no changelog entries yet.
';
list.classList.remove('hidden');
return;
}
list.innerHTML = entries.map(e => `
v${e.version}
${e.is_latest ? '← current' : ''}
${fmtDate(e.created_at)} · by ${escHtml(e.uploaded_by)}
${escHtml(e.notes || 'No notes provided.')}
`).join('');
list.classList.remove('hidden');
clLoaded = true;
} catch (e) {
loading.classList.add('hidden');
errEl.textContent = '[ ERR ] ' + e.message;
errEl.classList.remove('hidden');
}
}
function fmtDate(ts) {
if (!ts) return '—';
return new Date(ts * 1000).toISOString().slice(0, 10);
}
function escHtml(s) {
return String(s).replace(/&/g,'&').replace(//g,'>');
}
/* ── AUTH MODAL ─────────────────────────────────────────────── */
const modal = document.getElementById('auth-modal');
function openAuth(mode) {
S.mode = mode || 'login';
setMode(S.mode);
goAStep('1');
modal.classList.remove('hidden');
}
function closeAuth() {
modal.classList.add('hidden');
stopOtpTimer();
clearAuthErrors();
}
function setMode(m) {
const isReg = m === 'register';
document.getElementById('a-mode-label').textContent = isReg ? 'session --register' : 'session --login';
document.getElementById('auth-terminal-title').textContent = `auth@nbt-editor — ${m}`;
document.getElementById('a-username-field').style.display = isReg ? '' : 'none';
document.getElementById('a-switch-btn').textContent = isReg ? 'login instead' : 'register instead';
}
function goAStep(id) {
document.querySelectorAll('.a-step').forEach(s => s.classList.remove('active'));
const map = { '1':'a-step-1', 'reg-qr':'a-step-reg-qr', 'reg-email':'a-step-reg-email', '2':'a-step-2', '3':'a-step-3', 'ok':'a-step-ok' };
document.getElementById(map[id])?.classList.add('active');
}
function clearAuthErrors() {
['a1-err','a2-err','a3-err','are-err'].forEach(id => {
const el = document.getElementById(id);
if (el) { el.textContent = ''; el.classList.add('hidden'); }
});
}
function showAErr(id, msg) {
const el = document.getElementById(id);
if (!el) return;
el.textContent = '[ ERR ] ' + msg;
el.classList.remove('hidden');
}
// Open / close triggers
document.getElementById('auth-btn').addEventListener('click', () => {
if (S.user) { doLogout(); return; }
openAuth('login');
});
document.getElementById('auth-backdrop').addEventListener('click', closeAuth);
document.getElementById('auth-close-dot').addEventListener('click', closeAuth);
// Switch mode
document.getElementById('a-switch-btn').addEventListener('click', () => {
S.mode = S.mode === 'login' ? 'register' : 'login';
setMode(S.mode);
goAStep('1');
clearAuthErrors();
});
/* ── AUTH STEP 1 ────────────────────────────────────────────── */
document.getElementById('a1-btn').addEventListener('click', async () => {
clearAuthErrors();
const email = document.getElementById('a-email').value.trim();
const pass = document.getElementById('a-pass').value;
const btn = document.getElementById('a1-btn');
if (!email || !pass) { showAErr('a1-err', 'email and password required.'); return; }
if (S.mode === 'register') {
const username = document.getElementById('a-username').value.trim();
if (!username) { showAErr('a1-err', 'username required.'); return; }
if (pass.length < 12) { showAErr('a1-err', 'password must be at least 12 characters.'); return; }
btn.disabled = true; btn.textContent = 'registering...';
try {
const data = await POST('/auth/register', { username, email, password: pass });
document.getElementById('qr-img').src = data.totpQr;
goAStep('reg-qr');
} catch (e) { showAErr('a1-err', e.message); }
finally { btn.disabled = false; btn.textContent = 'execute →'; }
} else {
btn.disabled = true; btn.textContent = 'verifying...';
try {
await POST('/auth/login', { email, password: pass });
buildOtpRow('otp-login-boxes');
goAStep('2');
startOtpTimer();
} catch (e) { showAErr('a1-err', e.message); }
finally { btn.disabled = false; btn.textContent = 'execute →'; }
}
});
/* ── REGISTER: QR done ──────────────────────────────────────── */
document.getElementById('a-qr-done-btn').addEventListener('click', () => goAStep('reg-email'));
/* ── REGISTER: Email verify ─────────────────────────────────── */
document.getElementById('a-reg-verify-btn').addEventListener('click', async () => {
