Add Sparkle auto-updates; move Multi-Verse into themes; UI polish

Auto-updates (Sparkle 2, reusable for future apps):
- SPUStandardUpdaterController wrapper (UpdateController) with launch +
  interval checks, opt-out, cadence, beta channel, silent auto-download,
  and a "Check for Updates…" menu command; guarded so it only starts once
  a real EdDSA key is set (never in the test host).
- Settings ▸ Actualizări tab + in-app Versions picker (install / roll back
  to any release through Sparkle, signature-verified).
- Info.plist Sparkle keys (real SUPublicEDKey), sandbox entitlements
  (network.client + Sparkle mach-lookup exceptions), Sparkle SPM dep.
- CI: ad-hoc sign + monotonic CFBundleVersion; sign & publish a signed
  appcast to GitHub Pages (scripts/publish_appcast.sh + appcast_upsert.py),
  guarded on the SPARKLE_PRIVATE_KEY secret so CI stays green until set.
- UPDATES.md runbook (setup, ad-hoc caveat, Developer ID upgrade path).

Multi-Verse options now live in the theme (verse cassette), not globals:
- ContentOptions gains multiVerseLayout / showNumbers / customEnabled /
  customText; edited in the Layout Editor on the verse cassette, carried by
  theme export/import, and read by every previewer and the live output.
- Custom text supports {verses} {ref} {n} tokens when 2+ verses show.

Right sidebar / settings cleanup:
- Removed the dead "Afișează verse numbers/cross-refs/footnotes" toggles
  (they bound to keys nothing read); kept the working interlinear toggle.
- Rewired the Settings footnotes toggle to the key BibleView actually uses.
- Preview panel ~10% wider; button labels no longer wrap to two lines.

Library / Bible polish:
- Song source file + web link in the DB and header; clickable info chips;
  redesigned song detail header; subtle section headings in list & grid.
- Bible tab title shows the language before the version, e.g. "(RO) EDC100".

Author: RobyRew

.github/workflows/build-and-release.yml

@@ -42,16 +42,24 @@ jobs:
 
       - name: Build
         run: |
+          # Monotonic CFBundleVersion so Sparkle can tell releases apart (the project's
+          # CURRENT_PROJECT_VERSION is a fixed 1). Ad-hoc code signing ("-") so the app's
+          # entitlements (sandbox + Sparkle XPC) actually apply and the in-app updater's
+          # installer works — no Apple certs needed (Gatekeeper still asks for right-click
+          # → Open, exactly as before). Swap "-" for a Developer ID identity + add
+          # notarization later for silent updates; see UPDATES.md.
           xcodebuild \
             -scheme "$SCHEME" \
             -project "$PRODUCT_NAME.xcodeproj" \
             -configuration Release \
             -derivedDataPath build \
             -destination 'platform=macOS' \
             CODE_SIGN_IDENTITY="-" \
+            CODE_SIGN_STYLE=Manual \
             CODE_SIGNING_REQUIRED=NO \
-            CODE_SIGNING_ALLOWED=NO \
+            CODE_SIGNING_ALLOWED=YES \
             DEVELOPMENT_TEAM="" \
+            CURRENT_PROJECT_VERSION=${{ github.run_number }} \
             clean build
 
       - name: Run Unit Tests
@@ -121,8 +129,14 @@ jobs:
     runs-on: macos-15
     permissions:
       contents: write
+    env:
+      # Empty until you add the repo secret — the appcast step then no-ops (CI stays green).
+      SPARKLE_PRIVATE_KEY: ${{ secrets.SPARKLE_PRIVATE_KEY }}
 
     steps:
+      - name: Checkout (for appcast scripts)
+        uses: actions/checkout@v5
+
       - name: Download artifact
         uses: actions/download-artifact@v5
         with:
@@ -159,6 +173,21 @@ jobs:
             TopPresenter-*.zip
             TopPresenter-*.dmg
 
