relmio 0.2.5 → 0.2.6

package/CHANGELOG.md

@@ -5,7 +5,28 @@ version across `package.json`, `package-lock.json`, this file, the Git tag,
 and npm. Local checks validate the repository metadata; the publishing guide
 checks the registry separately after publication.
 
-## Unreleased
+## [0.2.6] - 2026-08-02
+
+### Added
+
+- Add a curl-based wizard bootstrap for macOS, Linux, WSL, and Git Bash that
+  reuses Node.js 22+ or downloads and checksum-verifies a temporary official
+  runtime when Node.js is not installed.
+- Add a native Windows PowerShell bootstrap for PowerShell and Command Prompt
+  that works without Git Bash or a preinstalled Node.js runtime and verifies
+  the temporary official Windows archive before execution.
+- Expand the hosted installer into an accessible macOS/Linux, PowerShell,
+  Command Prompt, and NPX terminal switcher.
+
+### Changed
+
+- Revamp the hosted Vercel experience and local browser wizard around the
+  Signal Spine composition and Patchbay Ledger design language.
+- Integrate the Astryx component system, neutral theme, CLI, and AI-readable
+  setup guidance in the hosted React application while keeping the published
+  wizard dependency-light.
+- Add persistent route context, sanitized preview status, responsive layouts,
+  reduced-motion behavior, and synchronized GitHub/npm setup documentation.
 
 ## [0.2.5] - 2026-07-31
 

package/README.md

@@ -72,20 +72,61 @@ installing the private n8n sidecar.
 </figure>
 
 Use the site's [Install wizard](https://relmio.vercel.app/install) page for a
-copyable command tailored to the current self-hosted n8n and Hostinger VPS
-setup path.
+clickable macOS/Linux, PowerShell, Command Prompt, and NPX command switcher plus
+a preview of the same five gates used by the local self-hosted n8n and
+Hostinger VPS setup.
 
 ## Quick start
 
-Run this on your own macOS, Windows, or Linux computer—not on the VPS:
+Choose the terminal already on your own computer. Do not run these commands on
+the VPS.
+
+### macOS, Linux, WSL, or Git Bash
+
+```bash
+curl -fsSL https://relmio.vercel.app/install.sh | sh
+```
+
+### Windows PowerShell
+
+```powershell
+irm https://relmio.vercel.app/install.ps1 | iex
+```
+
+### Windows Command Prompt
+
+```bat
+powershell -NoProfile -ExecutionPolicy Bypass -Command "irm https://relmio.vercel.app/install.ps1 | iex"
+```
+
+No Node.js or Git Bash installation is required first. The
+[POSIX](https://github.com/Demonbane18/relmio/blob/main/web/public/install.sh)
+and [Windows PowerShell](https://github.com/Demonbane18/relmio/blob/main/web/public/install.ps1)
+bootstraps reuse Node.js 22 or newer when available. Otherwise they download
+the matching current official Node.js 22 runtime to a private temporary
+directory, verify its SHA-256 checksum, run Relmio with npm lifecycle scripts
+disabled, and remove the temporary runtime when the wizard closes.
+
+Users who already have Node.js 22 or newer can run the npm package directly:
+
+### NPX (requires Node.js 22+)
 
 ```bash
 npx --yes --ignore-scripts relmio@latest
 ```
 
-Requirements:
+Either command opens the redesigned local wizard. Its Signal Spine keeps five
+trust gates visible: local sign-in, host verification, read-only n8n discovery,
+the exact sidecar plan, and the verified private endpoint. On a wide screen the
+route stays beside the current gate; on a small screen it becomes a compact
+progress strip.
+
+### Requirements
 
-- Node.js 22 or newer
+- On macOS/Linux/WSL/Git Bash: `curl`, `awk`, `tar`, and either `sha256sum` or
+  `shasum`; Git Bash also needs `unzip`
+- On native Windows: Windows PowerShell 5.1 or PowerShell 7; Command Prompt can
+  launch the included PowerShell bootstrap
 - A browser and an eligible ChatGPT/Codex account
 - A self-hosted n8n Docker deployment on a VPS
 - Docker Compose v2, SSH access, and a Docker network shared with n8n
@@ -114,28 +155,30 @@ product name to n8n. SuperGrok/xAI OAuth is a gated feasibility item on the
 [provider roadmap](https://github.com/Demonbane18/relmio/blob/main/docs/roadmap.md);
 it is not currently advertised as supported.
 
