scenri 0.4.3 → 0.4.5

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # Changelog
 
+## [0.4.5](https://github.com/tonygorb/Scenri/compare/v0.4.4...v0.4.5) (2026-08-23)
+
+
+### Bug Fixes
+
+* check npm every six hours for real, and catch up after sleep ([9efb633](https://github.com/tonygorb/Scenri/commit/9efb6338b8a3ffbcb0c0a0f167492510f33d8bca))
+* keep the update float off a source checkout ([35d5269](https://github.com/tonygorb/Scenri/commit/35d5269f46d20044921878c2068fdc7495e6c27d))
+* keep the update float off a source checkout ([d2c129e](https://github.com/tonygorb/Scenri/commit/d2c129e4a567ea4220f503118872087f9e2516cc))
+* let an idle tab hear about a ready update within the half hour ([ea0088d](https://github.com/tonygorb/Scenri/commit/ea0088d363d8d709ddb01549717c4fed1aa06aab))
+* say every six hours everywhere the update check is disclosed ([78204c8](https://github.com/tonygorb/Scenri/commit/78204c8cfc26c3a9d856d399808f25396fe6084c))
+
+## [0.4.4](https://github.com/tonygorb/Scenri/compare/v0.4.3...v0.4.4) (2026-08-23)
+
+
+### Bug Fixes
+
+* cache the codex probe behind one shared runner and kill the whole tree on windows ([7c21235](https://github.com/tonygorb/Scenri/commit/7c212351231e4badcd49b8636f765dcb2ae0d73e))
+* classify codex auth and verification failures where the user can act on them ([83c6512](https://github.com/tonygorb/Scenri/commit/83c651224095664cf439bf9ee0ea483d307bbd0d))
+* harden the codex probe with timeouts, exe resolution and a version floor ([7c57808](https://github.com/tonygorb/Scenri/commit/7c578083b9dc665ea983cded464c0506db44ad3b))
+* honest codex states and platform-aware setup copy in studio ([672195e](https://github.com/tonygorb/Scenri/commit/672195e373ea07940a8d661ed397ecd7d7e540e3))
+* kill the whole install and login tree when a setup step times out on windows ([fa755a2](https://github.com/tonygorb/Scenri/commit/fa755a207b0cb81d53714d948867fce049a99171))
+* leave the codex program token unquoted so npm cmd shims keep their own path ([72cd69d](https://github.com/tonygorb/Scenri/commit/72cd69dc3bbba1d8312d13c3be0379ecbde25d94))
+* let taskkill own the windows kill so the process tree really dies ([340821a](https://github.com/tonygorb/Scenri/commit/340821a35d6db397ae5728047bbc5abf91a93e35))
+* make Codex on Windows honest about readiness and unable to hang ([d698d5f](https://github.com/tonygorb/Scenri/commit/d698d5f526d9365e64e170819a61803ff0162f3e))
+* recover codex images the windows sandbox could not move into the workdir ([4ce1d51](https://github.com/tonygorb/Scenri/commit/4ce1d51352d13f3afb83f190a9cb78bbc7427a0a))
+* send codex prompts over stdin and watchdog silent or runaway generations ([35a7c1b](https://github.com/tonygorb/Scenri/commit/35a7c1bad5c9eea65df338f719ecd2f66065289f))
+* set the codex version floor at the newest release verified working ([531a255](https://github.com/tonygorb/Scenri/commit/531a255b2a2e93a97b8620efa88a727cba06e43b))
+
 ## [0.4.3](https://github.com/tonygorb/Scenri/compare/v0.4.2...v0.4.3) (2026-08-23)
 
 

package/README.md

@@ -95,7 +95,7 @@ pnpm dev          # starts the server on 127.0.0.1:4747
 - **Iteration is the product.** A version tree, not a prompt box. Branch, compare, keep the winners.
 - **Your brands are files, not hostages.** `.brand` is an open, documented format under a permissive license. Email one to a client. Any tool can adopt it.
 - **Your AI, your cost.** Bring your own Codex CLI session or an API key. Experiments cost raw API price, or nothing at all on a local session. No credits that burn on a miss.
-- **Local first, and it means it.** No account, no telemetry, no upload. The server binds to your machine only. Scenri makes exactly two requests on its own behalf: a daily version-number check against npm so updates can announce themselves (and, when one is found, the download of that release from npm, staged locally until you choose to restart), and a one-time download of the library imagery archive, cached locally forever after. Nothing about you or your work is ever sent, and both turn off: in Settings or `SCENRI_NO_UPDATE_CHECK=1` for the first, `SCENRI_NO_CONTENT_FETCH=1` for the second ([how updates work](https://github.com/tonygorb/scenri/blob/main/docs/updates.md)).
+- **Local first, and it means it.** No account, no telemetry, no upload. The server binds to your machine only. Scenri makes exactly two requests on its own behalf: a version-number check against npm every six hours so updates can announce themselves (and, when one is found, the download of that release from npm, staged locally until you choose to restart), and a one-time download of the library imagery archive, cached locally forever after. Nothing about you or your work is ever sent, and both turn off: in Settings or `SCENRI_NO_UPDATE_CHECK=1` for the first, `SCENRI_NO_CONTENT_FETCH=1` for the second ([how updates work](https://github.com/tonygorb/scenri/blob/main/docs/updates.md)).
 
