scenri 0.20.3 → 0.20.5

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.20.5](https://github.com/tonygorb/Scenri/compare/v0.20.4...v0.20.5) (2026-09-29)
+
+
+### Bug Fixes
+
+* **deps:** lift undici to 7.30.0 for the WebSocket inflate DoS ([7a819c5](https://github.com/tonygorb/Scenri/commit/7a819c544ab486ac22565547da6b54e1efea4099))
+* **deps:** lift undici to 7.30.0 for the WebSocket inflate DoS ([b93f415](https://github.com/tonygorb/Scenri/commit/b93f415d8272a3184e6aa50d7f3579d95a48cd70))
+
+## [0.20.4](https://github.com/tonygorb/Scenri/compare/v0.20.3...v0.20.4) (2026-09-28)
+
+
+### Bug Fixes
+
+* **codex:** run on the Codex default when the plan lacks gpt-6-sol ([e7dc36d](https://github.com/tonygorb/Scenri/commit/e7dc36df2698e4ce22de66c8a997252af04c42f0))
+* **codex:** run on the Codex default when the plan lacks gpt-6-sol, keep only drawn pictures ([7851c59](https://github.com/tonygorb/Scenri/commit/7851c5944c5e4cbfd17ef7ac12cd6068f57e84b7))
+* **codex:** store only a picture the image tool drew ([4573de7](https://github.com/tonygorb/Scenri/commit/4573de7944a479b0585af1fe62ec9cd9bce470b2))
+* **studio:** reload a tab whose server came back as another version ([22c5b6d](https://github.com/tonygorb/Scenri/commit/22c5b6d7f730d37e8435923feec1266fb3fe11ca))
+* **studio:** reload a tab whose server came back as another version ([06629f0](https://github.com/tonygorb/Scenri/commit/06629f09dcb5b47551ae18ce2a88ed3985e3579d))
+
 ## [0.20.3](https://github.com/tonygorb/Scenri/compare/v0.20.2...v0.20.3) (2026-09-27)
 
 

package/README.md

@@ -6,20 +6,22 @@
 </picture>
 <br><br>
 
-**The open studio for brand-consistent AI visuals.**<br>
-Define a client's brand once. Then put its products and people into scenes, art-direct each shot in plain words, and refine it step by step. Open source, running entirely on your own machine and your own AI accounts.
+**The open-source AI photo studio that remembers your products, people and places.**<br>
+Save a brand's products from real photos, the people in its shots and its places once. Then each shot is one line, and every shot keeps its recipe, so you can refine it or make the next one match. It runs on your own computer and sends your pictures to the image model you already use.
 
 [![CI](https://github.com/tonygorb/scenri/actions/workflows/ci.yml/badge.svg)](https://github.com/tonygorb/scenri/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/scenri)](https://www.npmjs.com/package/scenri)
 [![License: AGPL v3](https://img.shields.io/badge/license-AGPL--3.0-blue)](https://github.com/tonygorb/scenri/blob/main/LICENSE)
 
-**Get started:** one command, no account.
+**Get started.** You need [Node.js](https://nodejs.org) 22 or newer, and a paid ChatGPT plan (used through Codex CLI, which Scenri sets up for you) or an [OpenRouter](https://openrouter.ai) API key to make pictures. Scenri itself has no account and no fees.
+
+<sub>If `npm --version` prints 12, run `npm config set allow-scripts=better-sqlite3 --location=user` once first ([why](https://github.com/tonygorb/scenri/blob/main/docs/INSTALL.md#troubleshooting)). Then:</sub>
 
 ```bash
 npx scenri
 ```
 
-<sub>Needs [Node.js](https://nodejs.org) 22 or newer. New to any of this? The [install guide](https://github.com/tonygorb/scenri/blob/main/docs/INSTALL.md) walks through every step.</sub>
+<sub>The first start downloads the Scenri library of example imagery, about 155 MB. New to any of this? The [install guide](https://github.com/tonygorb/scenri/blob/main/docs/INSTALL.md) walks through every step.</sub>
 
 <img src="https://raw.githubusercontent.com/tonygorb/scenri/main/docs/media/demo.gif" alt="Scenri's Create page: in the composer a dollar sign picks the product Cropped Puffer, an at sign picks the presenter Kwame, a slash picks the Container Blue scene, and a line of written direction follows the three chips. Generate turns a new card into a dithered swirl where the picture is being made, the swirl develops into a man in an orange puffer jacket leaning on a cobalt shipping container, and the shot opens beside the prompt that made it" width="820">
 
@@ -33,10 +35,16 @@ npx scenri
 
 Most AI image tools give you a prompt box and a slot machine. Scenri gives you the part that actually takes the time: **art direction**.
 