+      - name: Publish appcast (beta channel)
+        if: ${{ env.SPARKLE_PRIVATE_KEY != '' }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          ZIP: TopPresenter-${{ needs.build.outputs.version }}.zip
+          DOWNLOAD_URL: https://github.com/${{ github.repository }}/releases/download/${{ needs.build.outputs.prerelease_tag }}/TopPresenter-${{ needs.build.outputs.version }}.zip
+          SHORT_VERSION: ${{ needs.build.outputs.prerelease_version }}
+          BUILD_VERSION: ${{ github.run_number }}
+          CHANNEL: beta
+          REPO: ${{ github.repository }}
+          NOTES: ${{ github.event.head_commit.message }}
+        run: |
+          chmod +x scripts/publish_appcast.sh
+          scripts/publish_appcast.sh
+
   # Stable release on final version tags (v1.0.0, v1.1.0, etc.)
   release:
     name: Stable Release
@@ -167,8 +196,13 @@ jobs:
     runs-on: macos-15
     permissions:
       contents: write
+    env:
+      SPARKLE_PRIVATE_KEY: ${{ secrets.SPARKLE_PRIVATE_KEY }}
 
     steps:
+      - name: Checkout (for appcast scripts)
+        uses: actions/checkout@v5
+
       - name: Download artifact
         uses: actions/download-artifact@v5
         with:
@@ -189,3 +223,17 @@ jobs:
           files: |
             TopPresenter-*.zip
             TopPresenter-*.dmg
+
+      - name: Publish appcast (stable channel)
+        if: ${{ env.SPARKLE_PRIVATE_KEY != '' }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          ZIP: TopPresenter-${{ needs.build.outputs.version }}.zip
+          DOWNLOAD_URL: https://github.com/${{ github.repository }}/releases/download/${{ github.ref_name }}/TopPresenter-${{ needs.build.outputs.version }}.zip
+          SHORT_VERSION: ${{ needs.build.outputs.version }}
+          BUILD_VERSION: ${{ github.run_number }}
+          CHANNEL: ""
+          REPO: ${{ github.repository }}
+        run: |
+          chmod +x scripts/publish_appcast.sh
+          scripts/publish_appcast.sh

