scenri 0.3.4 → 0.3.5

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.3.5](https://github.com/tonygorb/Scenri/compare/v0.3.4...v0.3.5) (2026-08-20)
+
+
+### Bug Fixes
+
+* keep untrusted text out of the Windows shell lines ([f564c35](https://github.com/tonygorb/Scenri/commit/f564c358dc018f2e7e52e00eae004122690dc2be))
+* make the Codex engine and updates work on Windows ([f94f420](https://github.com/tonygorb/Scenri/commit/f94f42069049b65920dfc95491a074cfd3617b8f))
+* make the Codex engine and updates work on Windows ([f21cb9d](https://github.com/tonygorb/Scenri/commit/f21cb9d513f291bfc64585f9f3a3f67ea5738bde))
+
+
+### Performance Improvements
+
+* cut the e2e wall clock roughly in half ([2cacbce](https://github.com/tonygorb/Scenri/commit/2cacbced34b6c58541c0b7942cd107aaa234f477))
+
 ## [0.3.4](https://github.com/tonygorb/Scenri/compare/v0.3.3...v0.3.4) (2026-08-20)
 
 

package/dist/{chunk-GA7P7K2M.js → chunk-3W2RHBZC.js}

@@ -1,6 +1,6 @@
 import { stagingDir, versionsDir, isValidVersionDir, pruneStaged, entryOf } from './chunk-4MAFHYAD.js';
 import { spawnSync, spawn } from 'child_process';
-import { rmSync, mkdirSync, readFileSync, renameSync } from 'fs';
+import { existsSync, rmSync, mkdirSync, readFileSync, renameSync } from 'fs';
 import { join, dirname } from 'path';
 
 // src/update/check.ts
@@ -97,6 +97,7 @@ function createUpdateChecker(deps) {
 }
 function findNpm(opts = {}) {
   const env = opts.env ?? process.env;
+  const platform = opts.platform ?? process.platform;
   const canRun = opts.canRun ?? ((argv) => {
     try {
       return spawnSync(argv[0], [...argv.slice(1), "--version"], { stdio: "ignore", timeout: 1e4 }).status === 0;
@@ -104,9 +105,26 @@ function findNpm(opts = {}) {
       return false;
     }
   });
-  if (canRun(["npm"])) return ["npm"];
-  const ep = env.npm_execpath;
+  if (platform !== "win32" && canRun(["npm"])) return ["npm"];
+  const ep = env.npm_execpath?.replace(/npx-cli\.js$/, "npm-cli.js");
   if (ep && /npm-cli\.js$/.test(ep) && canRun([process.execPath, ep])) return [process.execPath, ep];
+  if (platform === "win32") {
+    const cli = windowsNpmCli();
+    if (cli && canRun([process.execPath, cli])) return [process.execPath, cli];
+  }
+  return null;
+}
+function windowsNpmCli() {
+  try {
+    const out = spawnSync("where", ["npm"], { encoding: "utf8", timeout: 1e4 });
+    if (out.status !== 0 || !out.stdout) return null;
+    for (const line of out.stdout.split(/\r?\n/)) {
+      if (!/npm(\.cmd)?$/i.test(line.trim())) continue;
+      const cli = join(dirname(line.trim()), "node_modules", "npm", "bin", "npm-cli.js");
+      if (existsSync(cli)) return cli;
+    }
+  } catch {
+  }
   return null;
 }
 function run(argv) {
@@ -202,5 +220,5 @@ async function stageVersion(deps) {
 }
 
 export { classify, createUpdateChecker, fetchDistTagLatest, findNpm, stageVersion };
-//# sourceMappingURL=chunk-GA7P7K2M.js.map
-//# sourceMappingURL=chunk-GA7P7K2M.js.map
+//# sourceMappingURL=chunk-3W2RHBZC.js.map
+//# sourceMappingURL=chunk-3W2RHBZC.js.map

package/dist/{cli-GQLRYYGU.js → cli-HF5KPURA.js}

@@ -1,4 +1,4 @@
-import { stageVersion, fetchDistTagLatest, findNpm } from './chunk-GA7P7K2M.js';
+import { stageVersion, fetchDistTagLatest, findNpm } from './chunk-3W2RHBZC.js';
 import { readMeta } from './chunk-Y3ZPBPLP.js';
 import { defaultHome, newestStaged, compareSemver } from './chunk-4MAFHYAD.js';
 
