zevairouter 1.1.46 → 1.1.48

package/cli/app/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Unreleased
 
+# v1.1.48 (2026-10-30)
+
+## Changes
+- **Translators load with plain ES imports.** `open-sse/translator/index.js` registered translators through `require()` on first use, which works only in the bundled app. It now imports each translator statically, and translators register through `open-sse/translator/registry.js`. `initTranslators()` and the per-route init code are gone, and tests no longer need the `registerAll.js` shim.
+- **Releases create a git tag.** `npm run release` tags the release commit `vX.Y.Z` and pushes the tag after `main`.
+- **Lint passes with no warnings.**
+- **`npm audit` reports 0 vulnerabilities.** `node-forge` (used for the MITM root CA) moves to `^1.4.2` for GHSA-86w9-cpqp-85rv; dev-only `body-parser`, `qs`, `zod` and `vitest` (`4.1.12`) are updated too.
+
+# v1.1.47 (2026-10-30)
+
+## Fixes
+- **Quota 429s are no longer replayed.** OpenCode Free answers `FreeUsageLimitError` per IP per day, and the router retried it on the same public connection, spending what was left of the quota. OpenCode now returns the 429 at once. Grok CLI had its own 429/5xx retry loop inside the router's retry loop, so one request could reach up to 9 upstream calls; that inner loop is off and the router's retry alone applies. OpenCode's inner 5xx loop is off for the same reason: with a dead proxy one request took ~30s before failing, now ~2.5s.
+- **A connect timeout moves to the next account instead of retrying the same one.** The executor never recognized its own connect timeout (fetch rejects with the abort reason, not an `AbortError`), so it replayed the request against the 502 retry budget.
+- **No-auth proxy rotation skips proxies whose last test failed**, and keeps rotating through all pools if every one failed. The pool's `strictProxy` setting now reaches the request, so a dead strict proxy errors instead of silently sending the request without a proxy.
+- **HTTP 200 responses with an error body keep their real status.** They were all reported as 502, so quota or auth errors (`insufficient_quota`, `invalid_api_key`, `code: 429`) did not lock the account. They now map to 429, 401 or 402 when the body says so.
+- **Model test errors are readable.** Errors like `HTTP 400: [400]: {"error":{...}}` now read `HTTP 400: Upstream request failed: Model is unavailable.`
+- **Test All shows why a connection failed**, under the connection name, instead of only an ERROR tag.
+- **Installs without Bun get it automatically.** Only `install.sh` installed Bun, so `npm i -g zevairouter`, `zevai update` and dashboard updates left OpenCode Free broken. On startup the router now installs Bun in the background into `~/.zevai/runtime` when none is found (set `ZEVAI_SKIP_BUN_INSTALL=1` to opt out).
+- **A failed dashboard update brings the old version back up.** The app was stopped before installing and only relaunched on success, so installs without systemd stayed down after a failed update.
+- **Stopping the router lets it save its data first.** On SIGINT/SIGTERM the CLI killed the server with SIGKILL, losing up to 5s of usage rows and skipping the database close. It now sends SIGTERM and waits up to 4s.
+- **`/api/health/ready` returns 200 on a fresh install.** It returned 503 until a provider connection existed, though no-auth providers already work.
+- **Old update rollback copies are cleaned up.** Copies left in the temp dir by an interrupted update are removed after a day.
+- **Releases push to GitHub only after npm has the version**, so a failed publish no longer leaves a public version bump that npm does not have.
+
 # v1.1.46 (2026-10-30)
 
