scenri 0.18.0 → 0.18.1

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## [0.18.1](https://github.com/tonygorb/Scenri/compare/v0.18.0...v0.18.1) (2026-09-26)
+
+
+### Bug Fixes
+
+* **codex:** call the image tool once and copy the file its result names ([4244a20](https://github.com/tonygorb/Scenri/commit/4244a200d1b2637dab386c18741549910dbb7c0e))
+* **codex:** leave the machine's own MCP servers out of every exec ([c59e31c](https://github.com/tonygorb/Scenri/commit/c59e31cdccd9b8a3feb3d5e31f9839dfa77cc85f))
+* **codex:** run every exec on gpt-6-sol and never print the picture ([0aade5e](https://github.com/tonygorb/Scenri/commit/0aade5e40cd8ab35079be07e5834f4978a27e34a))
+* keep host actions on the computer running Scenri, and cut Codex cost ([6f3f262](https://github.com/tonygorb/Scenri/commit/6f3f2622f71eb81b57cecf7e016c2c64d5b94fa0))
+* keep host actions on the computer running Scenri, and cut Codex cost ([#255](https://github.com/tonygorb/Scenri/issues/255)) ([6f3f262](https://github.com/tonygorb/Scenri/commit/6f3f2622f71eb81b57cecf7e016c2c64d5b94fa0))
+* **security:** forbid framing and type sniffing on every answer ([9bccee7](https://github.com/tonygorb/Scenri/commit/9bccee7617902303c0ebf965ba5e5a43881e9543))
+* **security:** keep backups and desktop logs to their owner ([bf5a54b](https://github.com/tonygorb/Scenri/commit/bf5a54b312e76acdd1590520d74c269dd1b277cd))
+* **security:** keep host actions, paths and secrets on this computer ([349e82f](https://github.com/tonygorb/Scenri/commit/349e82f38b38da96cdcc8f99acba49d3383e106c))
+* **security:** look up store names when the crawl is handed the real fetch ([ab62872](https://github.com/tonygorb/Scenri/commit/ab62872e549591df73a1d3aeaee67d3e925e93f4))
+* **security:** never tell a phone where the desktop icon lives ([328df67](https://github.com/tonygorb/Scenri/commit/328df676234643e3ef6d6aaeebdd860330c4e511))
+* **security:** only the computer running Scenri can change a spend cap ([e248269](https://github.com/tonygorb/Scenri/commit/e24826920040ae4a238fc884da72b34654ab3350))
+* **security:** only the computer running Scenri can install an update or restart into one ([f9bdf02](https://github.com/tonygorb/Scenri/commit/f9bdf02243f122ac6f794cb3c79b16a96f594565))
+* **security:** only the computer running Scenri can shut it down ([e22085f](https://github.com/tonygorb/Scenri/commit/e22085f5b15347d8614376054dfa5807017b9b02))
+* **security:** only the studio can make Codex status spend a turn ([ba3be74](https://github.com/tonygorb/Scenri/commit/ba3be7402602f58f3d7b6797db5e5edb62030758))
+* **security:** read an IPv6 address whole before deciding it is public ([305ce11](https://github.com/tonygorb/Scenri/commit/305ce116ba889c3fb7fa3344d9965c47a4f48dd6))
+* **security:** take provider keys only from the computer running Scenri ([883545d](https://github.com/tonygorb/Scenri/commit/883545dbfc25e1dc97c2ab3e85daa6df343409c5))
+* **server:** bound the library download to its last byte, not its headers ([707c3ae](https://github.com/tonygorb/Scenri/commit/707c3aecaacba0c8c0071e1d742a9af0894ba265))
+* **studio:** a phone is not offered Shut down, Update or a cap to change ([82b4bb1](https://github.com/tonygorb/Scenri/commit/82b4bb1040d22504c357726a7de209691bcee3bf))
+
 ## [0.18.0](https://github.com/tonygorb/Scenri/compare/v0.17.2...v0.18.0) (2026-09-25)
 
 

package/dist/{chunk-HI7CG4TK.js → chunk-VQPHG2GQ.js}

@@ -2,7 +2,7 @@ import { homedir } from 'os';
 import { join } from 'path';
 import Database from 'better-sqlite3';
 import { randomUUID, createHash } from 'crypto';
-import { mkdirSync, existsSync, chmodSync, rmSync, readFileSync, writeFileSync, readdirSync } from 'fs';
+import { mkdirSync, existsSync, chmodSync, rmSync, readFileSync, statSync, writeFileSync, renameSync, readdirSync } from 'fs';
 
 // ../core/src/index.ts
 
@@ -492,12 +492,21 @@ var SchemaTooNewError = class extends Error {
 };
 function backupBeforeMigration(db, homeDir, fromVersion) {
   const dir = join(homeDir, "backups");
-  mkdirSync(dir, { recursive: true });
+  mkdirSync(dir, { recursive: true, mode: 448 });
+  try {
+    chmodSync(dir, 448);
+  } catch {
+  }
   const d = /* @__PURE__ */ new Date();
   const p = (n) => String(n).padStart(2, "0");
   const stamp = `${d.getFullYear()}${p(d.getMonth() + 1)}${p(d.getDate())}-${p(d.getHours())}${p(d.getMinutes())}${p(d.getSeconds())}`;
   db.pragma("wal_checkpoint(TRUNCATE)");
-  db.prepare("VACUUM INTO ?").run(join(dir, `scenri-v${fromVersion}-${stamp}.db`));
+  const snapshot = join(dir, `scenri-v${fromVersion}-${stamp}.db`);
+  db.prepare("VACUUM INTO ?").run(snapshot);
+  try {
+    chmodSync(snapshot, 384);
+  } catch {
+  }
   const old = readdirSync(dir).filter((f) => /^scenri-v\d+-\d{8}-\d{6}\.db$/.test(f)).sort((a, b) => a.slice(-18).localeCompare(b.slice(-18)));
   for (const f of old.slice(0, Math.max(0, old.length - 3))) rmSync(join(dir, f));
 }
@@ -583,7 +592,15 @@ function createImageStore(homeDir) {
       const clean = /^[a-z0-9]{2,5}$/i.test(ext) ? ext.toLowerCase() : "png";
       const hash = createHash("sha256").update(buf).digest("hex").slice(0, 32);
       const file = fileFor(hash, clean);
-      if (!existsSync(file)) writeFileSync(file, buf);
+      if (!existsSync(file) || statSync(file).size !== buf.length) {
+        const tmp = `${file}.${process.pid}.tmp`;
+        try {
+          writeFileSync(tmp, buf);
+          renameSync(tmp, file);
+        } finally {
+          rmSync(tmp, { force: true });
+        }
+      }
       return hash;
     },
     pathFor(hash) {
@@ -2257,5 +2274,5 @@ function createCore(homeDir = defaultHome()) {
 }
 
