artifacty 0.13.1 → 0.15.0

package/docs/upgrade-backups.md

@@ -1,9 +1,70 @@
 # Upgrade Snapshots and Recovery
 
+English | [한국어](ko/upgrade-backups.md)
+
 Artifacty creates a local snapshot before it migrates an existing store to a newer schema. This snapshot is mandatory. If snapshot creation or verification fails, Artifacty stops before migration.
 
 Use upgrade snapshots to recover the original store state. Use `artifacty backup` and `artifacty export` for portable JSON backups and store transfers. These are separate backup systems. `artifacty restore <id>` restores an archived artifact; it does not restore a store snapshot.
 
+## Application Self-Update
+
+The application updater and schema migration snapshots serve different purposes. `artifacty update` without an artifact ID updates the application. `artifacty upgrade` is an alias. `artifacty update <id>` continues to update an artifact.
+
+### Check and select a release
+
+```bash
+artifacty update --check
+artifacty upgrade --check --target-version <version> --home /path/to/store
+```
+
+`--check` reports the release without changing the installation, service, or store. It works on other CLI platforms too and reports whether automatic installation is supported. It still needs network access to check the release. For the managed service, the updater compares the package version used by that service, not just the invoking CLI version. `--target-version` accepts an exact version. Without that option, the updater selects the latest release. `--home` selects the store to protect. Automatic downgrades are not supported. An explicitly selected older version is rejected; an older `latest` release leaves the newer installation unchanged.
+
+For installed versions before 0.14.0, bootstrap the updater with:
+
+```bash
+npx --yes artifacty@latest update --home /path/to/store && export PATH="$HOME/.local/bin:$PATH"
+```
+
+The command uses POSIX Linux shell syntax. After a successful update, it puts `~/.local/bin` first on `PATH` for the current session. For future sessions, add that directory to your shell's `PATH`.
+
+The `latest` tag must resolve to version 0.14.0 or newer to include the updater.
+
+### Update from the browser
+
+Sign in with an administrator browser session. Open **Administration → Server update** (`/admin/update`). API tokens do not replace that session for these routes.
+
+1. Select **Check for updates**. This checks the latest npm release without installing or restarting the service.
+2. If browser updates are supported and a newer version is available, review the displayed target version.
+3. Select the confirmation checkbox for backup and restart.
+4. Select **Back up and update**.
+5. Keep the page open while the server restarts. Read the update result after reconnection.
+
+Confirmation expires after ten minutes and belongs to the browser session that checked the version. If it expires or the installed version changes, check again. Form submissions require the exact same origin as the server. No password re-entry is required.
+
+Browser installation requires this server to be the non-root Linux systemd user service. Other installations can check the latest release, but cannot start the update from this page. The worker runs in an independent systemd transient service, so stopping the Artifacty server does not stop the update worker. Status is stored outside the artifact store under `~/.local/share/artifacty/update-jobs`.
+
+Opening the page or reading status does not contact npm or install a package. Status checks can inspect systemd to identify a stopped worker. If dispatch is uncertain, the job remains reserved. An interrupted worker or incomplete recovery requires manual inspection before another update; it is not reported as success. Keep the retained snapshot and releases until recovery is verified.
+
+### Automatic installation limits
+
+Automatic installation and restart support Linux with the systemd user service `com.artifacty.server`. Run the updater as the service's user. The unit must use the simple `ExecStart` form produced by Artifacty's installer and must explicitly pass `--home` for the selected store. Unsupported command expansion or quoting stops the update before service shutdown. Automatic updates reject root execution. Do not run the updater as root to replace a root-owned global package.
+
+The updater stages packages under `~/.local/share/artifacty/releases`. It changes the managed service's executable through a systemd drop-in and preserves its existing arguments and environment. User-owned launchers go under `~/.local/bin`. If that directory is not on `PATH`, add it before using those launchers. Existing unmanaged files in that directory are not overwritten. The existing root-owned global package remains unchanged. If `PATH` selects another command first, the result supplies an absolute `nextCommand`. The updater does not edit shell configuration.
+
+Automatic switching does not support macOS, Windows, foreground servers, detached background servers, or arbitrary service units. Use the manual installation and snapshot procedures for those environments.
+
+### Store protection and rollback
+
+Before updating, stop other HTTP servers and local MCP clients that use the same store. The updater manages the supported systemd service itself. It cannot identify every other process with an open store. The service is unavailable during the update. A store rollback discards writes made after the snapshot; do not keep other writers active during this procedure.
+
+For an active service, the updater checks current health before shutdown. If its bind address or IP policy prevents that check, it refuses the update before downtime. Unsupported service configurations also fail before shutdown.
+
+The updater installs and verifies the exact target package in its staging directory. It then stops the managed service and creates and verifies a snapshot before switching code. If the service was active, it restarts the service and checks its health and PID. An inactive service remains inactive. It preserves the previous code and service configuration for rollback. If switching or startup fails, it attempts to restore the changed code, service configuration, and store, then restart the previous service. If service stop fails, it does not restore a store while the service may still be writing to it. A restored store includes the snapshot's credentials and security state. Review any recovery error before allowing clients to reconnect.
+
+An abrupt process or host termination during the switch can leave `update.lock` or a stopped service. The next update reports the lock instead of retrying blindly. Preserve snapshots, staged releases, and recovery files. Inspect the service and recovery state before a manual retry. Automatic rollback handles caught failures; it does not guarantee recovery from power loss or forced process termination.
+
+Keep the snapshot and the update result until the restarted service works. If automatic rollback cannot finish, the updater reports an explicit error and preserves the `backupId`. Use that snapshot with the recovery procedures below. Do not delete recovery files or force an older build to open an unsupported schema.
+
 ## When Artifacty Creates a Snapshot
 