 ## Features

package/cli/app/cli/hooks/bunRuntime.js

@@ -0,0 +1,86 @@
+// Bun powers OpenCode Free (open-sse/utils/bunFetch.js). install.sh installs it
+// globally, but `npm i -g zevairouter`, `zevai update` and the dashboard updater
+// never did, so those installs lost OpenCode Free. This heals the gap by
+// installing the `bun` npm package into the user runtime dir on demand.
+const fs = require("fs");
+const os = require("os");
+const path = require("path");
+const { spawn } = require("child_process");
+const { getRuntimeDir, getRuntimeNodeModules } = require("./sqliteRuntime");
+
+const BUN_VERSION = "^1.3.0";
+
+function runtimeBunCandidates() {
+  const nm = getRuntimeNodeModules();
+  const exe = process.platform === "win32" ? "bun.exe" : "bun";
+  return [
+    path.join(nm, "bun", "bin", "bun.exe"),
+    path.join(nm, ".bin", exe),
+  ];
+}
+
+function systemBunCandidates() {
+  const home = os.homedir();
+  const exe = process.platform === "win32" ? "bun.exe" : "bun";
+  const list = [
+    path.join(home, ".bun", "bin", exe),
+    path.join(path.dirname(process.execPath), exe),
+  ];
+  if (process.platform !== "win32") {
+    list.push(path.join(home, ".local", "bin", exe), "/opt/homebrew/bin/bun", "/usr/local/bin/bun", "/usr/bin/bun");
+  }
+  for (const dir of String(process.env.PATH || "").split(path.delimiter)) {
+    if (dir) list.push(path.join(dir, exe));
+  }
+  return list;
+}
+
+function findBun() {
+  if (process.env.ZEVAI_BUN_BIN?.trim()) return process.env.ZEVAI_BUN_BIN.trim();
+  for (const candidate of [...systemBunCandidates(), ...runtimeBunCandidates()]) {
+    try {
+      if (fs.statSync(candidate).isFile()) return candidate;
+    } catch {}
+  }
+  return null;
+}
+
+/**
+ * Start a detached background install of Bun when none is available. Never
+ * blocks startup; a lock file stops concurrent or repeated attempts.
+ */
+function ensureBunRuntimeInBackground({ spawnImpl = spawn, findBunImpl = findBun } = {}) {
+  if (process.env.ZEVAI_SKIP_BUN_INSTALL === "1") return { skipped: "disabled" };
+  const existing = findBunImpl();
+  if (existing) return { ok: true, path: existing };
+
+  const runtimeDir = getRuntimeDir();
+  try { fs.mkdirSync(runtimeDir, { recursive: true }); } catch {}
+  const lock = path.join(runtimeDir, ".bun-install.lock");
+  try {
+    const age = Date.now() - fs.statSync(lock).mtimeMs;
+    if (age < 10 * 60 * 1000) return { pending: true };
+  } catch {}
+  try { fs.writeFileSync(lock, String(process.pid)); } catch {}
+
+  const npm = process.platform === "win32" ? "npm.cmd" : "npm";
+  const child = spawnImpl(npm, [
+    "install", `bun@${BUN_VERSION}`, "--save", "--no-audit", "--no-fund", "--loglevel=error",
+  ], {
+    cwd: runtimeDir,
+    detached: true,
+    stdio: "ignore",
+    windowsHide: true,
+    shell: process.platform === "win32",
+  });
+  child.on?.("exit", () => { try { fs.rmSync(lock, { force: true }); } catch {} });
+  child.on?.("error", () => { try { fs.rmSync(lock, { force: true }); } catch {} });
+  child.unref?.();
+  return { started: true };
+}
+
+module.exports = {
+  findBun,
+  runtimeBunCandidates,
+  ensureBunRuntimeInBackground,
+};