AGENTS.md

@@ -186,6 +186,7 @@ TopPresenter/
 - **Sidebar (v10.2)** = `SidebarItem.contentItems` (bible/songs/media/schedule/customSlides) in the top `List`, + a PINNED bottom group (`utilityItems` = `.history`, `.account` as selectable destinations, plus a **Settings** button via `@Environment(\.openSettings)`). `.history`→`HistoryView`, `.account`→`ProfileView` (local prefs, `@AppStorage` only — no login) route through `ContentAreaView`; both return `EmptyView` in `PreviewPanelView` and the preview column is HIDDEN for them in `MainControlView` (full-width). Any new switch over `SidebarItem` must handle `.history` + `.account`
 - **Single output window**: locate it via `presentationWindows` (plural) and call `dedupePresentationWindows()` (closes extras) at the top of `showPresentationWindow`/`movePresentationWindow`/`positionOnScreen` + after the launch auto-open (guarded by `hasPresentationWindow`); the presentation `WindowGroup` is `.restorationBehavior(.disabled)`. This killed the "two overlapping outputs" (state-restoration + auto-open) bug — don't reintroduce an unguarded `openWindow(.presentation)`
 - **Song verified flag + edit log (v10.2)**: `Song.verified` (Bool, round-trips through GOAT — `songDictV2` writes `"verified"`, `TopPresenterSongImporter` reads it), `Song.modifiedDate` (drives the Recente sort), `Song.editLogJSON`→`editLog: [SongEditEntry]` (coarse change log, INTERNAL — not exported). The song editor snapshots the song to GOAT on open (`ExportService.exportSongToTopPresenterJSON`); **Renunță** reverts via `ImportService.applyResult(_:to:modelContext:)` (the GOAT→Song builder extracted from `createSongFromResult` — clears + rebuilds versions/sections, reused by import too); **Gata** diffs old↔new via `ImportService.summarizeChanges(old:new:)` → appends edit-log entries. `SectionEditorCard` uses `@FocusState` so clicking a section drives the editor preview. Library: verified badge in `songBadges`, "Doar verificate" filter + `verificat`/✓ search token, sort header chips (`SongSortKey` = A-Z/Artist/Carte/Limbă/Recente). Song slide thumbnails have PREVIEW + trash (delete = remove the section behind the slide, `.confirmationDialog`)
+- **Song library browse (v10.3)**: the browser search lives on `LibraryManager.songLibraryQuery` (SHARED — NOT the Quick Search `songSearchQuery`), so detail-panel chips can set it. `SongDetailPanel` chips are clickable `searchChip(_:query:)`/`searchText(_:query:)` that set `songLibraryQuery` (find similar by artist/book/language/style/theme). `filtered` is grouped into subtle `Section` headers by the active `SortKey` (`grouped` + `initialLetter` diacritic-folded; Recente = ungrouped) in BOTH list and grid (grid uses `pinnedViews: [.sectionHeaders]`). `Song.sourceFile` (filename, stamped in `parseDirectory` default + `ImportService` single-file paths, set in `applyResult`) + `Song.webURL` (best-effort URL dug out of `_extensions`) show above the slides; the detail header is Title · book · artist(≤~half width) left, history "Prezentat ×" + key/chords + Edit (large) right
 - **Unified z-order for EVERY box** (sections + custom + media interleaved): per-profile `boxOrder` token list ("section:<raw>" / "custom:<uuid>" / "media:<uuid>"), reconciled via `orderedBoxTokens()` (pure — safe in view body; new boxes land on top, media defaults to the back). ALL render paths (output `orderedBoxes`, preview card, editor canvas) iterate this order — never hardcode section/media layering again. Reorder via drag in the Casete list (front-first, `reorderBoxToken(_:above:)`) or the Ordonare context menu on any box (canvas + list)
 - Custom + media boxes are renamable (`name` field, context-menu Redenumește); translation & subtitle rows have a trash button that HIDES them (built-ins are never deleted)
 - Hidden boxes are COMPLETELY invisible everywhere — preview card AND editor canvas pass `showsHiddenBoxes: false`; the only place a hidden box appears is the Casete list (dimmed, eye to re-enable)

Info.plist

@@ -2,6 +2,20 @@
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
+	<!-- Sparkle auto-update (see UPDATES.md). Replace SUPublicEDKey with the EdDSA
+	     public key from `generate_keys`; the appcast is published to GitHub Pages. -->
+	<key>SUFeedURL</key>
+	<string>https://robyrew.github.io/TopPresenter/appcast.xml</string>
+	<key>SUPublicEDKey</key>
+	<string>4X2KEouvDSSL8Yyj8xr8OmxVFnGGSk1L2olrXkkm8CM=</string>
+	<key>SUEnableAutomaticChecks</key>
+	<true/>
+	<key>SUScheduledCheckInterval</key>
+	<integer>7200</integer>
+	<key>SUAutomaticallyUpdate</key>
+	<false/>
+	<key>SUEnableInstallerLauncherService</key>
+	<true/>
 	<key>CFBundleIconFile</key>
 	<string>AppIcon</string>
 	<key>CFBundleIconName</key>

README.md

@@ -104,7 +104,7 @@ The design studio behind everything you see on screen:
 
 ### 🪟 Multi-Window Tabs
 
-⌘T opens native tabs — each with its own module, Bible translation, and selection. Tabs are titled by **type + name + reference** (e.g. *Bible - EDC100 - Ioan 3:16*, *Songs — Înaintea Ta venim*), or rename any tab manually. One output, driven by whichever tab presses Show.
+⌘T opens native tabs — each with its own module, Bible translation, and selection. Tabs are titled by **type + (lang) version + reference** (e.g. *Bible - (RO) EDC100 - Ioan 3:16*, *Songs — Înaintea Ta venim*), or rename any tab manually. One output, driven by whichever tab presses Show.
 
