relmio 0.2.13 → 0.2.14

package/CHANGELOG.md

@@ -7,6 +7,33 @@ checks the registry separately after publication.
 
 ## Unreleased
 
+## [0.2.14] - 2026-08-04
+
+### Added
+
+- Add staged Homebrew formula and WinGet portable-package generation with
+  x64/ARM64 manifests, installed-command smoke tests, and review-only CI
+  artifacts for package-manager publication.
+- Add `relmio --version` and `relmio -v` for noninteractive installer and
+  package-manager verification.
+
+### Changed
+
+- Report Homebrew and WinGet publication status in the hosted install page and
+  documentation, while keeping unapproved commands out of the primary picker.
+
+### Fixed
+
+- Replace the hosted Command Prompt installer route's PowerShell launch with a
+  PowerShell-free, non-admin native batch bootstrap that reuses Node.js 22+
+  when available or verifies a pinned official Windows runtime before use.
+- Keep downloaded checksum-manifest text out of CMD evaluation and use reviewed
+  Node.js 22.23.2 x64/ARM64 digests embedded in the release.
+- Download the CMD bootstrap to a collision-resistant temporary name without
+  overwriting an existing `install.cmd`, then clean it after execution.
+- Show deterministic download, checksum-verification, and extraction stages in
+  every bootstrap so temporary Node.js runtime setup does not appear stalled.
+
 ## [0.2.13] - 2026-08-04
 
 ### Changed

package/README.md

@@ -105,16 +105,24 @@ irm https://relmio.vercel.app/install.ps1 | iex
 ### Windows Command Prompt
 
 ```bat
-"%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "irm https://relmio.vercel.app/install.ps1 | iex"
+for /f "delims=" %F in ("%TEMP%\relmio-install-%RANDOM%-%RANDOM%-%RANDOM%.cmd") do @if exist "%~F" (exit /b 80) else curl -fsSL --remove-on-error https://relmio.vercel.app/install.cmd -o "%~F" && set "RELMIO_SELF_DELETE=%~F" && call "%~F"
 ```
 
 No Node.js or Git Bash installation is required first. The
 [POSIX](https://github.com/Demonbane18/relmio/blob/main/web/public/install.sh)
 and [Windows PowerShell](https://github.com/Demonbane18/relmio/blob/main/web/public/install.ps1)
-bootstraps reuse Node.js 22 or newer when available. Otherwise they download
-the matching current official Node.js 22 runtime to a private temporary
-directory, verify its SHA-256 checksum, run Relmio with npm lifecycle scripts
-disabled, and remove the temporary runtime when the wizard closes.
+bootstraps, plus the PowerShell-free [Command Prompt](https://github.com/Demonbane18/relmio/blob/main/web/public/install.cmd)
+bootstrap, reuse Node.js 22 or newer when available. Otherwise they show
+staged **Please wait** messages while they download the matching current
+official Node.js 22 runtime to a private temporary directory, verify its
+SHA-256 checksum, run Relmio with npm lifecycle scripts disabled, and remove
+the temporary runtime when the wizard closes. The Command Prompt path runs as
+the current user and does not request administrator access or change Windows
+security policy.
+
+Homebrew tap publication and WinGet catalog approval are pending. Their install
+commands will be added only after each public package passes a real
+package-manager installation test. Use a direct installer above today.
 
 Users who already have Node.js 22 or newer can run the npm package directly:
 
@@ -137,8 +145,9 @@ a browser.
 
 - On macOS/Linux/WSL/Git Bash: `curl`, `awk`, `tar`, and either `sha256sum` or
   `shasum`; Git Bash also needs `unzip`
-- On native Windows: Windows PowerShell 5.1 or PowerShell 7; Command Prompt can
-  launch the included PowerShell bootstrap
+- On native Windows: Command Prompt uses its built-in `curl`, `certutil`, and
+  `tar` tools; Windows PowerShell 5.1 or PowerShell 7 remains an alternative
+  bootstrap
 - A browser and an eligible ChatGPT/Codex account
 - A self-hosted n8n Docker deployment on a VPS
 - Docker Compose v2, SSH access, and a Docker network shared with n8n

package/docs/troubleshooting.md

@@ -49,13 +49,19 @@ irm https://relmio.vercel.app/install.ps1 | iex
 Windows Command Prompt:
 
 ```bat
-"%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -ExecutionPolicy Bypass -Command "irm https://relmio.vercel.app/install.ps1 | iex"
+for /f "delims=" %F in ("%TEMP%\relmio-install-%RANDOM%-%RANDOM%-%RANDOM%.cmd") do @if exist "%~F" (exit /b 80) else curl -fsSL --remove-on-error https://relmio.vercel.app/install.cmd -o "%~F" && set "RELMIO_SELF_DELETE=%~F" && call "%~F"
 ```
 