-## Visual walkthrough
+## Updated browser wizard walkthrough
 
 All images below are sanitized previews with reserved addresses, fake server
-data, and no real credential or session information.
+data, and no real credential or session information. Only the current gate is
+actionable, and remote writes remain locked until the review checkbox is
+selected.
 
-### 1. Confirm the local ChatGPT/Codex sign-in
+### Gate 1: Confirm the local ChatGPT/Codex sign-in
 
 <img src="https://cdn.jsdelivr.net/npm/relmio@latest/docs/images/setup/01-local-sign-in-ready.png" alt="Sanitized local sign-in ready screen" width="720">
 
-### 2. Verify the VPS identity
+### Gate 2: Verify the VPS identity
 
 <img src="https://cdn.jsdelivr.net/npm/relmio@latest/docs/images/setup/02-vps-identity-confirmed.png" alt="Sanitized VPS fingerprint confirmation screen" width="720">
 
-### 3. Choose the detected n8n container and network
+### Gate 3: Choose the detected n8n container and network
 
 <img src="https://cdn.jsdelivr.net/npm/relmio@latest/docs/images/setup/03-n8n-detected.png" alt="Sanitized n8n discovery screen" width="720">
 
-### 4. Review the exact sidecar-only plan
+### Gate 4: Review the exact sidecar-only plan
 
 <img src="https://cdn.jsdelivr.net/npm/relmio@latest/docs/images/setup/04-install-plan.png" alt="Sanitized installation plan screen" width="720">
 
-### 5. Copy the verified n8n settings
+### Gate 5: Copy the verified n8n settings
 
 <img src="https://cdn.jsdelivr.net/npm/relmio@latest/docs/images/setup/05-bridge-ready.png" alt="Sanitized verified bridge screen" width="720">
 

package/docs/maintenance.md

@@ -5,7 +5,19 @@ Every command on this page targets the separate
 
 ## Refresh an expired ChatGPT login
 
-The easiest method:
+The easiest method is to open the
+[hosted install page](https://relmio.vercel.app/install) and choose the local
+terminal you already have. For macOS, Linux, WSL, or Git Bash:
+
+```bash
+curl -fsSL https://relmio.vercel.app/install.sh | sh
+```
+
+For Windows PowerShell, with no Git Bash or preinstalled Node.js required:
+
+```powershell
+irm https://relmio.vercel.app/install.ps1 | iex
+```
 
 1. Start the local wizard again.
 2. Select **Refresh ChatGPT sign-in**.

package/docs/security.md

@@ -92,8 +92,14 @@ The current release pins:
 - `ssh2` `1.17.0`
 - `openai-oauth` `2.0.0`
 
-Install scripts are disabled for local dependencies. The generated sidecar
-also installs `openai-oauth` with `--ignore-scripts`.
+The POSIX and native Windows PowerShell bootstraps reuse a compatible local
+Node.js runtime or download the matching current official Node.js 22 archive
+to a private temporary directory. Each validates the archive against Node.js's
+SHA-256 manifest before execution and removes it when the wizard closes. The
+PowerShell bootstrap accepts only strict Windows x64 or ARM64 archive names,
+uses HTTPS without redirects, and enables TLS 1.2 for Windows PowerShell 5.1.
+npm lifecycle scripts are disabled when either bootstrap starts Relmio. The
+generated sidecar also installs `openai-oauth` with `--ignore-scripts`.
 