 - **Schema migration:** Artifacty always snapshots an existing store before migration. This includes a legacy `index.json` store. A new empty store needs no snapshot.

package/docs/writing-style.md

@@ -1,5 +1,7 @@
 # Documentation writing style
 
+English | [한국어](ko/writing-style.md)
+
 Artifacty uses an ASD-STE100-inspired style for English documentation. Korean documentation follows the same clarity principles with natural Korean phrasing. This is an editorial guide, not a claim of compliance with ASD-STE100.
 
 Apply the sentence and procedure rules consistently. Use technical vocabulary where it makes the meaning more precise. Keep introductions natural. The project's “75%” target describes this balance; it is not a compliance score.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "artifacty",
-  "version": "0.13.1",
+  "version": "0.15.0",
   "description": "Local artifact exchange for heterogeneous LLM agents via HTTP and MCP.",
   "type": "module",
   "keywords": [
@@ -53,7 +53,12 @@
     "SECURITY.md",
     "THIRD_PARTY_NOTICES.md",
     "AGENTS.md",
-    "CLAUDE.md"
+    "CLAUDE.md",
+    "README.ko.md",
+    "SECURITY.ko.md",
+    "docs/README.md",
+    "docs/ko",
+    "docs/claude-artifact-formats.md"
   ],
   "engines": {
     "node": ">=22.12"

package/src/cli.js

@@ -33,6 +33,25 @@ async function main() {
     return;
   }
 
+  // Application updates must not initialize or migrate the live store first.
+  // Keep `update <id>` as the existing artifact-content command.
+  if ((command === "update" && options._.length === 0) || command === "upgrade") {
+    const allowed = new Set(["_", "home", "targetVersion", "check"]);
+    const unknown = Object.keys(options).filter((key) => !allowed.has(key));
+    if (options._.length || unknown.length) {
+      throw new Error("Usage: artifacty update [--check] [--target-version <version>] [--home <path>]. To update content, use artifacty update <id> --file <path>.");
+    }
+    const { updateApplication } = await import("./lib/self-update.js");
+    printJson(await updateApplication({
+      packageRoot: PACKAGE_ROOT,
+      home: options.home,
+      targetVersion: options.targetVersion,
+      check: Boolean(options.check),
+      onProgress: (message) => process.stderr.write(`artifacty update: ${message}\n`)
+    }));
+    return;
+  }
+
   // Recovery must work before loading storage or triggering a schema migration.
   if (command === "backups") {
     const { listUpgradeBackups, verifyUpgradeBackup, restoreUpgradeBackup } = await import("./lib/upgrade-backup.js");
@@ -898,7 +917,7 @@ function parseArgs(args) {
     }
 