package/cli/app/cli/hooks/safeGlobalInstall.js

@@ -204,11 +204,33 @@ function pathEntryExists(target, fsApi = fs) {
   }
 }
 
+const ROLLBACK_PREFIX = "zevai-install-rollback-";
+const STALE_ROLLBACK_MS = 24 * 60 * 60 * 1000;
+
+// A crash or kill between snapshot and cleanup leaves a full package copy in
+// the temp dir. Sweep copies older than a day before taking a new one.
+function sweepStaleInstallRollbacks({ tmpDir = os.tmpdir(), now = Date.now(), fsApi = fs } = {}) {
+  let removed = 0;
+  let entries = [];
+  try { entries = fsApi.readdirSync(tmpDir); } catch { return removed; }
+  for (const name of entries) {
+    if (!name.startsWith(ROLLBACK_PREFIX)) continue;
+    const target = path.join(tmpDir, name);
+    try {
+      if (now - fsApi.statSync(target).mtimeMs < STALE_ROLLBACK_MS) continue;
+      fsApi.rmSync(target, { recursive: true, force: true });
+      removed++;
+    } catch {}
+  }
+  return removed;
+}
+
 function createInstallRollback(globalRoot, globalBin) {
   const packageDir = path.join(globalRoot, APP_NAME);
   if (!fs.existsSync(path.join(packageDir, "package.json"))) return null;
+  sweepStaleInstallRollbacks();
 
-  const backupRoot = fs.mkdtempSync(path.join(os.tmpdir(), "zevai-install-rollback-"));
+  const backupRoot = fs.mkdtempSync(path.join(os.tmpdir(), ROLLBACK_PREFIX));
   const packageBackup = path.join(backupRoot, APP_NAME);
   const binBackup = path.join(backupRoot, "bin");
   try {
@@ -612,6 +634,7 @@ if (require.main === module) {
 
 module.exports = {
   cleanupInstallRollback,
+  sweepStaleInstallRollbacks,
   createInstallRollback,
   safeInstallGlobal,
   printDoctor,

package/cli/app/cli/hooks/startupRuntime.js

@@ -9,6 +9,7 @@ function prepareStartupRuntime({
   modules = builtinModules,
   loadSqliteRuntime = () => require("./sqliteRuntime"),
   loadTrayRuntime = () => require("./trayRuntime"),
+  loadBunRuntime = () => require("./bunRuntime"),
 } = {}) {
   const sqliteRuntime = loadSqliteRuntime();
 
@@ -22,6 +23,9 @@ function prepareStartupRuntime({
     try { loadTrayRuntime().ensureTrayRuntime({ silent: true }); } catch {}
   }
 
+  // OpenCode Free needs Bun; heal installs that skipped install.sh.
+  try { loadBunRuntime().ensureBunRuntimeInBackground(); } catch {}
+
   return { buildEnvWithRuntime: sqliteRuntime.buildEnvWithRuntime };
 }
 

package/cli/app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zevairouter",
-  "version": "1.1.46",
+  "version": "1.1.48",
   "description": "Self-hosted AI router: many providers, one OpenAI-compatible /v1 endpoint and dashboard",
   "bin": {
     "zevai": "cli/cli.js"
@@ -90,7 +90,7 @@
     "material-symbols": "^0.45.1",
     "minimatch": "file:vendor/minimatch3-secure",
     "monaco-editor": "^0.55.1",
-    "node-forge": "^1.3.3",
+    "node-forge": "^1.4.2",
     "open": "^11.0.0",
     "ora": "^9.1.0",
     "postcss": "^8.5.10",
@@ -104,7 +104,7 @@
     "typescript": "6.0.3",
     "undici": "^8.10.0",
     "uuid": "^14.0.1",
-    "vitest": "4.1.11",
+    "vitest": "4.1.12",
     "zustand": "^5.0.10"
   },
   "engines": {

package/cli/app/src/lib/updater/updater.js

@@ -333,7 +333,10 @@ function finalize(success, exitCode, error) {
   state.error = error;
   state.finishedAt = Date.now();
   setPhase(success ? "done" : "error");
-  if (success) relaunchApp();
+  // The app was stopped before install, so relaunch even after a failure;
+  // otherwise non-systemd installs stay down until someone starts them.
+  if (!success) pushLog("[updater] update failed; relaunching the installed version");
+  relaunchApp();
   // Linger so browser can poll final status, then exit & close the port
   setTimeout(() => {
     try { server.close(); } catch { /* ignore */ }