scenri 0.4.4 → 0.4.5

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## [0.4.5](https://github.com/tonygorb/Scenri/compare/v0.4.4...v0.4.5) (2026-08-23)
+
+
+### Bug Fixes
+
+* check npm every six hours for real, and catch up after sleep ([9efb633](https://github.com/tonygorb/Scenri/commit/9efb6338b8a3ffbcb0c0a0f167492510f33d8bca))
+* keep the update float off a source checkout ([35d5269](https://github.com/tonygorb/Scenri/commit/35d5269f46d20044921878c2068fdc7495e6c27d))
+* keep the update float off a source checkout ([d2c129e](https://github.com/tonygorb/Scenri/commit/d2c129e4a567ea4220f503118872087f9e2516cc))
+* let an idle tab hear about a ready update within the half hour ([ea0088d](https://github.com/tonygorb/Scenri/commit/ea0088d363d8d709ddb01549717c4fed1aa06aab))
+* say every six hours everywhere the update check is disclosed ([78204c8](https://github.com/tonygorb/Scenri/commit/78204c8cfc26c3a9d856d399808f25396fe6084c))
+
 ## [0.4.4](https://github.com/tonygorb/Scenri/compare/v0.4.3...v0.4.4) (2026-08-23)
 
 

package/README.md

@@ -95,7 +95,7 @@ pnpm dev          # starts the server on 127.0.0.1:4747
 - **Iteration is the product.** A version tree, not a prompt box. Branch, compare, keep the winners.
 - **Your brands are files, not hostages.** `.brand` is an open, documented format under a permissive license. Email one to a client. Any tool can adopt it.
 - **Your AI, your cost.** Bring your own Codex CLI session or an API key. Experiments cost raw API price, or nothing at all on a local session. No credits that burn on a miss.
-- **Local first, and it means it.** No account, no telemetry, no upload. The server binds to your machine only. Scenri makes exactly two requests on its own behalf: a daily version-number check against npm so updates can announce themselves (and, when one is found, the download of that release from npm, staged locally until you choose to restart), and a one-time download of the library imagery archive, cached locally forever after. Nothing about you or your work is ever sent, and both turn off: in Settings or `SCENRI_NO_UPDATE_CHECK=1` for the first, `SCENRI_NO_CONTENT_FETCH=1` for the second ([how updates work](https://github.com/tonygorb/scenri/blob/main/docs/updates.md)).
+- **Local first, and it means it.** No account, no telemetry, no upload. The server binds to your machine only. Scenri makes exactly two requests on its own behalf: a version-number check against npm every six hours so updates can announce themselves (and, when one is found, the download of that release from npm, staged locally until you choose to restart), and a one-time download of the library imagery archive, cached locally forever after. Nothing about you or your work is ever sent, and both turn off: in Settings or `SCENRI_NO_UPDATE_CHECK=1` for the first, `SCENRI_NO_CONTENT_FETCH=1` for the second ([how updates work](https://github.com/tonygorb/scenri/blob/main/docs/updates.md)).
 
 ## Engines
 

package/dist/{chunk-WIIQZN3K.js → chunk-FYQ5BAFA.js}

@@ -4,9 +4,13 @@ import { existsSync, rmSync, mkdirSync, readFileSync, renameSync } from 'fs';
 import { join, dirname } from 'path';
 
 // src/update/check.ts
-var CACHE_MS = 24 * 60 * 60 * 1e3;
+var CHECK_INTERVAL_MS = 6 * 60 * 60 * 1e3;
+var TICK_MS = 15 * 60 * 1e3;
+var JITTER_RATIO = 0.2;
 var FORCE_COOLDOWN_MS = 60 * 1e3;
 var TIMEOUT_MS = 5e3;
+var MIN_INTERVAL_MS = 60 * 60 * 1e3;
+var MIN_TICK_MS = 60 * 1e3;
 function resolveRegistry(env = process.env, override) {
   return (override ?? env.SCENRI_REGISTRY ?? "https://registry.npmjs.org").replace(/\/+$/, "");
 }
@@ -32,6 +36,7 @@ async function fetchDistTagLatest(name, opts = {}) {
     return { latest: null, error: String(err?.message ?? err) };
   }
 }
+var isReleaseTriplet = (v) => /^\d+\.\d+\.\d+$/.test(v);
 function triplet(v) {
   const m = v.match(/^(\d+)\.(\d+)\.(\d+)$/);
   return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null;
@@ -50,7 +55,18 @@ function createUpdateChecker(deps) {
   const env = deps.env ?? process.env;
   const now = deps.now ?? Date.now;
   const log = deps.log ?? console.log;
+  const random = deps.random ?? Math.random;
   const registry = resolveRegistry(env, deps.registry);
+  const onNpm = registry.startsWith("https://registry.npmjs.org");
+  const envMs = (key) => {
+    const n = Number(env[key]);
+    return Number.isFinite(n) && n > 0 ? Math.floor(n) : null;
+  };
+  const rawInterval = envMs("SCENRI_UPDATE_INTERVAL_MS") ?? CHECK_INTERVAL_MS;
+  const intervalMs = onNpm ? Math.max(rawInterval, MIN_INTERVAL_MS) : rawInterval;
+  const rawTick = envMs("SCENRI_UPDATE_TICK_MS") ?? TICK_MS;
+  const tickMs = onNpm ? Math.max(rawTick, MIN_TICK_MS) : rawTick;
+  let jitterMs = random() * JITTER_RATIO * intervalMs;
   const cached = () => {
     const at = deps.store.getSetting("update.checkedAt");
     return {
@@ -72,6 +88,7 @@ function createUpdateChecker(deps) {
     if (res.error) return { ...cached(), error: res.error };
     deps.store.setSetting("update.latest", res.latest ?? "");
     deps.store.setSetting("update.checkedAt", String(now()));
+    jitterMs = random() * JITTER_RATIO * intervalMs;
     const result = cached();
     onResultFn?.(result);
     return result;
@@ -80,7 +97,7 @@ function createUpdateChecker(deps) {
     if (!enabled() && !force) return cached();
     if (inflight) return inflight;
     const prior = cached();
-    const fresh = prior.checkedAt !== null && now() - prior.checkedAt < CACHE_MS;
+    const fresh = prior.checkedAt !== null && now() - prior.checkedAt < intervalMs + jitterMs;
     if (force) {
       if (now() - lastForceAt < FORCE_COOLDOWN_MS) return prior;
       lastForceAt = now();
@@ -94,7 +111,7 @@ function createUpdateChecker(deps) {
   }
   function schedule() {
     setTimeout(() => void check(), 1e4).unref();
-    setInterval(() => void check(), CACHE_MS).unref();
+    setInterval(() => void check(), tickMs).unref();
   }
   return {
     enabled,
@@ -229,6 +246,6 @@ async function stageVersion(deps) {
   return { ok: true, version, entry: entryOf(deps.home, deps.pkg, version) };
 }
 
