@emend-ai/utim 1.46.28 → 1.46.31

package/README.md

@@ -119,6 +119,43 @@ Inside the interactive chat terminal, type these slash commands for direct works
 ## 📄 Related Documentation
 
 - [📖 Full Documentation](https://utim.dev/docs)
-- [🔒 Security Policy](SECURITY.md)
+- [🔒 Security Policy](SECURITY.md) — vulnerability reporting, security@utim.dev
+- [🗄️ Data Handling Reference](DATA_HANDLING.md) — what stays local, what goes to backend, what goes to model providers
 - [📊 SLA & Support](SLA.md)
 - [🛡️ Privacy Policy](landing/src/docs_md/privacy.md)
+
+## 📦 Installation Methods
+
+### npm (recommended — works without Python pre-installed)
+```bash
+npm install -g @emend-ai/utim
+```
+
+### pip (from PyPI)
+```bash
+pip install utim-cli
+# Full install with optional features (web search, images, parsers)
+pip install "utim-cli[full]"
+```
+
+### Source install (development)
+```bash
+git clone https://github.com/emendai/utim.git
+cd utim
+pip install -e ".[full]"
+```
+
+### Smoke-test your install
+```bash
+utim --version     # Should print the current version
+utim doctor        # Runs diagnostics — all checks should pass
+```
+
+See [INSTALLATION_VERIFICATION.md](INSTALLATION_VERIFICATION.md) for detailed verification steps and troubleshooting.
+
+## 🔢 Version
+
+UTIM uses a single canonical version defined in [`utim_cli/_version.py`](utim_cli/_version.py).
+Run `python scripts/sync_version.py` to propagate a version bump to all surfaces
+(`package.json`, `pyproject.toml`, `CHANGELOG.md`) before releasing.
+

package/bin/utim.js

@@ -18,6 +18,17 @@ const isTermux =
     (process.env.PREFIX && process.env.PREFIX.includes('com.termux')) ||
     fs.existsSync('/data/data/com.termux');
 
+const path = require('path');
+let versionPin = '';
+try {
+    const pkg = require(path.join(__dirname, '..', 'package.json'));
+    if (pkg.version) {
+        versionPin = `==${pkg.version}`;
+    }
+} catch (_) {}
+
+const pipPackage = `utim-cli${versionPin}`;
+
 // ── Spinner (no-op when not a TTY) ───────────────────────────────────────────
 function createSpinner(text) {
     const frames = ['⠋', '⠙', '⠹', '⠸', '⠼', '⠴', '⠦', '⠧', '⠇', '⠏'];
@@ -69,7 +80,18 @@ function isUtimInstalled(python) {
             shell: isWin,
             windowsHide: true,
         });
-        return r.status === 0 && (r.stdout || '').includes('Name:');
+        if (r.status !== 0) return false;
+        
+        // Enforce that installed version matches expectedVersion
+        if (versionPin) {
+            const expectedVersion = versionPin.replace('==', '').trim();
+            const stdoutStr = r.stdout || '';
+            const match = stdoutStr.match(/^Version:\s*([^\r\n]+)/m);
+            if (match && match[1].trim() !== expectedVersion) {
+                return false; // version mismatch, force update/reinstall
+            }
+        }
+        return (r.stdout || '').includes('Name:');
     } catch (_) {
         return false;
     }
@@ -80,7 +102,7 @@ function runPip(python, extraFlags) {
     try {
         if (isWin) {
             // On Windows: spawn in a new Command Prompt window and block until it is closed.
-            const cmdStr = `title UTIM Setup & echo ======================================== & echo Installing UTIM Python engine and dependencies... & echo ======================================== & "${python}" -m pip install --upgrade ${extraFlags.join(' ')} utim-cli & echo ======================================== & echo Installation complete. You can close this window. & pause`;
+            const cmdStr = `title UTIM Setup & echo ======================================== & echo Installing UTIM Python engine and dependencies... & echo ======================================== & "${python}" -m pip install ${extraFlags.join(' ')} ${pipPackage} & echo ======================================== & echo Installation complete. You can close this window. & pause`;
             spawnSync('cmd.exe', ['/c', 'start', '/wait', 'cmd.exe', '/c', cmdStr], {
                 stdio: 'ignore',
                 shell: true,
@@ -92,7 +114,7 @@ function runPip(python, extraFlags) {
             // On macOS: use osascript to run it in a new Terminal window.
             const lockFile = require('path').join(os.tmpdir(), `utim_install_${Date.now()}.lock`);
             fs.writeFileSync(lockFile, 'running');
-            const installCmd = `echo "Installing UTIM Python engine..."; "${python}" -m pip install --upgrade ${extraFlags.join(' ')} utim-cli; rm -f "${lockFile}"; exit`;
+            const installCmd = `echo "Installing UTIM Python engine..."; "${python}" -m pip install ${extraFlags.join(' ')} ${pipPackage}; rm -f "${lockFile}"; exit`;
             const osaScript = `tell application "Terminal" to do script "${installCmd.replace(/"/g, '\\"')}"`;
             
             spawnSync('osascript', ['-e', osaScript], { stdio: 'ignore' });
@@ -113,10 +135,8 @@ function runPip(python, extraFlags) {
                 // versions of pydantic-core from PyPI and trying to compile from source.
                 // Instead, use --upgrade-strategy only-if-needed to keep the pre-compiled version.
                 pipArgs.push('--upgrade-strategy', 'only-if-needed');
-            } else {
-                pipArgs.push('--upgrade');
             }
-            pipArgs.push(...extraFlags, 'utim-cli');
+            pipArgs.push(...extraFlags, pipPackage);
 
             const r = spawnSync(python, pipArgs, {
                 stdio: 'inherit',

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@emend-ai/utim",
-  "version": "1.46.28",
-  "description": "UTIM – Universal Terminal Intelligence Manager. An agentic AI coding assistant for your terminal.",
+  "version": "1.46.31",
+  "description": "UTIM \u2013 Universal Terminal Intelligence Manager. An agentic AI coding assistant for your terminal.",
   "keywords": [
     "ai",
     "agent",

package/scripts/postinstall.js

@@ -58,13 +58,25 @@ if (!python) {
     process.exit(0);
 }
 
+// Read the version from package.json to pin the python engine version
+const path = require('path');
+let versionPin = '';
+try {
+    const pkg = require(path.join(__dirname, '..', 'package.json'));
+    if (pkg.version) {
+        versionPin = `==${pkg.version}`;
+    }
+} catch (_) {}
+
+const pipPackage = `utim-cli${versionPin}`;
+
 // Silently pre-install in the background (pipe output, not inherit)
 // so the npm install output stays clean. Any failure is fine —
 // the launcher self-heals on first `utim` run.
 try {
     const r = spawnSync(
         python,
-        ['-m', 'pip', 'install', '--upgrade', '--quiet', 'utim-cli'],
+        ['-m', 'pip', 'install', '--quiet', pipPackage],
         {
             stdio: 'pipe',
             shell: isWin,