 ### 🧭 Sidebar & History
 

TopPresenter.xcodeproj/project.pbxproj

@@ -6,6 +6,10 @@
 	objectVersion = 77;
 	objects = {
 
+/* Begin PBXBuildFile section */
+		5AB1E0F100000000000000C1 /* Sparkle in Frameworks */ = {isa = PBXBuildFile; productRef = 5AB1E0F100000000000000B1 /* Sparkle */; };
+/* End PBXBuildFile section */
+
 /* Begin PBXContainerItemProxy section */
 		A9D0D40A2F65FF4300CE2417 /* PBXContainerItemProxy */ = {
 			isa = PBXContainerItemProxy;
@@ -52,6 +56,7 @@
 			isa = PBXFrameworksBuildPhase;
 			buildActionMask = 2147483647;
 			files = (
+				5AB1E0F100000000000000C1 /* Sparkle in Frameworks */,
 			);
 			runOnlyForDeploymentPostprocessing = 0;
 		};
@@ -112,6 +117,7 @@
 			);
 			name = TopPresenter;
 			packageProductDependencies = (
+				5AB1E0F100000000000000B1 /* Sparkle */,
 			);
 			productName = TopPresenter;
 			productReference = A9D0D3FA2F65FF3F00CE2417 /* TopPresenter.app */;
@@ -195,6 +201,9 @@
 			);
 			mainGroup = A9D0D3F12F65FF3F00CE2417;
 			minimizedProjectReferenceProxies = 1;
+			packageReferences = (
+				5AB1E0F100000000000000A1 /* XCRemoteSwiftPackageReference "Sparkle" */,
+			);
 			preferredProjectObjectVersion = 77;
 			productRefGroup = A9D0D3FB2F65FF3F00CE2417 /* Products */;
 			projectDirPath = "";
@@ -605,6 +614,25 @@
 			defaultConfigurationName = Release;
 		};
 /* End XCConfigurationList section */
+
+/* Begin XCRemoteSwiftPackageReference section */
+		5AB1E0F100000000000000A1 /* XCRemoteSwiftPackageReference "Sparkle" */ = {
+			isa = XCRemoteSwiftPackageReference;
+			repositoryURL = "https://github.com/sparkle-project/Sparkle";
+			requirement = {
+				kind = upToNextMajorVersion;
+				minimumVersion = 2.6.0;
+			};
+		};
+/* End XCRemoteSwiftPackageReference section */
+
+/* Begin XCSwiftPackageProductDependency section */
+		5AB1E0F100000000000000B1 /* Sparkle */ = {
+			isa = XCSwiftPackageProductDependency;
+			package = 5AB1E0F100000000000000A1 /* XCRemoteSwiftPackageReference "Sparkle" */;
+			productName = Sparkle;
+		};
+/* End XCSwiftPackageProductDependency section */
 	};
 	rootObject = A9D0D3F22F65FF3F00CE2417 /* Project object */;
 }

TopPresenter/Core/AppCommands.swift

@@ -164,6 +164,19 @@ struct ViewCommands: Commands {
     }
 }
 
+// MARK: - Updater (app menu, beside "About")
+struct UpdaterCommands: Commands {
+    @ObservedObject var updater: UpdateController
+    var body: some Commands {
+        CommandGroup(after: .appInfo) {
+            Button(String(localized: "Caută actualizări…", comment: "Menu item")) {
+                updater.checkForUpdates()
+            }
+            .disabled(!updater.canCheckForUpdates)
+        }
+    }
+}
+
 // MARK: - Help Menu Commands
 struct HelpCommands: Commands {
     var body: some Commands {

TopPresenter/Core/LibraryManager.swift

@@ -39,6 +39,9 @@ final class LibraryManager {
     var songSearchQuery: String = ""
     var songSearchResults: [SongSearchResult] = []
     var isSongSearching: Bool = false
+    /// The song-LIBRARY browser's live filter text (distinct from the Quick Search
+    /// overlay above). Shared so clickable chips in the detail can search by tag/source.
+    var songLibraryQuery: String = ""
 
     /// When set, the Songs view presents the visual song editor for this song.
     var songToEdit: Song?
@@ -133,12 +136,26 @@ final class LibraryManager {
     }
 
