}),a.on("end",()=>{if(h&&h.end(),b.end(),g)try{g(Buffer.concat(c),a.headers)}catch{}})}),m=()=>{a.removeListener("aborted",k),b.removeListener("close",k)};l.once("close",m),l.on("error",a=>{m(),j.signal.aborted||(d(`Passthrough error: ${a.message}`),h&&(h.writeChunk(`
-[ERROR] ${a.message}
-`),h.end()),b.headersSent||b.writeHead(502),b.end("Bad Gateway"))}),c.length>0&&l.write(c),l.end()}const server=https.createServer(sslOptions,async(a,b)=>{try{if("/_mitm_health"===a.url){b.writeHead(200,{"Content-Type":"application/json"}),b.end(JSON.stringify({ok:!0,pid:process.pid}));return}let c=await collectBodyRaw(a);if(h&&e(a,c,"raw"),a.headers[INTERNAL_REQUEST_HEADER.name]===INTERNAL_REQUEST_HEADER.value)return passthrough(a,b,c);let d=o(a.headers.host);if(!d||!(k[d]||[]).some(b=>a.url.includes(b)))return passthrough(a,b,c);if("cursor"===d)return handlers[d].intercept(a,b,c,null,passthrough);let f=extractModel(a.url,c);if(f&&(n[d]||[]).some(a=>a.test(f)))return passthrough(a,b,c);let g=getMappedModel(d,f);if(!g)return passthrough(a,b,c);return handlers[d].intercept(a,b,c,g,passthrough)}catch(a){d(`Unhandled error: ${a.message}`),b.headersSent||b.writeHead(500,{"Content-Type":"application/json"}),b.end(JSON.stringify({error:{message:a.message,type:"mitm_error"}}))}});function killPort(a){try{let e=[];if(IS_WIN){let c=`powershell -NonInteractive -WindowStyle Hidden -Command "Get-NetTCPConnection -LocalPort ${a} -State Listen -ErrorAction SilentlyContinue | Select-Object -ExpandProperty OwningProcess"`,d=b(c,{encoding:"utf-8",windowsHide:!0}).trim();if(!d)return;e=d.split(/\r?\n/).map(a=>a.trim()).filter(a=>a&&Number(a)!==process.pid&&Number(a)>4)}else{let c=b(`${i} -nP -iTCP:${a} -sTCP:LISTEN -t`,{encoding:"utf-8",windowsHide:!0}).trim();if(!c)return;e=c.split("\n").filter(a=>a&&Number(a)!==process.pid)}if(0===e.length)return;e.forEach(a=>{try{IS_WIN?b(`taskkill /F /PID ${a}`,{windowsHide:!0}):process.kill(Number(a),"SIGKILL")}catch(b){d(`Failed to kill PID ${a}: ${b.message}`)}}),c(`Killed ${e.length} process(es) on port ${a}`)}catch(a){if(1!==a.status)throw a}}try{killPort(443)}catch(a){d(`Cannot kill process on port 443: ${a.message}`),process.exit(1)}server.listen(443,()=>c(`🚀 Server ready on :443`)),server.on("error",a=>{"EADDRINUSE"===a.code?d("Port 443 already in use"):"EACCES"===a.code?d("Permission denied for port 443"):d(a.message),process.exit(1)});const{removeAllDNSEntriesSync:u}=require("./dns/dnsConfig");let isShuttingDown=!1;const shutdown=()=>{if(isShuttingDown)return;isShuttingDown=!0,u();let a=setTimeout(()=>process.exit(0),1500);server.close(()=>{clearTimeout(a),process.exit(0)})};process.on("SIGTERM",shutdown),process.on("SIGINT",shutdown),"win32"===process.platform&&process.on("SIGBREAK",shutdown);