 Do not replace pinned versions with `latest` in production. Follow the upgrade
 checklist in [maintenance.md](maintenance.md).

package/docs/troubleshooting.md

@@ -30,17 +30,39 @@ it after the wizard saves the credential.
 
 ## Confirm the local package first
 
-Run these commands on your own computer, not on the VPS:
+Close every old wizard terminal and browser tab, then run the newest published
+build on your own computer, not on the VPS. Choose the command for the terminal
+you already have.
+
+macOS, Linux, WSL, or Git Bash:
 
 ```bash
-node --version
-npm view relmio version
+curl -fsSL https://relmio.vercel.app/install.sh | sh
+```
+
+Windows PowerShell:
+
+```powershell
+irm https://relmio.vercel.app/install.ps1 | iex
 ```
 
-Node must be version 22 or newer. Then close every old wizard terminal and
-browser tab and start the newest published build:
+Windows Command Prompt:
+
+```bat
+powershell -NoProfile -ExecutionPolicy Bypass -Command "irm https://relmio.vercel.app/install.ps1 | iex"
+```
+
+These commands do not require Node.js to be installed. The Windows options do
+not require Git Bash. Each bootstrap reuses Node.js 22 or newer when available,
+or downloads an official temporary runtime and verifies its SHA-256 checksum
+before execution.
+
+If you choose the existing-Node fallback, confirm Node is version 22 or newer
+and check the published package version first:
 
 ```bash
+node --version
+npm view relmio version
 npx --yes --ignore-scripts relmio@latest
 ```
 
@@ -49,7 +71,7 @@ newest printed `http://127.0.0.1:...` URL into the browser. That URL contains a
 temporary setup token: do not post it in an issue or screenshot.
 
 You do not need to sign in to npm, configure npm 2FA, or own this package to
-run its public `npx` command. npm authentication is required only for the
+run any public command. npm authentication is required only for the
 maintainer who publishes a release.
 
 ## Quick VPS checks
@@ -88,7 +110,9 @@ bypassed.
 
 | Symptom | Meaning | Fix |
 |---|---|---|
-| `node: command not found`, `node is not recognized`, or Node is older than 22 | The local runtime is missing or unsupported. | Install Node.js 22 or newer on the local computer, open a new terminal, and rerun the `@latest` command. Do not install it on the VPS for the wizard. |
+| `node: command not found`, `node is not recognized`, or Node is older than 22 | The NPX fallback cannot use the local runtime. | Use the macOS/Linux curl command or the native Windows PowerShell/Command Prompt command above. Either can run with a verified temporary runtime. Do not install Node.js on the VPS for the wizard. |
+| `curl` or `sh` is not recognized on Windows | The macOS/Linux command was pasted into a native Windows terminal. | Use the PowerShell command in PowerShell, or the longer `powershell -NoProfile ...` command in Command Prompt. Git Bash is not required. |
+| A bootstrap reports a checksum mismatch | The Node.js download did not match the official SHA-256 manifest, so it was not executed. | Retry on a trusted connection. Do not bypass the check. If it repeats, use an existing Node.js 22+ installation and report the sanitized error. |
 | The browser did not open | The automatic browser launch failed, but the local server may still be running. | Keep the newest terminal open and copy its newest `127.0.0.1` setup URL into the browser. Do not reuse a URL from a closed terminal. |
 | An old wizard page reports an invalid or expired setup session | The local server was closed or a newer wizard run created a different one-time session token. | Close the old page and use only the URL printed by the currently running terminal. |
 | `npx` appears to run an older wizard | An old terminal or tab is still active, or the package was run without an explicit tag. | Close old runs, check `npm view relmio version`, then run `npx --yes --ignore-scripts relmio@latest`. |

package/docs/video-outline.md

@@ -41,17 +41,26 @@ Use this simple explanation:
 
 On screen: the Mermaid flowchart in the README.
 