 ## Engines
 

package/dist/{chunk-WIIQZN3K.js → chunk-FYQ5BAFA.js}

@@ -4,9 +4,13 @@ import { existsSync, rmSync, mkdirSync, readFileSync, renameSync } from 'fs';
 import { join, dirname } from 'path';
 
 // src/update/check.ts
-var CACHE_MS = 24 * 60 * 60 * 1e3;
+var CHECK_INTERVAL_MS = 6 * 60 * 60 * 1e3;
+var TICK_MS = 15 * 60 * 1e3;
+var JITTER_RATIO = 0.2;
 var FORCE_COOLDOWN_MS = 60 * 1e3;
 var TIMEOUT_MS = 5e3;
+var MIN_INTERVAL_MS = 60 * 60 * 1e3;
+var MIN_TICK_MS = 60 * 1e3;
 function resolveRegistry(env = process.env, override) {
   return (override ?? env.SCENRI_REGISTRY ?? "https://registry.npmjs.org").replace(/\/+$/, "");
 }
@@ -32,6 +36,7 @@ async function fetchDistTagLatest(name, opts = {}) {
     return { latest: null, error: String(err?.message ?? err) };
   }
 }
+var isReleaseTriplet = (v) => /^\d+\.\d+\.\d+$/.test(v);
 function triplet(v) {
   const m = v.match(/^(\d+)\.(\d+)\.(\d+)$/);
   return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null;
@@ -50,7 +55,18 @@ function createUpdateChecker(deps) {
   const env = deps.env ?? process.env;
   const now = deps.now ?? Date.now;
   const log = deps.log ?? console.log;
+  const random = deps.random ?? Math.random;
   const registry = resolveRegistry(env, deps.registry);
+  const onNpm = registry.startsWith("https://registry.npmjs.org");
+  const envMs = (key) => {
+    const n = Number(env[key]);
+    return Number.isFinite(n) && n > 0 ? Math.floor(n) : null;
+  };
+  const rawInterval = envMs("SCENRI_UPDATE_INTERVAL_MS") ?? CHECK_INTERVAL_MS;
+  const intervalMs = onNpm ? Math.max(rawInterval, MIN_INTERVAL_MS) : rawInterval;
+  const rawTick = envMs("SCENRI_UPDATE_TICK_MS") ?? TICK_MS;
+  const tickMs = onNpm ? Math.max(rawTick, MIN_TICK_MS) : rawTick;
+  let jitterMs = random() * JITTER_RATIO * intervalMs;
   const cached = () => {
     const at = deps.store.getSetting("update.checkedAt");
     return {
@@ -72,6 +88,7 @@ function createUpdateChecker(deps) {
     if (res.error) return { ...cached(), error: res.error };
     deps.store.setSetting("update.latest", res.latest ?? "");
     deps.store.setSetting("update.checkedAt", String(now()));
+    jitterMs = random() * JITTER_RATIO * intervalMs;
     const result = cached();
     onResultFn?.(result);
     return result;
@@ -80,7 +97,7 @@ function createUpdateChecker(deps) {
     if (!enabled() && !force) return cached();
     if (inflight) return inflight;
     const prior = cached();
-    const fresh = prior.checkedAt !== null && now() - prior.checkedAt < CACHE_MS;
+    const fresh = prior.checkedAt !== null && now() - prior.checkedAt < intervalMs + jitterMs;
     if (force) {
       if (now() - lastForceAt < FORCE_COOLDOWN_MS) return prior;
       lastForceAt = now();
@@ -94,7 +111,7 @@ function createUpdateChecker(deps) {
   }
   function schedule() {
     setTimeout(() => void check(), 1e4).unref();
-    setInterval(() => void check(), CACHE_MS).unref();
+    setInterval(() => void check(), tickMs).unref();
   }
   return {
     enabled,
@@ -229,6 +246,6 @@ async function stageVersion(deps) {
   return { ok: true, version, entry: entryOf(deps.home, deps.pkg, version) };
 }
 
-export { classify, createUpdateChecker, fetchDistTagLatest, findNpm, stageVersion };
-//# sourceMappingURL=chunk-WIIQZN3K.js.map
-//# sourceMappingURL=chunk-WIIQZN3K.js.map
+export { classify, createUpdateChecker, fetchDistTagLatest, findNpm, isReleaseTriplet, stageVersion };
+//# sourceMappingURL=chunk-FYQ5BAFA.js.map
+//# sourceMappingURL=chunk-FYQ5BAFA.js.map

package/dist/{cli-PBDPZQ4G.js → cli-KSKENGIR.js}

@@ -1,4 +1,4 @@
-import { stageVersion, fetchDistTagLatest, findNpm } from './chunk-WIIQZN3K.js';
+import { stageVersion, fetchDistTagLatest, findNpm } from './chunk-FYQ5BAFA.js';
 import { readMeta } from './chunk-Y3ZPBPLP.js';
 import { defaultHome, newestStaged, compareSemver } from './chunk-4MAFHYAD.js';
 
@@ -63,5 +63,5 @@ async function runUpdateCommand(opts) {
 }
 
 export { runUpdateCommand };
-//# sourceMappingURL=cli-PBDPZQ4G.js.map
-//# sourceMappingURL=cli-PBDPZQ4G.js.map
+//# sourceMappingURL=cli-KSKENGIR.js.map
+//# sourceMappingURL=cli-KSKENGIR.js.map

package/dist/index.js

@@ -70,7 +70,7 @@ try {
       await (await import('./serve.js')).serve();
       break;
     case "update": {
-      const { runUpdateCommand } = await import('./cli-PBDPZQ4G.js');
+      const { runUpdateCommand } = await import('./cli-KSKENGIR.js');
       process.exit(await runUpdateCommand(command));
       break;
     }