const email = document.getElementById('a-email').value.trim();
const code = document.getElementById('a-reg-code').value.trim();
const btn = document.getElementById('a-reg-verify-btn');
if (!code) { showAErr('are-err', 'enter the code from your email.'); return; }
btn.disabled = true; btn.textContent = 'verifying...';
try {
await POST('/auth/verify-email', { email, code });
goAStep('ok');
document.querySelector('#a-step-ok .a-ok-text .a-info').textContent =
'Email verified. Your account is now active. Login to start a session.';
S.user = null;
} catch (e) { showAErr('are-err', e.message); }
finally { btn.disabled = false; btn.textContent = 'verify →'; }
});
/* ── STEP 2: Email OTP ──────────────────────────────────────── */
function buildOtpRow(containerId) {
const wrap = document.getElementById(containerId);
wrap.innerHTML = '';
for (let i = 0; i < 6; i++) {
const b = document.createElement('input');
b.type = 'text'; b.maxLength = 1;
b.className = 'otp-box'; b.inputMode = 'numeric';
b.addEventListener('input', () => {
b.value = b.value.replace(/\D/, '');
if (b.value) b.nextElementSibling?.focus();
});
b.addEventListener('keydown', e => {
if (e.key === 'Backspace' && !b.value) b.previousElementSibling?.focus();
});
wrap.appendChild(b);
}
wrap.firstChild?.focus();
}
function getOtpVal(containerId) {
return [...document.querySelectorAll(`#${containerId} .otp-box`)].map(b => b.value).join('');
}
document.getElementById('a2-btn').addEventListener('click', async () => {
clearAuthErrors();
const code = getOtpVal('otp-login-boxes');
if (code.length < 6) { showAErr('a2-err', 'enter all 6 digits.'); return; }
const btn = document.getElementById('a2-btn');
btn.disabled = true; btn.textContent = 'verifying...';
try {
await POST('/auth/login/verify-email-otp', { code });
stopOtpTimer();
buildOtpRow('totp-login-boxes');
goAStep('3');
} catch (e) { showAErr('a2-err', e.message); }
finally { btn.disabled = false; btn.textContent = 'verify →'; }
});
document.getElementById('a-resend-btn').addEventListener('click', async () => {
stopOtpTimer();
const email = document.getElementById('a-email').value.trim();
const pass = document.getElementById('a-pass').value;
try {
await POST('/auth/login', { email, password: pass });
buildOtpRow('otp-login-boxes');
startOtpTimer();
} catch (e) { showAErr('a2-err', 'resend failed: ' + e.message); }
});
function startOtpTimer() {
S.otpSecs = 600;
updateOtpTimer();
S.otpInterval = setInterval(() => {
S.otpSecs--;
updateOtpTimer();
if (S.otpSecs <= 0) stopOtpTimer();
}, 1000);
}
function stopOtpTimer() { clearInterval(S.otpInterval); S.otpInterval = null; }
function updateOtpTimer() {
const m = String(Math.floor(S.otpSecs / 60)).padStart(2,'0');
const s = String(S.otpSecs % 60).padStart(2,'0');
const el = document.getElementById('a-timer');
if (el) el.textContent = `${m}:${s}`;
}
/* ── STEP 3: TOTP ───────────────────────────────────────────── */
document.getElementById('a3-btn').addEventListener('click', async () => {
clearAuthErrors();
const totpCode = getOtpVal('totp-login-boxes');
if (totpCode.length < 6) { showAErr('a3-err', 'enter all 6 digits from your authenticator.'); return; }
const btn = document.getElementById('a3-btn');
btn.disabled = true; btn.textContent = 'authenticating...';
try {
const data = await POST('/auth/login/verify-totp', { totpCode });
S.user = data.user;
updateSessionUI();
goAStep('ok');
} catch (e) { showAErr('a3-err', e.message); }
finally { btn.disabled = false; btn.textContent = 'authenticate →'; }
});
/* ── AUTH DONE ──────────────────────────────────────────────── */
document.getElementById('a-ok-btn').addEventListener('click', () => {
closeAuth();
if (!S.user) {
// Registration — switch to login flow
openAuth('login');
return;
}
const t = S.postTarget; S.postTarget = null;
if (t) showPage(t);
// Refresh release buttons to show "↓ download"
relLoaded = false; clLoaded = false;
if (document.getElementById('page-releases').classList.contains('active')) loadReleases();
});
/* ── SESSION UI ─────────────────────────────────────────────── */
function updateSessionUI() {
if (!S.user) return;
const ind = document.getElementById('session-indicator');
ind.className = 'session-on';
ind.innerHTML = `