-### 2:20 — Start the npm package
+### 2:20 — Start the wizard
 
-Run locally:
+Open the hosted install page and choose the terminal already on the local
+computer. Show both the macOS/Linux and native Windows choices:
 
 ```bash
-npx --yes --ignore-scripts relmio@latest
+curl -fsSL https://relmio.vercel.app/install.sh | sh
+```
+
+```powershell
+irm https://relmio.vercel.app/install.ps1 | iex
 ```
 
 Explain that:
 
-- `npx` downloads and runs the published version for this session;
+- no preinstalled Node.js runtime is required;
+- native Windows does not require Git Bash and also has a Command Prompt option;
+- the bootstrap reuses Node.js 22+ or downloads and checksum-verifies a
+  temporary official Node.js 22 runtime;
+- npm lifecycle scripts stay disabled when it starts the published package;
 - the wizard binds to `127.0.0.1`;
 - the printed setup URL is private and temporary;
 - the terminal must remain open until the wizard finishes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "relmio",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Turn a supported ChatGPT/Codex OAuth sign-in into a private OpenAI-compatible endpoint, starting with self-hosted n8n.",
   "keywords": [
     "relmio",

package/src/ui/app.js

@@ -9,6 +9,7 @@ const state = {
   discovery: null,
   networks: null,
   installAttempted: false,
+  previewMode: false,
 };
 
 const element = (id) => document.getElementById(id);
@@ -125,10 +126,12 @@ async function waitForOAuthCompletion() {
 
 function showStep(step) {
   state.step = step;
+  let activePanel = null;
   for (const panel of document.querySelectorAll("[data-step]")) {
     const active = Number(panel.dataset.step) === step;
     panel.hidden = !active;
     if (active) {
+      activePanel = panel;
       panel.querySelector("h2")?.focus({ preventScroll: true });
     }
   }
@@ -141,7 +144,12 @@ function showStep(step) {
       marker.removeAttribute("aria-current");
     }
   }
-  window.scrollTo({ top: 0, behavior: "smooth" });
+  activePanel?.closest(".work-column")?.scrollIntoView({
+    block: "start",
+    behavior: window.matchMedia("(prefers-reduced-motion: reduce)").matches
+      ? "auto"
+      : "smooth",
+  });
 }
 
 async function api(path, { method = "GET", body } = {}) {
@@ -209,8 +217,10 @@ async function refreshAuthStatus({ fresh = false } = {}) {
   const loginButton = element("login-button");
   const next = element("signin-next");
   const formattedUpdatedAt = renderAuthUpdatedAt(status.authUpdatedAt);
+  state.previewMode = status.previewMode === true;
+  element("preview-badge").hidden = !state.previewMode;
 
-  if (status.previewMode) {
+  if (state.previewMode) {
     indicator.classList.add("ready");
     element("auth-title").textContent = "Sanitized preview credential";
     element("auth-detail").textContent =
@@ -294,7 +304,7 @@ async function discover() {
     element("container-select"),
     result.containers.map((container) => ({
       value: container.name,
-      label: `${container.name} — ${container.image}`,
+      label: `${container.name} · ${container.image}`,
     })),
     result.containers[0].name,
   );
@@ -483,11 +493,16 @@ element("install-button").addEventListener("click", async (event) => {
     element("result-models").textContent = result.models.join(", ");
     element("result-http-url").textContent =
       `${result.baseUrl.replace(/\/$/u, "")}/responses`;
+    if (state.previewMode) {
+      element("done-title").textContent = "The sanitized preview route is complete";
+    }
     showStep(5);
     setMessage(
-      result.deploymentMode === "updated"
-        ? "OAuth refreshed on the existing wizard-managed sidecar. n8n was not restarted."
-        : "Installation verified. Your existing n8n was not restarted.",
+      state.previewMode
+        ? "Sanitized preview complete. The endpoint and models below are sample data."
+        : result.deploymentMode === "updated"
+          ? "OAuth refreshed on the existing wizard-managed sidecar. n8n was not restarted."
+          : "Installation verified. Your existing n8n was not restarted.",
     );
   } catch (error) {
     showError(error);