     const key = arg.slice(2);
-    if (key === "raw" || key === "dry-run" || key === "trust" || key === "include-archived" || key === "allow-secrets" || key === "generate-token" || key === "detach" || key === "foreground" || key === "force" || key === "skip-mcp" || key === "mcp-http" || key === "no-password-reset" || key === "relations" || key === "structured" || key === "json" || key === "once" || key === "full" || key === "force-users" || key === "allow-purge" || key === "shared" || key === "embeddings") {
+    if (key === "check" || key === "raw" || key === "dry-run" || key === "trust" || key === "include-archived" || key === "allow-secrets" || key === "generate-token" || key === "detach" || key === "foreground" || key === "force" || key === "skip-mcp" || key === "mcp-http" || key === "no-password-reset" || key === "relations" || key === "structured" || key === "json" || key === "once" || key === "full" || key === "force-users" || key === "allow-purge" || key === "shared" || key === "embeddings") {
       options[toCamelCase(key)] = true;
       continue;
     }
@@ -991,6 +1010,8 @@ Usage:
   artifacty import --agent claude|codex|gemini|copilot|cursor|auto (--file <path> | --content <text>) [--title <title>] [--format html|markdown|text|json|code|svg|mermaid|react|notebook] [--tag tag]
   artifacty install claude|codex|gemini|copilot|cursor|all [--dry-run] [--config <path>] [--server-path <path>] [--url http://127.0.0.1:8787] [--mcp-url http://127.0.0.1:8787/mcp] [--api-token token] [--transport local|bridge] [--timeout 30000]
   artifacty check [--server-path <path>] [--timeout 5000]
+  artifacty update [--check] [--target-version <version>] [--home <path>]
+  artifacty upgrade [--check] [--target-version <version>] [--home <path>]
   artifacty update <id> (--file <path> | --content <text>) [--title <title>] [--format html|markdown|text|json|code|svg|mermaid|react|notebook] [--expected-version N] [--visibility private|team]
   artifacty samples install|remove
   artifacty archive <id>

package/src/client/editor.js

@@ -331,28 +331,83 @@ function invalidJsonMessage(error) {
   return messages.invalidJson.replaceAll("{message}", error.message);
 }
 