 These commands do not require Node.js to be installed. The Windows options do
 not require Git Bash. Each bootstrap reuses Node.js 22 or newer when available,
-or downloads an official temporary runtime and verifies its SHA-256 checksum
-before execution.
+or shows staged **Please wait** messages while it downloads an official
+temporary runtime and verifies its SHA-256 checksum before execution. The
+Command Prompt route is PowerShell-free, non-admin, and does not change Windows
+security policy.
+
+Homebrew tap publication and WinGet catalog approval are pending. Until each
+public package passes its real install test, use one of the direct bootstrap
+commands on this page.
 
 If you choose the existing-Node fallback, confirm Node is version 22 or newer
 and check the published package version first:
@@ -117,8 +123,10 @@ bypassed.
 | Symptom | Meaning | Fix |
 |---|---|---|
 | `node: command not found`, `node is not recognized`, or Node is older than 22 | The NPX fallback cannot use the local runtime. | Use the macOS/Linux curl command or the native Windows PowerShell/Command Prompt command above. Either can run with a verified temporary runtime. Do not install Node.js on the VPS for the wizard. |
-| `curl` or `sh` is not recognized on Windows | The macOS/Linux command was pasted into a native Windows terminal. | Use the PowerShell command in PowerShell, or the `"%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile ...` command in Command Prompt. Git Bash is not required. |
-| A bootstrap reports a checksum mismatch | The Node.js download did not match the official SHA-256 manifest, so it was not executed. | Retry on a trusted connection. Do not bypass the check. If it repeats, use an existing Node.js 22+ installation and report the sanitized error. |
+| `curl` or `sh` is not recognized on Windows | The macOS/Linux command was pasted into a native Windows terminal. | Use the PowerShell command in PowerShell or the collision-safe temporary-file command shown above in Command Prompt. Git Bash is not required. If Command Prompt does not have `curl`, update Windows or use the PowerShell route. |
+| Command Prompt says it cannot create `powershell.exe` | A Windows policy denied PowerShell before the old CMD route could start its installer. | Use the current PowerShell-free Command Prompt command above. It downloads `install.cmd`, runs as your current user, and does not request elevation or change execution policy. |
+| The bootstrap stays on a `Please wait` stage | Node.js is missing or older than 22, so the bootstrap is downloading, checking, or extracting a temporary Node.js 22 runtime. | Keep the terminal open while the deterministic stage messages advance. The runtime is verified before it runs, is removed after the wizard exits, and is not installed system-wide. |
+| A bootstrap reports a checksum mismatch | The Node.js download did not match its reviewed official SHA-256 checksum, so it was not executed. | Retry on a trusted connection. Do not bypass the check. If it repeats, use an existing Node.js 22+ installation and report the sanitized error. |
 | Windows PowerShell shows `[eval]:1` before the wizard starts | An older bootstrap passed a JavaScript expression through `node -p`; PowerShell native-argument handling can alter that expression. | Update to the latest `relmio@latest` and rerun the same PowerShell or Command Prompt command. The current bootstrap parses the literal `node --version` output and reuses Node.js 22 or newer. |
 | Windows reports `spawn EINVAL` when starting ChatGPT sign-in | An older wizard tried to execute `npx.cmd` directly; Windows requires the current Node runtime to launch npm's JavaScript CLI. | Update to the latest `relmio@latest` release and restart the setup command. The current wizard keeps the macOS/Linux/WSL/Git Bash `npx` path unchanged. |
 | The browser did not open | The automatic browser launch failed, but the local server may still be running. | Keep the newest terminal open and press Enter to ask an interactive wizard terminal to open it again. If the terminal is noninteractive or the launcher still fails, copy its newest `127.0.0.1` setup URL into the browser. Do not reuse a URL from a closed terminal. |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "relmio",
-  "version": "0.2.13",
+  "version": "0.2.14",
   "description": "Turn a supported ChatGPT/Codex OAuth sign-in into a private OpenAI-compatible endpoint, starting with self-hosted n8n.",
   "keywords": [
     "relmio",
@@ -37,7 +37,10 @@
   },
   "files": [
     "src",
-    "scripts",
+    "scripts/build-npm-package.js",
+    "scripts/check-release-metadata.js",
+    "scripts/check-syntax.js",
+    "scripts/preview.js",
     "docs",
     "README.md",
     "SPEC.md",

