add version card to settings, branch push protection

publish-docker.sh

@@ -1,17 +1,32 @@
 #!/bin/bash
 set -e
 
-# Configuration
-DOCKER_USERNAME="zimengxiong"
-IMAGE_NAME="excalidash"
-VERSION=${1:-$(node -e "try { console.log(require('fs').readFileSync('VERSION', 'utf8').trim()) } catch { console.log('latest') }")}
-
 # Colors for output
 RED='\033[0;31m'
 GREEN='\033[0;32m'
 YELLOW='\033[1;33m'
 NC='\033[0m' # No Color
 
+# Branch validation - only allow main branch
+echo -e "${YELLOW}Validating branch...${NC}"
+CURRENT_BRANCH=$(git rev-parse --abbrev-ref HEAD)
+ALLOWED_BRANCH="main"
+
+if [ "$CURRENT_BRANCH" != "$ALLOWED_BRANCH" ]; then
+    echo -e "${RED}ERROR: This script can only be run on the '$ALLOWED_BRANCH' branch!${NC}"
+    echo -e "${RED}Current branch: '$CURRENT_BRANCH'${NC}"
+    echo -e "${YELLOW}Please switch to the '$ALLOWED_BRANCH' branch and try again.${NC}"
+    exit 1
+fi
+
+echo -e "${GREEN}✓ Branch validation passed - running on '$CURRENT_BRANCH' branch${NC}"
+echo ""
+
+# Configuration
+DOCKER_USERNAME="zimengxiong"
+IMAGE_NAME="excalidash"
+VERSION=${1:-$(node -e "try { console.log(require('fs').readFileSync('VERSION', 'utf8').trim()) } catch { console.log('latest') }")}
+
 echo -e "${GREEN}===========================================${NC}"
 echo -e "${GREEN}ExcaliDash Multi-Platform Docker Builder${NC}"
 echo -e "${GREEN}===========================================${NC}"
@@ -56,9 +71,10 @@ docker buildx build \
     --platform linux/amd64,linux/arm64 \
     --tag $DOCKER_USERNAME/$IMAGE_NAME-frontend:$VERSION \
     --tag $DOCKER_USERNAME/$IMAGE_NAME-frontend:latest \
+    --build-arg VITE_APP_VERSION=$VERSION \
     --file frontend/Dockerfile \
     --push \
-    frontend/
+    .
 
 echo -e "${GREEN}✓ Frontend image pushed successfully${NC}"