+// Deliberately renders a small, escaped Markdown subset. Links and raw HTML
+// remain text; previewing a document must not activate its URLs or scripts.
 function markdownPreview(content) {
-  return String(content || "")
-    .split(/\r?\n/)
-    .map((line) => {
-      if (/^###\s+/.test(line)) {
-        return `<h3>${escapeHtml(line.replace(/^###\s+/, ""))}</h3>`;
-      }
-      if (/^##\s+/.test(line)) {
-        return `<h2>${escapeHtml(line.replace(/^##\s+/, ""))}</h2>`;
-      }
-      if (/^#\s+/.test(line)) {
-        return `<h1>${escapeHtml(line.replace(/^#\s+/, ""))}</h1>`;
-      }
-      if (/^[-*]\s+/.test(line)) {
-        return `<p>• ${escapeHtml(line.replace(/^[-*]\s+/, ""))}</p>`;
-      }
-      if (!line.trim()) {
-        return "<br>";
+  const lines = String(content || "").split(/\r?\n/);
+  const output = [];
+  let paragraph = [];
+  let list = "";
+  const inline = (value) => escapeHtml(value).replace(/`([^`]+)`/g, "<code>$1</code>");
+  const flush = () => {
+    if (paragraph.length) {
+      output.push(`<p>${inline(paragraph.join(" "))}</p>`);
+      paragraph = [];
+    }
+    if (list) {
+      output.push(`</${list}>`);
+      list = "";
+    }
+  };
+  const cells = (line) => line.trim().replace(/^\|/, "").replace(/\|$/, "").split("|").map((cell) => cell.trim());
+  const tableRow = (line = "") => /^\s*\|.*\|\s*$/.test(line);
+
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index];
+    const fence = /^ {0,3}(`{3,}|~{3,})(.*)$/.exec(line);
+    if (fence) {
+      flush();
+      const language = /^[a-zA-Z0-9+#_.-]+$/.test(fence[2].trim()) ? fence[2].trim().toLowerCase() : "";
+      const source = [];
+      const closing = new RegExp(`^ {0,3}${fence[1][0]}{${fence[1].length},}\\s*$`);
+      while (++index < lines.length && !closing.test(lines[index])) source.push(lines[index]);
+      output.push(`<pre><code${language ? ` class="language-${language}"` : ""}>${escapeHtml(source.join("\n"))}</code></pre>`);
+      continue;
+    }
+    if (!line.trim()) {
+      flush();
+      continue;
+    }
+    const headers = cells(line);
+    const separators = cells(lines[index + 1] || "");
+    if (tableRow(line) && headers.length === separators.length && separators.every((cell) => /^:?-{3,}:?$/.test(cell))) {
+      flush();
+      const alignment = (column) => {
+        const value = separators[column];
+        return value.endsWith(":") ? (value.startsWith(":") ? "center" : "right") : "left";
+      };
+      const row = (values, tag) => `<tr>${headers.map((_, column) => `<${tag} style="text-align:${alignment(column)}">${inline(values[column] || "")}</${tag}>`).join("")}</tr>`;
+      output.push(`<div class="artifact-table-scroll"><table class="artifact-table"><thead>${row(headers, "th")}</thead><tbody>`);
+      index += 1;
+      while (tableRow(lines[index + 1])) output.push(row(cells(lines[++index]), "td"));
+      output.push("</tbody></table></div>");
+      continue;
+    }
+    const heading = /^(#{1,6})\s+(.+)$/.exec(line);
+    if (heading) {
+      flush();
+      output.push(`<h${heading[1].length}>${inline(heading[2])}</h${heading[1].length}>`);
+      continue;
+    }
+    const item = /^([-*+] |\d+[.)] )\s*(.+)$/.exec(line);
+    if (item) {
+      const type = /^\d/.test(item[1]) ? "ol" : "ul";
+      if (paragraph.length || (list && list !== type)) flush();
+      if (!list) {
+        output.push(`<${type}>`);
+        list = type;
       }
-      return `<p>${escapeHtml(line)}</p>`;
-    })
-    .join("");
+      const task = /^\[([ xX])\]\s+(.+)$/.exec(item[2]);
+      output.push(task
+        ? `<li class="task-list-item"><label><input type="checkbox" disabled${task[1].toLowerCase() === "x" ? " checked" : ""}> ${inline(task[2])}</label></li>`
+        : `<li>${inline(item[2])}</li>`);
+      continue;
+    }
+    if (list) flush();
+    paragraph.push(line.trim());
+  }
+  flush();
+  return output.join("\n");
 }
 
 function escapeHtml(value) {

package/src/client/update.js

@@ -0,0 +1,33 @@
+const panel = document.querySelector("[data-update-status]");
+
+if (panel?.dataset.active === "true") {
+  const messages = JSON.parse(panel.dataset.messages);
+  const stateLabel = panel.querySelector("[data-update-state]");
+  const errorLabel = panel.querySelector("[data-update-error]");
+  const versionLabel = document.querySelector("[data-update-version]");
+
+  async function refreshStatus() {
+    let retry = true;
+    try {
+      const response = await fetch("/admin/update/status", { credentials: "same-origin", cache: "no-store", headers: { Accept: "application/json" } });
+      if ([401, 403].includes(response.status)) {
+        stateLabel.textContent = messages.signIn;
+        panel.querySelector("[data-update-login]").hidden = false;
+        return;
+      }
+      if (!response.ok) throw new Error("Status unavailable");
+      const status = await response.json();
+      if (status.currentVersion) versionLabel.textContent = status.currentVersion;
+      if (status.run) {
+        stateLabel.textContent = messages[status.run.state] || messages.running;
+        errorLabel.textContent = status.run.error || "";
+        retry = ["queued", "running"].includes(status.run.state);
+      }
+    } catch {
+      stateLabel.textContent = messages.reconnect;
+    }
+    if (retry) window.setTimeout(refreshStatus, 3000);
+  }
+
+  window.setTimeout(refreshStatus, 1500);
+}