-Every shot keeps its history. Open it, say what to change, and each refinement joins a trail under the picture, so the original and every step stay one click apart. Refine any step again, or use **Reuse setup** to start a new shot from the same prompt and chips.
+You save a brand's ingredients once: its products from real photos, the people who appear in its shots (Scenri calls them Presenters), its places (Scenes) and its brand kit. Then a shot is one line. In the composer, `$` picks a product (what), `@` a person (who) and `/` a scene (where), and you write the direction in the same line. Open the shot, say what to change, and **Refine** keeps every step on a trail under the picture, so the original and every step stay one click apart.
+
+Every shot also keeps its recipe: the prompt, the chips and the settings that made it. Refine any step again, or use **Reuse setup** to start a new shot from the same prompt and chips, so the next one matches.
+
+Scenri trains nothing. It sends your saved photos with each shot as reference images, and the image model draws the product and the person from them, so a shot comes close to the real thing rather than pasting it in, and small lettering can drift. When you refine one part of a finished shot, or change its shape, Scenri keeps the original picture's own pixels wherever it can.
 
 It runs as a local server on your own computer. Your brands, your images, and your keys stay on your disk. To use it from a phone or tablet on the same Wi-Fi, open Settings, Local access, and scan the QR code.
 
+The words Scenri uses are defined once in [Concepts](https://github.com/tonygorb/scenri/blob/main/docs/CONCEPTS.md), and the questions people ask first, from LoRAs to cost, are answered in the [FAQ](https://github.com/tonygorb/scenri/blob/main/docs/FAQ.md).
+
 ## What a prompt produces
 
 The film above ends on one of the examples from the Home wall: the Cropped Puffer product, the presenter Kwame, the Container Blue scene, and a short paragraph of written direction, of which the film types the first line. The chips carry the identity; the words do the art direction. Here are eight more shots from the Home wall, each built the same way from chips and written direction:

package/dist/serve.js

@@ -967,6 +967,9 @@ function codexFailureDetail(stderr, stdout) {
   return tailOf(marked) || tailOf(body) || tailOf(stdout.trim()) || tailOf(stderr.trim());
 }
 var MODEL_NEEDS_NEWER_CODEX = /The '([^']+)' model requires a newer version of Codex/;
+var MODEL_NOT_ON_PLAN = /The '([^']+)' model is not supported when using Codex with a ChatGPT account/;
+var ModelNotOnPlan = class extends Error {
+};
 var BAD_KEY_401 = /incorrect api key provided|invalid_api_key|invalid api key/i;
 function tooOldForModel(version, model) {
   return `Codex CLI ${version ?? "on this computer"} is too old for the model it is set to, ${model}.`;
@@ -1020,18 +1023,33 @@ function createRunner(opts = {}) {
   }
   let knownVersion = null;
   let tooOldFor = null;
+  const offPlan = /* @__PURE__ */ new Set();
+  const withoutOffPlan = (rest) => {
+    const i = rest.indexOf("-m");
+    return i >= 0 && offPlan.has(rest[i + 1]) ? [...rest.slice(0, i), ...rest.slice(i + 2)] : rest;
+  };
   const winArg = (a) => `"${a.replace(/[\r\n]+/g, " ").replace(/"/g, "'").replace(/%/g, " percent ")}"`;
   const spawnCodex = (exe, args, stdinOpen) => {
     const stdio = [stdinOpen ? "pipe" : "ignore", "pipe", "pipe"];
     const env = buildChildEnv(parentEnv, [...ignoreEnvKeys(), ...SIBLING_PROVIDER_KEYS]);
-    if (args[0] === "exec") args = ["exec", ...extensionsOffArgs(parentEnv), ...args.slice(1)];
+    if (args[0] === "exec") args = ["exec", ...extensionsOffArgs(parentEnv), ...withoutOffPlan(args.slice(1))];
     return exe.direct ? spawnImpl(exe.command, args, { stdio, env, ...platform !== "win32" ? { detached: true } : {} }) : spawnImpl([exe.command, ...args.map(winArg)].join(" "), [], { stdio, env, shell: true });
   };
   async function run4(args, signal, io) {
+    try {
+      await runOnce(args, signal, io);
+    } catch (err) {
+      if (!(err instanceof ModelNotOnPlan)) throw err;
+      await runOnce(args, signal, io);
+    }
+  }
+  async function runOnce(args, signal, io) {
     const exe = await resolution();
     const timeoutMs = io?.timeoutMs ?? defaultTimeoutMs;
     const launchedAs = args[0] === "exec" ? fingerprintFor(exe, knownVersion) : null;
     return new Promise((resolve, reject) => {
+      const sent = withoutOffPlan(args.slice(1));
+      const sentModel = sent.includes("-m") ? sent[sent.indexOf("-m") + 1] : null;
       let child;
       try {
         child = spawnCodex(exe, args, io?.stdin != null);
@@ -1145,6 +1163,26 @@ function createRunner(opts = {}) {
           );
           return;
         }
+        const refused = MODEL_NOT_ON_PLAN.exec(stderr);
+        if (refused) {
+          const model = refused[1];
+          if (sentModel === model) {
+            if (!offPlan.has(model))
+              console.warn(`codex: ${model} is not on this ChatGPT plan, running on the Codex default`);
+            offPlan.add(model);
+            finish("model-not-on-plan", () => reject(new ModelNotOnPlan(`${model} is not on this ChatGPT plan`)));
+            return;
+          }
+          finish(
+            `exit-${code ?? "unknown"}`,
+            () => reject(
+              new Error(
+                `Your ChatGPT plan cannot run ${model} in Codex. Choose another model in Codex, then run this again.`
+              )
+            )
+          );
+          return;
+        }
         const conflicting = presentConflictKeys(parentEnv, ignoreEnvKeys());
         if (conflicting.length > 0 && /\b401\b|unauthorized/i.test(stderr) && BAD_KEY_401.test(stderr)) {
           noteConnection("refused", {
@@ -1780,14 +1818,57 @@ function createCodexEngine(opts) {
   const withWorkDir = runner.withWorkDir;
   const generatedImagesDir = () => join(process.env.CODEX_HOME || join(homedir(), ".codex"), "generated_images");
   async function snapshotGenerated() {
-    if (platform !== "win32") return null;
     try {
       return new Set(await readdir(generatedImagesDir()));
     } catch {
       return /* @__PURE__ */ new Set();
     }
   }
-  async function collectImages(dir, before = null, claimed) {
+  async function drawnSince(before, claimed) {
+    const home = generatedImagesDir();
+    let names;
+    try {
+      names = await readdir(home);
+    } catch {
+      return [];
+    }
+    const found = [];
+    const consider = async (path) => {
+      const st = await lstat(path);
+      if (st.isFile() && /\.png$/i.test(path) && !claimed.has(path)) found.push({ path, mtime: st.mtimeMs });
+    };
+    for (const name of names) {
+      if (before.has(name)) continue;
+      const at = join(home, name);
+      try {
+        const st = await lstat(at);
+        if (st.isDirectory()) for (const file of await readdir(at)) await consider(join(at, file));