     /// Formatted text for selected verses, respecting layout and prefix settings.
-    func formattedSelectedVersesText(layout: String = "inline", showPrefix: Bool = false) -> String {
+    /// When `customEnabled` and 2+ verses are selected, the joined verses are run
+    /// through `customTemplate` (tokens: {verses} {ref} {n}); a template without
+    /// {verses} gets the verses appended so they're never lost.
+    func formattedSelectedVersesText(layout: String = "inline", showPrefix: Bool = false,
+                                     customEnabled: Bool = false, customTemplate: String = "") -> String {
         if selectedVerses.isEmpty { return "" }
         let separator = layout == "newLine" ? "\n" : " "
-        return selectedVerses.map { v in
+        let joined = selectedVerses.map { v in
             showPrefix ? "(\(v.verseNumber)) \(v.text)" : v.text
         }.joined(separator: separator)
+
+        guard customEnabled, selectedVerses.count > 1 else { return joined }
+        let template = customTemplate.trimmingCharacters(in: .whitespacesAndNewlines)
+        guard !template.isEmpty else { return joined }
+        var out = template
+            .replacingOccurrences(of: "{verses}", with: joined)
+            .replacingOccurrences(of: "{ref}", with: selectedVersesReference)
+            .replacingOccurrences(of: "{n}", with: "\(selectedVerses.count)")
+        if !template.contains("{verses}") { out += separator + joined }
+        return out
     }
 
     /// Navigate to previous/next verse in the current chapter.

TopPresenter/Core/PresentationManager.swift

@@ -359,6 +359,17 @@ final class PresentationManager {
         var interlinearColumnSpacing: Double = 12
         var interlinearRowSpacing: Double = 2
 
+        // MARK: Multi-verse (Bible) — how several selected verses render together.
+        /// "inline" (one flowing paragraph) | "newLine" (each verse on its own line).
+        var multiVerseLayoutRaw: String = "inline"
+        /// Prefix each verse with its number, e.g. "(3) For God so loved…".
+        var multiVerseShowNumbers: Bool = false
+        /// Wrap the joined verses in a custom template when 2+ verses show.
+        var multiVerseCustomEnabled: Bool = false
+        /// Template used when `multiVerseCustomEnabled`. Tokens: {verses} {ref} {n}.
+        /// If it omits {verses}, the verses are appended after the template.
+        var multiVerseCustomText: String = ""
+
         init() {}
 
         init(from decoder: Decoder) throws {
@@ -377,6 +388,10 @@ final class PresentationManager {
             interlinearMorphScale = try c.decodeIfPresent(Double.self, forKey: .interlinearMorphScale) ?? 0.38
             interlinearColumnSpacing = try c.decodeIfPresent(Double.self, forKey: .interlinearColumnSpacing) ?? 12
             interlinearRowSpacing = try c.decodeIfPresent(Double.self, forKey: .interlinearRowSpacing) ?? 2
+            multiVerseLayoutRaw = try c.decodeIfPresent(String.self, forKey: .multiVerseLayoutRaw) ?? "inline"
+            multiVerseShowNumbers = try c.decodeIfPresent(Bool.self, forKey: .multiVerseShowNumbers) ?? false
+            multiVerseCustomEnabled = try c.decodeIfPresent(Bool.self, forKey: .multiVerseCustomEnabled) ?? false
+            multiVerseCustomText = try c.decodeIfPresent(String.self, forKey: .multiVerseCustomText) ?? ""
         }
     }
 
@@ -404,6 +419,14 @@ final class PresentationManager {
         mutateProfile(key) { $0.options = options }
     }
 
+    /// Multi-verse rendering settings for the active Bible theme — the single
+    /// source of truth now that these live in the theme (not global defaults).
+    /// Read by the preview card, the verse controls (live push), and BibleView.
+    var bibleMultiVerse: (layout: String, showNumbers: Bool, customEnabled: Bool, customText: String) {
+        let o = contentOptions(for: "bible")
+        return (o.multiVerseLayoutRaw, o.multiVerseShowNumbers, o.multiVerseCustomEnabled, o.multiVerseCustomText)
+    }
+
     static func transformText(_ text: String, raw: String) -> String {
         switch raw {
         case "upper": return text.uppercased()