package/src/lib/background.js

@@ -352,7 +352,9 @@ function isPidRunning(pid) {
 async function fetchHealth(url) {
   try {
     const response = await fetch(`${url}/health`, {
-      signal: AbortSignal.timeout(500)
+      // Match the updater health deadline so brief CPU or I/O contention
+      // does not report a live background server as stopped.
+      signal: AbortSignal.timeout(2000)
     });
     return { ok: response.ok, status: response.status };
   } catch {

package/src/lib/i18n.js

@@ -3,6 +3,59 @@ export const SUPPORTED_LOCALES = ["en", "ko"];
 
 const TRANSLATIONS = {
   en: {
+    "update.releaseNotes": "Release notes",
+    "update.checkFailed": "Could not check the latest version. Try checking again.",
+    "update.checkAgain": "Check again to prepare a new update confirmation.",
+    "update.available": "An update is available. Update to v{version}?",
+    "update.signIn": "Your session has expired or access was denied. Sign in again or refresh this page.",
+    "update.title": "Server update",
+    "update.installed": "Installed version",
+    "update.latest": "Available version",
+    "update.check": "Check for updates",
+    "update.help": "Updates from this page require an Artifacty Linux systemd user service. Check for updates to verify this installation.",
+    "update.backup": "The updater creates a backup before installing the selected version. The server briefly stops and restarts. Keep this page open to reconnect.",
+    "update.manual": "For other installations, use the update instructions for your installation method.",
+    "update.unsupported": "This installation cannot update from the browser.",
+    "update.current": "This installation is up to date.",
+    "update.confirm": "I agree to back up the store and restart the server to install this version.",
+    "update.start": "Back up and update",
+    "update.progress": "Update status",
+    "update.refresh": "Refresh status",
+    "update.reconnect": "The server is restarting or unavailable. Reconnecting…",
+    "update.queued": "Waiting to start",
+    "update.running": "Update in progress",
+    "update.succeeded": "Update complete. Refresh this page to use the new version.",
+    "update.failed": "Update failed. Review the error before retrying.",
+    "update.interrupted": "The previous update was interrupted. Check the server before retrying.",
+    "update.expires": "Confirmation expires",
+
+    "artifact.details": "Details",
+    "nav.skip": "Skip to content",
+    "nav.artifacts": "Artifacts",
+    "nav.administration": "Administration",
+    "nav.users": "Users",
+    "nav.backup": "Backup",
+    "nav.webhooks": "Webhooks",
+    "nav.account": "Account",
+    "nav.accountTokens": "Account & API tokens",
+    "nav.password": "Password",
+    "nav.signIn": "Sign in",
+    "nav.signOut": "Sign out",
+    "nav.apiDocs": "API docs",
+    "nav.versions": "Versions",
+
+    "dashboard.navigation": "Dashboard navigation",
+    "dashboard.more": "Menu",
+    "dashboard.searchPlaceholder": "Search artifacts",
+    "dashboard.advanced": "Advanced filters",