 export { ASPECT_TOLERANCE, BUDGET_EXHAUSTED, EDIT_REFERENCE_ROLE_DIRECTIVE, REFERENCE_ROLE_DIRECTIVE, SCHEMA_VERSION, STEM_MIN, SchemaTooNewError, SpendCapError, TRIGRAM_MIN, budgetSize, createCatalogStore, createCore, createStore, defaultHome, fold, ftsMatch, matchesQuery, nameMatches, ratioLabel, searchTerms, shortTermSql, termMatches, uniqueProjectSlug, uniqueSetSlug, uniqueSlug };
-//# sourceMappingURL=chunk-HI7CG4TK.js.map
-//# sourceMappingURL=chunk-HI7CG4TK.js.map
+//# sourceMappingURL=chunk-VQPHG2GQ.js.map
+//# sourceMappingURL=chunk-VQPHG2GQ.js.map

package/dist/{cli-Y5X5XXFA.js → cli-HHU7DUWE.js}

@@ -5,7 +5,7 @@ import { defaultHome, newestStaged, listStaged, compareSemver, entryOf } from '.
 import { removeDesktop, failureDetail, installDesktop, POWERSHELL_ARGS } from './chunk-3BGDI4HI.js';
 import { launcherDir, logsDir, powershellPath } from './chunk-2IGINCPU.js';
 import { execFile, spawn } from 'child_process';
-import { closeSync, existsSync, readFileSync, writeFileSync, mkdirSync, openSync, rmSync, statSync, renameSync, appendFileSync } from 'fs';
+import { closeSync, existsSync, readFileSync, writeFileSync, mkdirSync, openSync, rmSync, chmodSync, statSync, renameSync, appendFileSync } from 'fs';
 import { homedir } from 'os';
 import { join, dirname, delimiter, win32 } from 'path';
 import { createServer } from 'http';
@@ -144,17 +144,28 @@ function rotate(path, maxBytes) {
 }
 function appendLog(path, line, opts = {}) {
   try {
-    mkdirSync(dirname(path), { recursive: true });
+    mkdirSync(dirname(path), { recursive: true, mode: 448 });
+    ownerOnly(dirname(path), 448);
     rotate(path, opts.maxBytes ?? DEFAULT_MAX);
     appendFileSync(path, `${(/* @__PURE__ */ new Date()).toISOString()} ${line}
-`);
+`, { mode: 384 });
+    ownerOnly(path, 384);
   } catch {
   }
 }
 function openLogFd(path, opts = {}) {
-  mkdirSync(dirname(path), { recursive: true });
+  mkdirSync(dirname(path), { recursive: true, mode: 448 });
+  ownerOnly(dirname(path), 448);
   rotate(path, opts.maxBytes ?? 5 * DEFAULT_MAX);
-  return openSync(path, "a");
+  const fd = openSync(path, "a", 384);
+  ownerOnly(path, 384);
+  return fd;
+}
+function ownerOnly(path, mode) {
+  try {
+    chmodSync(path, mode);
+  } catch {
+  }
 }
 var LOCK_FRESH_MS = 6e4;
 var READY_TIMEOUT_MS = 18e4;
@@ -463,7 +474,7 @@ async function addOrRepair(ownEntry, say, over) {
 }
 async function rememberDecline(home) {
   try {
-    const { createCore } = await import('./src-VQCTLFGX.js');
+    const { createCore } = await import('./src-CHSXV3ZA.js');
     const core = createCore(home);
     try {
       core.store.setSetting("desktop.prompt", "declined");
@@ -530,5 +541,5 @@ function tail(path, bytes = 4096) {
 }
 
 export { addToDesktop, assetsDirFor, installDeps, runDesktopCommand, runExecFile, runOpenCommand };
-//# sourceMappingURL=cli-Y5X5XXFA.js.map
-//# sourceMappingURL=cli-Y5X5XXFA.js.map
+//# sourceMappingURL=cli-HHU7DUWE.js.map
+//# sourceMappingURL=cli-HHU7DUWE.js.map

package/dist/index.js

@@ -86,12 +86,12 @@ try {
       break;
     }
     case "desktop": {
-      const { runDesktopCommand } = await import('./cli-Y5X5XXFA.js');
+      const { runDesktopCommand } = await import('./cli-HHU7DUWE.js');
       process.exit(await runDesktopCommand(command, fileURLToPath(import.meta.url)));
       break;
     }
     case "open": {
-      const { runOpenCommand } = await import('./cli-Y5X5XXFA.js');
+      const { runOpenCommand } = await import('./cli-HHU7DUWE.js');
       process.exit(await runOpenCommand(fileURLToPath(import.meta.url)));
       break;
     }