scenri 0.20.7 → 0.21.2

package/CHANGELOG.md

@@ -1,5 +1,36 @@
 # Changelog
 
+## [0.21.2](https://github.com/tonygorb/Scenri/compare/v0.21.1...v0.21.2) (2026-10-05)
+
+
+### Bug Fixes
+
+* declare the docs-impact script's types so its test typechecks ([f484a2d](https://github.com/tonygorb/Scenri/commit/f484a2daaca5e1d1fae65112d5066c6402a270a4))
+* **library:** replace the Halvard 12 product photo ([2a2172d](https://github.com/tonygorb/Scenri/commit/2a2172da4358935c2faf43f646a163d976fa4db1))
+* **library:** replace the Halvard 12 product photo ([1d06193](https://github.com/tonygorb/Scenri/commit/1d0619397bbf5a39c4b982db5cde1c7d9b8bbf3b))
+
+## [0.21.1](https://github.com/tonygorb/Scenri/compare/v0.21.0...v0.21.1) (2026-10-04)
+
+
+### Bug Fixes
+
+* let the new example packshots through the package check ([45a0174](https://github.com/tonygorb/Scenri/commit/45a017453fed5d5a206e27d9e585a0d0b31ace95))
+* let the new example packshots through the package check ([6eef8f8](https://github.com/tonygorb/Scenri/commit/6eef8f8b44c06bd53db3052f4423475f2befc394))
+
+## [0.21.0](https://github.com/tonygorb/Scenri/compare/v0.20.7...v0.21.0) (2026-10-04)
+
+
+### Features
+
+* bring the website examples and Wet Ribs into the studio ([a859481](https://github.com/tonygorb/Scenri/commit/a859481cf33f1a0f2cd724c0adca23a68ba9c5ca))
+* bring the website examples and Wet Ribs into the studio ([013aead](https://github.com/tonygorb/Scenri/commit/013aeadc4e1aca23ee1bef816ba743dbab001ade))
+
+
+### Bug Fixes
+
+* patch the multipart reader against two denial-of-service advisories ([adbf2d3](https://github.com/tonygorb/Scenri/commit/adbf2d30ff8d7e582f0d43d49820e3732194b1d7))
+* patch the multipart reader against two denial-of-service advisories ([b854c58](https://github.com/tonygorb/Scenri/commit/b854c58529fdb84a1e922ffbfca70fe32bf4c071))
+
 ## [0.20.7](https://github.com/tonygorb/Scenri/compare/v0.20.6...v0.20.7) (2026-10-03)
 
 

package/README.md

@@ -15,7 +15,7 @@ Save a brand's products from real photos, the people in its shots and its places
 
 **Get started.** You need [Node.js](https://nodejs.org) 22 or newer, and a paid ChatGPT plan (used through Codex CLI, which Scenri sets up for you) or an [OpenRouter](https://openrouter.ai) API key to make pictures. Scenri itself has no account and no fees.
 
-<sub>If `npm --version` prints 12, run `npm config set allow-scripts=better-sqlite3 --location=user` once first ([why](https://github.com/tonygorb/scenri/blob/main/docs/INSTALL.md#troubleshooting)). Then:</sub>
+<sub>If `npm --version` prints 12, run `npm config set allow-scripts=better-sqlite3 --location=user` once first ([why](https://github.com/tonygorb/scenri/blob/main/docs/TROUBLESHOOTING.md)). Then:</sub>
 
 ```bash
 npx scenri
@@ -65,21 +65,13 @@ The brand kit lives in Settings and is the part that keeps output consistent. Na
 
 ## Run it
 
-Scenri runs on [Node.js](https://nodejs.org), version 22 or newer. If you are not sure you have it, or terminals are not part of your day, the **[install guide](https://github.com/tonygorb/scenri/blob/main/docs/INSTALL.md)** covers every step for macOS, Windows and Linux. With Node in place:
+Node.js 22 or newer, then:
 