+    "dashboard.activeFilters": "{count} active",
+    "filter.artifactType": "Artifact type",
+    "filter.reviewStatus": "Review status",
+    "filter.mode": "Search mode",
+    "filter.groupBy": "Group by",
+    "filter.relatedTo": "Related artifact ID",
+    "filter.relation": "Relation",
+
     "sharing.staticPreview": "Static preview; scripts and external resources are disabled.",
     "sharing.safeSource": "Source preview: active content is disabled for public share links.",
     "sharing.networkCondition": "All permissions also require an allowed connection IP",
@@ -278,6 +331,59 @@ const TRANSLATIONS = {
     "views.namePlaceholder": "View name"
   },
   ko: {
+    "update.releaseNotes": "변경 내용 보기",
+    "update.checkFailed": "최신 버전을 확인하지 못했습니다. 다시 확인해 주세요.",
+    "update.checkAgain": "업데이트를 진행하려면 다시 확인하여 새 동의 화면을 여세요.",
+    "update.available": "업데이트가 있습니다. v{version}로 업데이트할까요?",
+    "update.signIn": "세션이 만료되었거나 접근 권한이 없습니다. 다시 로그인하거나 화면을 새로고침하세요.",
+    "update.title": "서버 업데이트",
+    "update.installed": "설치된 버전",
+    "update.latest": "업데이트할 버전",
+    "update.check": "업데이트 확인",
+    "update.help": "이 화면에서는 Artifacty Linux systemd 사용자 서비스만 업데이트할 수 있습니다. 업데이트 확인을 누르면 설치 환경도 확인합니다.",
+    "update.backup": "선택한 버전을 설치하기 전에 백업을 만듭니다. 서버가 잠시 중지된 뒤 다시 시작됩니다. 이 화면을 열어 두면 다시 연결합니다.",
+    "update.manual": "다른 방식으로 설치했다면 해당 설치 방식의 업데이트 안내를 따라 주세요.",
+    "update.unsupported": "이 설치 환경에서는 브라우저에서 업데이트할 수 없습니다.",
+    "update.current": "현재 최신 버전입니다.",
+    "update.confirm": "저장소를 백업하고 서버를 다시 시작하여 이 버전을 설치하는 데 동의합니다.",
+    "update.start": "백업 후 업데이트",
+    "update.progress": "업데이트 상태",
+    "update.refresh": "상태 새로고침",
+    "update.reconnect": "서버가 다시 시작 중이거나 연결할 수 없습니다. 다시 연결하고 있습니다…",
+    "update.queued": "시작 대기 중",
+    "update.running": "업데이트 진행 중",
+    "update.succeeded": "업데이트가 완료되었습니다. 새 버전을 사용하려면 화면을 새로고침하세요.",
+    "update.failed": "업데이트하지 못했습니다. 다시 시도하기 전에 오류를 확인하세요.",
+    "update.interrupted": "이전 업데이트가 중단되었습니다. 다시 시도하기 전에 서버 상태를 확인하세요.",
+    "update.expires": "확인 유효 기한",
+
+    "artifact.details": "세부 정보",
+    "nav.skip": "본문으로 이동",
+    "nav.artifacts": "아티팩트",
+    "nav.administration": "관리",
+    "nav.users": "사용자",
+    "nav.backup": "백업",
+    "nav.webhooks": "Webhook",
+    "nav.account": "계정",
+    "nav.accountTokens": "계정 및 API 토큰",
+    "nav.password": "비밀번호",
+    "nav.signIn": "로그인",
+    "nav.signOut": "로그아웃",
+    "nav.apiDocs": "API 문서",
+    "nav.versions": "버전 관리",
+
+    "dashboard.navigation": "대시보드 탐색",
+    "dashboard.more": "메뉴",
+    "dashboard.searchPlaceholder": "아티팩트 검색",
+    "dashboard.advanced": "상세 필터",
+    "dashboard.activeFilters": "{count}개 적용",
+    "filter.artifactType": "아티팩트 유형",
+    "filter.reviewStatus": "리뷰 상태",
+    "filter.mode": "검색 모드",
+    "filter.groupBy": "묶어서 보기",
+    "filter.relatedTo": "관련 아티팩트 ID",
+    "filter.relation": "관계",
+
     "sharing.staticPreview": "정적 미리보기: 스크립트와 외부 리소스는 비활성화됩니다.",
     "sharing.safeSource": "소스 미리보기: 공개 공유 링크에서는 실행 가능한 콘텐츠를 비활성화합니다.",
     "sharing.networkCondition": "모든 권한은 허용된 IP에서 접속해야 사용할 수 있습니다",