Single-exe wizard, test menu, doctor, app icon

[Turetsky]

Summary

Turns mailpress from a hand-edit-the-config-and-run-three-scripts setup into a single mailpress.exe that walks the operator through everything on first run.

New commands

• mailpress — first run = wizard; otherwise polls
• mailpress --setup — re-run the wizard
• mailpress --test — interactive: print test page, print a file you pick (verifies .docx/.xlsx/.pdf), switch printer, blast all printers
• mailpress --doctor — independent health checks (config, token, Gmail API, printer present, scheduled task)
• mailpress --consent — re-mint a refresh token without re-running the wizard
• mailpress --uninstall — remove the scheduled task

Build & distribution

• scripts/build.mjs — Node SEA pipeline (esbuild → SEA blob → postject → resedit for icon + version metadata)
• .github/workflows/release.yml — Windows CI build; uploads artifacts on every push, publishes mailpress.exe to GitHub Releases on v* tags
• assets/icon.{svg,ico} — app icon (envelope on a slant with three speed-lines) embedded into the exe

Robustness work (from a high-effort multi-angle code review of the refactor)

• Corrupt token = fatal auth error, not endless retry loop
• Mid-batch token expiry re-thrown, not 25 notification emails
• Auth-failure exit code preserved at 2 (original semantics)
• PowerShell UTF-8 BOM stripped from Get-Printer JSON
• Print job timeout (default 2min/file) so a hung spooler can't hang the poll loop
• File list passed via | delimiter (illegal in Windows filenames), not ,
• Scheduled Task: Stop-ScheduledTask before Unregister-ScheduledTask; drop the spurious -Argument double-quoting
• Wizard tolerates corrupt config.local.json and rewrites it
• installRoot() heuristic tightened so a SEA exe invoked with a .mjs arg doesn't resolve install root to a foreign dir
• OAuth port picker: real-bind-and-fallback (no TOCTOU probe race)
• openBrowser uses spawn argv (no shell metachar interpretation of the URL)
• ASCII fallback for box-drawing chars on cmd.exe-style consoles
• Wizard verifies token belongs to the configured Gmail account before persisting it; re-auth forced when clientId/Gmail changes

index.mjs and consent.mjs preserved as thin shims so the existing Scheduled Task and any muscle memory keep working.

Test plan

The final smoke test has to happen on the Windows office PC — none of this could be exercised against a real printer or a real OAuth client from a Linux container. Suggested order on the office PC:

• Download mailpress.exe + print-files.ps1 + install-task.ps1 + config.example.json from the workflow's artifacts (or release once tagged)
• Double-click mailpress.exe; walk through the wizard (system check → printer pick → Google OAuth client → consent → test print → scheduled task)
• Open Task Scheduler and confirm the mailpress task is present and running
• mailpress --doctor — confirm all checks green
• mailpress --test → "Print a file I pick" → drop in a .docx, a .pdf, a .xlsx, a .png and confirm each prints
• mailpress --test → "Switch the active printer" → pick another printer → confirm config.local.json updates and Stop/Start the scheduled task
• Send a test email to the office Gmail with an attachment; confirm body + attachment print and the message is marked read
• mailpress --once from a console (with the scheduled task stopped) to verify the standalone path still works

https://claude.ai/code/session_01CfsRS2PZ4t8RUnhPdVEWHF

---

Generated by Claude Code