scenri 0.15.1 → 0.16.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## [0.16.0](https://github.com/tonygorb/Scenri/compare/v0.15.1...v0.16.0) (2026-09-23)
+
+
+### Features
+
+* a real code screen for phones, and a six-digit code ([01f2fed](https://github.com/tonygorb/Scenri/commit/01f2fedc14f7cfb4cba205d1ae1ea51e8c213f78))
+* allow Scenri through the firewall with one press ([8ca9b5f](https://github.com/tonygorb/Scenri/commit/8ca9b5f64ce49894c00490439f7d00b26a903e0f))
+* **cli:** open Scenri on a phone on the same Wi-Fi ([5d25779](https://github.com/tonygorb/Scenri/commit/5d25779d60b14751f85df8d88cf1ea993c6b79bd))
+* open Scenri on your phone, and Settings one idea per page ([4a6601d](https://github.com/tonygorb/Scenri/commit/4a6601d0608d97137e34f2973d6c1eb2b6e5e409))
+* **studio:** open on your phone, in Settings, General ([9701956](https://github.com/tonygorb/Scenri/commit/9701956625023141d2d9b7257ddd978b018f0f8e))
+* **studio:** Phone and tablet gets its own page in Settings ([6f0ff64](https://github.com/tonygorb/Scenri/commit/6f0ff64353109e6dc9adf76b6638564cc3e5f459))
+* **studio:** Settings, one idea per page ([34e6937](https://github.com/tonygorb/Scenri/commit/34e69374ef3f7db82cf4466299de471f3bf84c77))
+
+
+### Bug Fixes
+
+* **cli:** the code page's privacy note is one centred line ([0f33bbe](https://github.com/tonygorb/Scenri/commit/0f33bbe79d31be5cc8e3978ade9de3eb5bbd3eb7))
+* harden the phone code, and settle the review's findings ([ee6dd1d](https://github.com/tonygorb/Scenri/commit/ee6dd1d3226f890abc1d776de092d9d22952893d))
+* plain English on the code page and the phone settings ([f7355d5](https://github.com/tonygorb/Scenri/commit/f7355d5f37b1e239d64d9ccc6cc71b0eb43a68a3))
+
 ## [0.15.1](https://github.com/tonygorb/Scenri/compare/v0.15.0...v0.15.1) (2026-09-23)
 
 

package/README.md

@@ -35,7 +35,7 @@ Most AI image tools give you a prompt box and a slot machine. Scenri gives you t
 
 Every shot keeps its lineage. Branch an edit from any shot, put the two side by side, and the drift heatmap shows you exactly where the model changed your product when it should not have.
 
-It runs as a local server on `127.0.0.1`. Your brands, your images, and your keys stay on your disk.
+It runs as a local server on your own computer. Your brands, your images, and your keys stay on your disk. To use it from a phone or tablet on the same Wi-Fi, open Settings, Local access, and scan the QR code.
 
 ## What a brief produces
 
@@ -126,7 +126,7 @@ Your Codex session is yours: Scenri runs the official `codex` commands on your m
 |---|---|---|
 | `SCENRI_HOME` | `~/.scenri` | where brands, images, and keys live |
 | `SCENRI_PORT` | `4747` | port |
-| `SCENRI_HOST` | `127.0.0.1` | this machine only, see the note below |
+| `SCENRI_HOST` | `127.0.0.1` | the studio's own listener; `127.0.0.1` given explicitly also turns off phone access, see the note below |
 | `SCENRI_NO_OPEN` | unset | set to `1` to skip opening a browser |
 | `SCENRI_NO_UPDATE_CHECK` | unset | set to `1` to never ask npm for the latest version |
 | `SCENRI_REGISTRY` | npmjs | registry for the update check and downloads (mirrors, forks, airgaps) |
@@ -135,7 +135,7 @@ Your Codex session is yours: Scenri runs the official `codex` commands on your m
 
 `OPENROUTER_API_KEY`, `REPLICATE_API_TOKEN` and `FAL_KEY` are read from the environment as an alternative to entering them in Settings.
 
-**Before you change `SCENRI_HOST`:** Scenri has no accounts, so anyone who can reach the port can spend your API keys and delete your library. Setting `SCENRI_HOST=0.0.0.0` opens it to your local network so you can use it from a phone. That path prints a URL carrying a one-time access token, refuses every request without it, and rejects unfamiliar `Host` headers. Treat it as convenience on a network you trust, not as a security boundary.
+**Phones and tablets.** Scenri also answers on this computer's Wi-Fi or Ethernet address, so a phone on the same network can open it: Settings, Local access shows a QR code. Scenri has no accounts, so every device other than this computer has to bring a six-digit code, which rides inside the QR code and the link; typing the bare address asks for it, wrong guesses are slowed to a crawl, and **New code** signs every device out. The first time, macOS or Windows may ask whether Node may accept incoming connections: allow it, or phones cannot reach Scenri. Setting `SCENRI_HOST=127.0.0.1` keeps Scenri to this computer alone. Over plain http the code travels unencrypted, like everything else, so treat phone access as convenience on a network you trust.
 
 ## Layout