${esc(n.created.slice(0, 16))}
@@ -618,4 +628,61 @@ document.getElementById("signout")?.addEventListener("click", async () => {
location.href = "/login";
});
+// ── version + one-tap update (OTM self-update) ───────────────────
+const foot = $("#foot");
+const said = (m) => { const s = $("#up-said"); if (s) s.textContent = m ? " · " + m : ""; };
+const get = (path) => fetch(path).then((r) => r.json()).catch(() => ({}));
+const newerThan = (a, b) => { // "0.4.1" is newer than "0.4.0"
+ const p = (v) => [0, 1, 2].map((i) => Number(String(v || "").split(".")[i]) || 0);
+ const [x, y] = [p(a), p(b)];
+ for (let i = 0; i < 3; i++) if (x[i] !== y[i]) return x[i] > y[i];
+ return false;
+};
+// the container restarts mid-update, so tolerate failures and watch for the version to flip
+async function awaitUpdate(from) {
+ for (let i = 0; i < 130; i++) {
+ await new Promise((r) => setTimeout(r, 3000));
+ const v = (await get("/api/health")).version;
+ if (v && v !== from) return location.reload();
+ }
+ said("still building — check back in a few minutes");
+}
+async function versionLine() {
+ if (!foot) return;
+ const running = (await get("/api/health")).version || "";
+ if (!running) return; // unknown version → no chip (never a false "update!")
+ // the update check costs OTM a Gitea round-trip — cache it for 10 minutes
+ let s;
+ try { s = JSON.parse(sessionStorage.getItem("bms-update") || "null"); } catch { s = null; }
+ if (!s || Date.now() - s._at > 600e3 || s.status?.state === "running") {
+ s = await get("/api/account/self-update"); // 503 when self-update isn't wired — just no chip
+ s._at = Date.now();
+ try { sessionStorage.setItem("bms-update", JSON.stringify(s)); } catch { /* private mode */ }
+ }
+ const updating = s.status?.state === "running";
+ foot.innerHTML = `🌙 Studio Notebook${running ? " v" + esc(running) : ""} · bms.poweredbyotm.com`
+ + (!updating && newerThan(s.latest, running) ? `
✨ update to v${esc(s.latest)}` : "")
+ + `
${updating ? " · updating the studio… ✨" : ""}`;
+ $("#up-go")?.addEventListener("click", async () => {
+ $("#up-go").remove();
+ said("starting the update — this takes a few minutes ✨");
+ const r = await fetch("/api/account/self-update", { method: "POST" }).then((x) => x.json()).catch(() => ({}));
+ if (!r.ok) return said(r.message || r.error || "couldn't start the update");
+ awaitUpdate(running);
+ });
+ if (updating) awaitUpdate(running);
+}
+
render();
+versionLine();
+
+// a session opened through OTM "Log in as admin" is visibly marked — the owner
+// (and the operator) should always be able to tell it apart from a real login
+(async () => {
+ const me = await get("/api/me");
+ if (!me.operator) return;
+ const b = document.createElement("div");
+ b.textContent = `🔑 support session — ${me.operator} is signed in as the studio owner`;
+ b.style.cssText = "background:#f3e7f5;color:#6e4f78;text-align:center;padding:6px 10px;font-size:13px;";
+ document.body.prepend(b);
+})();
diff --git a/app/public/index.html b/app/public/index.html
index 67b2991..6e73566 100644
--- a/app/public/index.html
+++ b/app/public/index.html
@@ -84,6 +84,7 @@
.matrow input:first-child { flex: 1; }
.matrow input:last-of-type { width: 80px; }
footer { text-align: center; color: #b1a0ae; font-size: 13px; margin-top: 32px; font-style: italic; font-family: Georgia, serif; }
+ footer .chip { font-family: "Avenir Next", "Nunito", sans-serif; font-style: normal; margin-left: 8px; }
@@ -106,7 +107,7 @@
welcome back
-
+