 ```bash
 npx scenri
 ```
 
-That is the whole install. npm asks once whether to proceed, downloads the current release, and opens `http://127.0.0.1:4747`. Keep the terminal window open while you work; closing it stops Scenri. Tomorrow the same command opens it again, with everything where you left it. Nothing here needs an administrator.
-
-On Windows, if PowerShell answers `npx.ps1 cannot be loaded because running scripts is disabled on this system`, that is a stock Windows setting, not a fault: type `npx.cmd scenri` instead, or use Command Prompt. Still no administrator required.
-
-On macOS and Windows, Scenri then asks once whether to put a **Scenri icon on your desktop**. Say yes and from then on a double-click starts Scenri and opens it in your browser, no terminal needed; the icon works offline and keeps working across updates. Said no? Settings, then Local access, then **Add to desktop**, or `npx scenri desktop` in a terminal. Scenri stays what it is, a local server and your browser: the icon is a launcher, not an app.
-
-Generation runs on **Codex CLI**, an official helper from OpenAI that draws on your own paid ChatGPT plan (Codex image generation is not part of the Free plan). No API key to paste, and Scenri never charges you. Each image spends some of your plan's Codex usage. You do not have to set it up by hand: if it is missing, Scenri offers to install it and to sign you in, both from the app. No ChatGPT plan? Add your own key from an image provider in Settings instead, see [Engines](#engines).
-
-One dependency, `better-sqlite3`, runs an install script that fetches its native binary. The npm that ships with current Node releases (npm 11) runs it without asking. npm 12 blocks dependency install scripts by default, so if `npm --version` prints 12, allow this one once with `npm config set allow-scripts=better-sqlite3 --location=user` before you run `npx scenri`. Something not starting? See [troubleshooting](https://github.com/tonygorb/scenri/blob/main/docs/INSTALL.md#troubleshooting).
+The [install guide](https://github.com/tonygorb/scenri/blob/main/docs/INSTALL.md) covers macOS, Windows, and Linux, including the desktop icon and the PowerShell case. The [quick start](https://github.com/tonygorb/scenri/blob/main/docs/QUICKSTART.md) is the shortest path to one Shot. Generation is a separate step: [connect Codex or a provider key](https://github.com/tonygorb/scenri/blob/main/docs/CONNECT.md). If `npm --version` prints 12, see [troubleshooting](https://github.com/tonygorb/scenri/blob/main/docs/TROUBLESHOOTING.md) before the first run.
 
 <details>
 <summary>Run from source</summary>
@@ -94,41 +86,14 @@ pnpm dev          # starts the server on 127.0.0.1:4747
 
 </details>
 
-## First five minutes
-
-Scenri offers to walk you through your first shot, one step at a time, and Learn holds the rest. The short version:
-
-1. **Paste a website URL.** Scenri reads the public pages and drafts the kit: name, logo, palette. If the site sells things, it offers to add the products too.
-2. **Describe a shot.** In the composer, `$` reaches for a product, `@` for a presenter, `/` for a scene, and `#` for a colour. Everything between them is your own words.
-3. **Generate on Codex CLI.** Runs on your own paid ChatGPT plan, so there is no key and no per-image charge from us.
-4. **Refine it.** Open the shot and say what to change. Each refinement joins the trail under the picture.
-5. **Add your own key** in Settings, Providers to run on OpenRouter, Replicate or fal instead.
-
 ## Why it is built this way
 
-- **Iteration is the product.** Not a prompt box: every shot keeps its trail of refinements, and the ones you star collect in Keepers.
+- **Iteration is the product.** Not a prompt box: every shot keeps its trail of refinements, and the ones you mark collect in Keepers.
 - **Your brands are files, not hostages.** `.brand` is an open, documented format under a permissive license. Email one to a client. Any tool can adopt it.
 - **Your AI, your cost.** Bring your own ChatGPT plan through Codex CLI, or an API key. You pay the provider directly, at its own price. Scenri sells no credits and adds no markup.