+        else await consider(at);
+      } catch {
+      }
+    }
+    return found.sort((a, b) => b.mtime - a.mtime).map((f) => f.path);
+  }
+  async function claimCopy(drawn, buf, claimed) {
+    for (const path of drawn) {
+      try {
+        if ((await stat(path)).size !== buf.length || !(await readFile(path)).equals(buf)) continue;
+      } catch {
+        continue;
+      }
+      claimed.add(path);
+      return true;
+    }
+    return false;
+  }
+  async function takeDrawn(path, claimed) {
+    claimed.add(path);
+    const buf = await readLeftFile(path, basename(path));
+    const hash = saveImage(buf);
+    await forgetGenerated(buf);
+    return hash;
+  }
+  async function collectImages(dir, before, claimed = /* @__PURE__ */ new Set()) {
     const entries = await readdir(dir);
     const outFiles = entries.filter((name) => /^out-.*\.png$/.test(name)).sort((a, b) => {
       const na = Number(/^out-(\d+)\.png$/.exec(a)?.[1] ?? NaN);
@@ -1796,9 +1877,12 @@ function createCodexEngine(opts) {
       return a.localeCompare(b);
     });
     if (outFiles.length === 0) {
-      if (before) {
-        const recovered = await recoverFromGenerated(before, claimed);
-        if (recovered) return [recovered];
+      if (platform === "win32") {
+        const [newest] = await drawnSince(before, claimed);
+        if (newest) {
+          console.warn(`codex: workdir empty, recovered ${newest}`);
+          return [await takeDrawn(newest, claimed)];
+        }
       }
       throw new Error("Codex finished but produced no images");
     }
@@ -1806,6 +1890,12 @@ function createCodexEngine(opts) {
     for (const name of outFiles) {
       const buf = await readLeftFile(join(dir, name), name);
       if (buf.length === 0) throw new Error(`codex: ${name} is empty`);
+      const drawn = platform === "win32" ? [] : await drawnSince(before, claimed);
+      if (drawn.length > 0 && !await claimCopy(drawn, buf, claimed)) {
+        console.warn(`codex: ${name} is not a picture the image tool drew, taking the tool's own file`);
+        hashes.push(await takeDrawn(drawn[0], claimed));
+        continue;
+      }
       hashes.push(saveImage(buf));
       await forgetGenerated(buf);
     }
@@ -1844,22 +1934,6 @@ function createCodexEngine(opts) {
       }
     }
   }
-  async function recoverFromGenerated(before, claimed) {
-    const home = generatedImagesDir();
-    let names;
-    try {
-      names = (await readdir(home)).filter((n) => !before.has(n) && !claimed?.has(n));
-    } catch {
-      return null;
-    }
-    if (!names.length) return null;
-    const stamped = await Promise.all(names.map(async (n) => ({ n, mtime: (await stat(join(home, n))).mtimeMs })));
-    stamped.sort((a, b) => b.mtime - a.mtime);
-    const pick2 = stamped[0].n;
-    claimed?.add(pick2);
-    console.warn(`codex: workdir empty, recovered ${pick2} from ${home}`);
-    return saveImage(await readLeftFile(join(home, pick2), pick2));
-  }
   return {
     capabilities() {
       return {
@@ -16312,6 +16386,32 @@ function registerImageRoutes(app, deps) {
 var HEADLINES_KEPT = 5;
 var FIRST_PUBLIC = "0.2.0";
 var RELEASES = [
+  {
+    version: "0.20.5",
+    date: "2026-09-29",
+    title: "One dependency is on its patched release",
+    sections: [
+      {
+        heading: "Security",
+        body: "The network library under the page reader Scenri reads websites with is on its patched release, for a WebSocket advisory Scenri never reached. Nothing about how Scenri works changes."
+      }
+    ]
+  },
+  {
+    version: "0.20.4",
+    date: "2026-09-28",
+    title: "Shots made with Codex work on every ChatGPT plan",
+    sections: [
+      {
+        heading: "Create",
+        body: "When your ChatGPT plan does not offer the model Scenri asks Codex for, the shot now runs on the model your Codex is set to, with every reference picture still attached."
+      },
+      {
+        heading: "Fixes",
+        body: "On Mac and Linux a shot keeps only the picture Codex drew, never a stray file. An open tab reloads itself when Scenri restarts on a new version."
+      }
+    ]
+  },
   {
     version: "0.20.3",
     date: "2026-09-27",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "scenri",
-  "version": "0.20.3",
+  "version": "0.20.5",
   "author": "Tony Gorb <hello@scenri.co>",
   "license": "AGPL-3.0-only",
   "type": "module",
@@ -79,5 +79,5 @@
     "design",
     "cli"
   ],
-  "description": "The open studio for brand-consistent AI visuals. Runs locally, on your own AI accounts."
+  "description": "The open-source AI photo studio that remembers your products, people and places. Runs locally, on your own AI accounts."
 }