package/src/cli.js

@@ -1,40 +1,86 @@
 #!/usr/bin/env node
 
 import { randomBytes } from "node:crypto";
+import { realpathSync } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
 
 import { attachBrowserReopenOnEnter, openBrowser } from "./browser.js";
 import { startWizardServer } from "./web/server.js";
 
-const sessionToken = randomBytes(32).toString("base64url");
-const wizard = await startWizardServer({ sessionToken });
-const url = `${wizard.origin}/?session=${sessionToken}`;
-
-console.log("");
-console.log("Relmio");
-console.log("---------");
-console.log(`Local wizard: ${url}`);
-console.log("");
-console.log("This creates a separate sidecar and never restarts n8n.");
-console.log("Keep this Terminal window open while using the wizard.");
-console.log("Press Control+C to stop.");
-console.log("");
-
-openBrowser(url);
-const detachBrowserReopen = attachBrowserReopenOnEnter({ url });
-
-let closing = false;
-async function close() {
-  if (closing) {
+const cliPath = fileURLToPath(import.meta.url);
+const packageJsonUrl = new URL("../package.json", import.meta.url);
+
+export function isCliEntryPath(entryPath, realpath = realpathSync) {
+  if (typeof entryPath !== "string" || entryPath === "") {
+    return false;
+  }
+  try {
+    return realpath(entryPath) === realpath(cliPath);
+  } catch {
+    return false;
+  }
+}
+
+export function cliMode(argumentsList) {
+  return argumentsList.length === 1 &&
+    (argumentsList[0] === "--version" || argumentsList[0] === "-v")
+    ? "version"
+    : "wizard";
+}
+
+export async function runCli({
+  argumentsList = process.argv.slice(2),
+  log = console.log,
+  readPackage = () => readFile(packageJsonUrl, "utf8"),
+} = {}) {
+  if (cliMode(argumentsList) === "version") {
+    const packageJson = JSON.parse(await readPackage());
+    if (typeof packageJson.version !== "string" || packageJson.version === "") {
+      throw new Error("Relmio package metadata does not contain a version.");
+    }
+    log(packageJson.version);
     return;
   }
-  closing = true;
-  detachBrowserReopen();
-  await wizard.close();
+
+  const sessionToken = randomBytes(32).toString("base64url");
+  const wizard = await startWizardServer({ sessionToken });
+  const url = `${wizard.origin}/?session=${sessionToken}`;
+
+  log("");
+  log("Relmio");
+  log("---------");
+  log(`Local wizard: ${url}`);
+  log("");
+  log("This creates a separate sidecar and never restarts n8n.");
+  log("Keep this Terminal window open while using the wizard.");
+  log("Press Control+C to stop.");
+  log("");
+
+  openBrowser(url);
+  const detachBrowserReopen = attachBrowserReopenOnEnter({ url });
+
+  let closing = false;
+  async function close() {
+    if (closing) {
+      return;
+    }
+    closing = true;
+    detachBrowserReopen();
+    await wizard.close();
+  }
+
+  process.once("SIGINT", async () => {
+    await close();
+  });
+  process.once("SIGTERM", async () => {
+    await close();
+  });
 }
 
-process.once("SIGINT", async () => {
-  await close();
-});
-process.once("SIGTERM", async () => {
-  await close();
-});
+if (isCliEntryPath(process.argv[1])) {
+  runCli().catch((error) => {
+    console.error(error.message);
+    process.exitCode = 1;
+  });
+}