 - **Local first, and it means it.** No account, no telemetry, nothing uploaded to us. Scenri runs on this computer, and answers other devices on your own network only when they bring its six-digit code (Settings, Local access). It makes exactly two requests on its own behalf: a version-number check against npm every six hours so updates can announce themselves (and, when one is found, the download of that release from npm, staged locally until you choose to restart), and the download of the library imagery archive from GitHub, once for each library version a release pins. Nothing about you or your work is sent in either, and both turn off: in Settings or `SCENRI_NO_UPDATE_CHECK=1` for the first, `SCENRI_NO_CONTENT_FETCH=1` for the second ([how updates work](https://github.com/tonygorb/scenri/blob/main/docs/updates.md), [what goes where](https://github.com/tonygorb/scenri/blob/main/PRIVACY.md)).
 
-## Engines
-
-| Engine | What it costs you | Needs | Carries a Product or Presenter |
-|---|---|---|---|
-| **Codex CLI** | your ChatGPT plan's Codex usage | a paid ChatGPT plan; the app installs Codex and signs you in | yes, up to 5 references |
-| OpenRouter | about $0.04 an image | API key | yes, up to 4 references |
-| Replicate | about $0.003 an image | API token | no |
-| fal | about $0.006 an image (fal bills per megapixel) | API key | no |
-
-Codex CLI is the default because it needs no key and because it carries the most reference images: a shot that has to keep both a product and a person accurate needs the room.
-
-It is not free. Paid ChatGPT plans include Codex usage, and each image spends some of it: OpenAI says image generation uses it three to five times faster than a plain turn. OpenAI meters that, not Scenri, so spend caps do not apply to this engine.
-
-**Without a paid ChatGPT plan**, use your own provider key. OpenRouter is the one to pick if your shots name a Product or a Presenter. Replicate and fal take no reference images, so Scenri refuses those shots on them rather than generating something that only looks right. Edits on Replicate and fal cost more than a new image.
-
-Keys are stored in your local library folder, sent only to that provider, and never returned by the API. Set a monthly spend cap per engine in Settings, Providers.
-
-Your Codex session is yours: Scenri runs the official `codex` commands on your machine and never reads, copies or stores the credential. That is also why Scenri never pools user plans: a plan is licensed to the person who pays for it, not to a service reselling it to other people. Any hosted version of Scenri, if one ever exists, would run API-priced engines only.
+Providers, costs, and what each one can carry are in [Connect image generation](https://github.com/tonygorb/scenri/blob/main/docs/CONNECT.md).
 
 ## Configuration
 

package/dist/serve.js

@@ -16383,6 +16383,51 @@ function registerImageRoutes(app, deps) {
 var HEADLINES_KEPT = 5;
 var FIRST_PUBLIC = "0.2.0";
 var RELEASES = [
+  {
+    version: "0.21.2",
+    date: "2026-10-05",
+    title: "Halvard 12 has a full-size product photo",
+    sections: [
+      {
+        heading: "Examples",
+        body: "The whisky bottle now has a photo as large as the other products, so its label stays readable, and a shot made from it is told every word on that label."
+      }
+    ]
+  },
+  {
+    version: "0.21.1",
+    date: "2026-10-04",
+    title: "The new examples' product photos ship with the app",
+    sections: [
+      {
+        heading: "Examples",
+        body: "Each of the eighteen new examples brings its own product photo, so a shot that uses one starts from that photo."
+      }
+    ]
+  },
+  {
+    version: "0.21.0",
+    date: "2026-10-04",
+    title: "New examples on Home, and Refine has its own look",
+    sections: [
+      {
+        heading: "Examples",
+        body: "Eighteen new examples sit on Home, each a real product in a real place. Wet Ribs joins the scenes: wet orange ribbed rubber under a hard sun.",
+        image: {
+          file: "0.21.0-home-examples.webp",
+          alt: "Home open on All examples, the wall showing Ol\xE9a Hand Cream and Halvard 12 among the shots."
+        }
+      },
+      {
+        heading: "Refine",
+        body: "While a shot is being refined, the button is the light pill. Closing that state on the composer clears only the refinement, and the shot stays."
+      },
+      {
+        heading: "Security",
+        body: "The reader that takes uploaded files on the local server is on its patched release, for two denial-of-service advisories. Nothing about how Scenri works changes."
+      }
+    ]
+  },
   {
     version: "0.20.7",
     date: "2026-10-03",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "scenri",
-  "version": "0.20.7",
+  "version": "0.21.2",
   "author": "Tony Gorb <hello@scenri.co>",
   "license": "AGPL-3.0-only",
   "type": "module",