@@ -43,7 +43,8 @@ async function runUpdateCommand(opts) {
   }
   if (!findNpm()) {
     console.error("  npm is not reachable from here, so nothing can be downloaded.");
-    console.error("  Install Node.js with npm, or run: npx scenri@latest");
+    console.error("  Run the newest version directly with: npx scenri@latest");
+    console.error("  (or install Node.js with npm and try again)");
     return 1;
   }
   console.log(`  downloading ${meta.name} ${latest}\u2026`);
@@ -62,5 +63,5 @@ async function runUpdateCommand(opts) {
 }
 
 export { runUpdateCommand };
-//# sourceMappingURL=cli-GQLRYYGU.js.map
-//# sourceMappingURL=cli-GQLRYYGU.js.map
+//# sourceMappingURL=cli-HF5KPURA.js.map
+//# sourceMappingURL=cli-HF5KPURA.js.map

package/dist/index.js

@@ -64,7 +64,7 @@ try {
       await (await import('./serve.js')).serve();
       break;
     case "update": {
-      const { runUpdateCommand } = await import('./cli-GQLRYYGU.js');
+      const { runUpdateCommand } = await import('./cli-HF5KPURA.js');
       process.exit(await runUpdateCommand(command));
       break;
     }

package/dist/serve.js

@@ -1,5 +1,5 @@
 import { portBusyLines } from './chunk-WGIZJXNE.js';
-import { createUpdateChecker, classify, stageVersion, findNpm } from './chunk-GA7P7K2M.js';
+import { createUpdateChecker, classify, stageVersion, findNpm } from './chunk-3W2RHBZC.js';
 import { readMeta, repoSlug } from './chunk-Y3ZPBPLP.js';
 import { newestStaged, compareSemver } from './chunk-4MAFHYAD.js';
 import { networkInterfaces, homedir, tmpdir } from 'os';
@@ -1857,11 +1857,17 @@ function execArgs(dir, promptText, effort = "low") {
 function createRunner(opts = {}) {
   const spawnImpl = opts.spawnImpl ?? spawn;
   const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
+  const platform = opts.platform ?? process.platform;
+  const winArg = (a) => `"${a.replace(/[\r\n]+/g, " ").replace(/"/g, "'").replace(/%/g, " percent ")}"`;
+  const spawnCodex = (args) => platform === "win32" ? spawnImpl(["codex", ...args].map(winArg).join(" "), [], {
+    stdio: ["ignore", "pipe", "pipe"],
+    shell: true
+  }) : spawnImpl("codex", args, { stdio: ["ignore", "pipe", "pipe"] });
   function run2(args, signal) {
     return new Promise((resolve, reject) => {
       let child;
       try {
-        child = spawnImpl("codex", args, { stdio: ["ignore", "pipe", "pipe"] });
+        child = spawnCodex(args);
       } catch (err) {
         reject(new Error(`Failed to spawn codex: ${err.message}`));
         return;
@@ -1930,7 +1936,7 @@ function createRunner(opts = {}) {
       };
       let child;
       try {
-        child = spawnImpl("codex", args, { stdio: ["ignore", "pipe", "pipe"] });
+        child = spawnCodex(args);
       } catch {
         done(false);
         return;
@@ -2108,6 +2114,7 @@ function stateFrom(avail) {
 }
 function createCodexSetup(opts = {}) {
   const spawnImpl = opts.spawnImpl ?? spawn;
+  const platform = opts.platform ?? process.platform;
   const runner = createRunner(opts);
   const installTimeoutMs = opts.installTimeoutMs ?? DEFAULT_INSTALL_TIMEOUT_MS;
   function run2(cmd, args, timeoutMs) {
@@ -2126,7 +2133,7 @@ function createCodexSetup(opts = {}) {
         done({ code: null, stderr, spawnError: `${cmd} timed out after ${timeoutMs}ms` });
       }, timeoutMs);
       try {
-        child = spawnImpl(cmd, args, { stdio: ["ignore", "pipe", "pipe"], shell: process.platform === "win32" });
+        child = spawnImpl(cmd, args, { stdio: ["ignore", "pipe", "pipe"], shell: platform === "win32" });
       } catch (err) {
         done({ code: null, stderr, spawnError: err.message });
         return;
@@ -2159,7 +2166,7 @@ function createCodexSetup(opts = {}) {
         }
         return { ok: true };
       }
-      if (process.platform !== "win32" && /EACCES|permission denied/i.test(res.stderr)) {
+      if (platform !== "win32" && /EACCES|permission denied/i.test(res.stderr)) {
         return {
           ok: false,
           fallbackCommand: INSTALL_COMMAND_SUDO,
@@ -6538,6 +6545,16 @@ function registerImageRoutes(app, deps) {
 
 // src/release/notes.data.ts
 var RELEASES = [
+  {
+    version: "0.3.5",
+    date: "2026-08-21",
+    sections: [
+      {
+        heading: "Fixes",
+        body: "Setting up the Codex engine on Windows no longer reports a successful install as missing, and updates can now find npm there. When npm truly is unreachable, the update command points to the one-line recovery instead of a dead end."
+      }
+    ]
+  },
   {
     version: "0.3.4",
     date: "2026-08-21",
@@ -6895,7 +6912,7 @@ function registerSystemRoutes(app, deps) {
     }
     core.close();
     for (const name of ["scenri.db", "scenri.db-wal", "scenri.db-shm", "images", "backups"]) {
-      rmSync(join(core.home, name), { recursive: true, force: true });
+      rmSync(join(core.home, name), { recursive: true, force: true, maxRetries: 5, retryDelay: 100 });
     }
     return { ok: true, scope };
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "scenri",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "author": "Tony Gorb <hello@scenri.co>",
   "license": "AGPL-3.0-only",
   "type": "module",