-export { classify, createUpdateChecker, fetchDistTagLatest, findNpm, stageVersion };
-//# sourceMappingURL=chunk-WIIQZN3K.js.map
-//# sourceMappingURL=chunk-WIIQZN3K.js.map
+export { classify, createUpdateChecker, fetchDistTagLatest, findNpm, isReleaseTriplet, stageVersion };
+//# sourceMappingURL=chunk-FYQ5BAFA.js.map
+//# sourceMappingURL=chunk-FYQ5BAFA.js.map

package/dist/{cli-PBDPZQ4G.js → cli-KSKENGIR.js}

@@ -1,4 +1,4 @@
-import { stageVersion, fetchDistTagLatest, findNpm } from './chunk-WIIQZN3K.js';
+import { stageVersion, fetchDistTagLatest, findNpm } from './chunk-FYQ5BAFA.js';
 import { readMeta } from './chunk-Y3ZPBPLP.js';
 import { defaultHome, newestStaged, compareSemver } from './chunk-4MAFHYAD.js';
 
@@ -63,5 +63,5 @@ async function runUpdateCommand(opts) {
 }
 
 export { runUpdateCommand };
-//# sourceMappingURL=cli-PBDPZQ4G.js.map
-//# sourceMappingURL=cli-PBDPZQ4G.js.map
+//# sourceMappingURL=cli-KSKENGIR.js.map
+//# sourceMappingURL=cli-KSKENGIR.js.map

package/dist/index.js

@@ -70,7 +70,7 @@ try {
       await (await import('./serve.js')).serve();
       break;
     case "update": {
-      const { runUpdateCommand } = await import('./cli-PBDPZQ4G.js');
+      const { runUpdateCommand } = await import('./cli-KSKENGIR.js');
       process.exit(await runUpdateCommand(command));
       break;
     }

package/dist/serve.js

@@ -1,5 +1,5 @@
 import { portBusyLines } from './chunk-WGIZJXNE.js';
-import { createUpdateChecker, classify, findNpm, stageVersion } from './chunk-WIIQZN3K.js';
+import { createUpdateChecker, classify, isReleaseTriplet, findNpm, stageVersion } from './chunk-FYQ5BAFA.js';
 import { readMeta, repoSlug } from './chunk-Y3ZPBPLP.js';
 import { compareSemver, newestStaged } from './chunk-4MAFHYAD.js';
 import { networkInterfaces, homedir, tmpdir } from 'os';
@@ -7022,6 +7022,21 @@ function registerImageRoutes(app, deps) {
 
 // src/release/notes.data.ts
 var RELEASES = [
+  {
+    version: "0.4.5",
+    date: "2026-08-23",
+    title: "New versions find you while Scenri runs.",
+    sections: [
+      {
+        heading: "Updates",
+        body: "A running Scenri now checks for new versions every six hours instead of relying on the next launch, and a laptop that slept through a check catches up within minutes of waking. Open tabs hear about a downloaded update within the half hour, or the moment you return to them."
+      },
+      {
+        heading: "Fixes",
+        body: "Running from a source checkout no longer shows a floating update notice whose button had nothing to do. The checkout keeps its quiet badge and the pull-and-rebuild note in Settings."
+      }
+    ]
+  },
   {
     version: "0.4.4",
     date: "2026-08-23",
@@ -7339,7 +7354,9 @@ function registerUpdateRoutes(app, deps) {
       // (bump-minor-pre-major), so only a real major asks for attention.
       attention: kind === "major",
       checkedAt: r.checkedAt,
-      notesUrl: r.latest && ghSlug ? `https://github.com/${ghSlug}/releases/tag/v${r.latest}` : null,
+      // Only a clean release triple becomes a URL: a stray prerelease on the
+      // latest tag must not leak into link surfaces any more than into staging.
+      notesUrl: r.latest && ghSlug && isReleaseTriplet(r.latest) ? `https://github.com/${ghSlug}/releases/tag/v${r.latest}` : null,
       error: apply.phase === "error" ? apply.error : r.error,
       canApply: blockReason() === null,
       blockReason: blockReason(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "scenri",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "author": "Tony Gorb <hello@scenri.co>",
   "license": "AGPL-3.0-only",
   "type": "module",