{% extends "base.html" %}
{% block title %}Updates · NEXXVU{% endblock %}
{% block content %}
<div class="page-heading"><div><p class="eyebrow">Portal software</p><h1>Updates</h1><p class="muted">Review a release, request authorization, then explicitly start its signed update.</p></div><a class="button button-secondary" href="/updates">Refresh status</a></div>
{% if error %}<div class="alert alert-danger" role="alert">{{ error }}</div>{% endif %}
<section class="panel"><h2>Current release</h2><p><strong id="update-current-version">{{ state.health.release.semver or 'Development / unknown' }}</strong> · Schema <span id="update-current-schema">{{ state.health.schema_level or 'unknown' }}</span></p><p class="muted" id="update-current-git">{{ state.health.release.git_sha or 'No deployed release identity' }}</p><p class="muted" id="update-current-updated">{{ ('Installed or last updated: ' ~ state.health.release.last_successful_update_utc) if state.health.release.last_successful_update_utc else 'Installation time not recorded' }}</p><p id="update-current-health">{{ 'Healthy' if state.health.ready else 'Update blocked: current release is not ready' }}</p>{% for reason in state.health.errors %}<p>{{ reason|replace('_',' ') }}</p>{% endfor %}</section>
{% if not connected %}<div class="alert alert-warning" role="status">Update control is unavailable. Ask the host administrator to configure the signed release catalog and update control socket. No execution is available.</div>{% endif %}
<h2>Available releases</h2><p class="muted">Signature-verified offers published locally for this Portal. A release offer is not execution authorization.</p>
{% for offer in state.offers %}<section class="panel"><h3>{{ offer.version }}</h3><p>Schema {{ offer.schema_from }} → {{ offer.schema_to }}</p><h4>Release notes</h4><pre class="update-notes">{{ offer.notes }}</pre><p>{{ 'Eligible to request' if offer.eligible else 'Not eligible' }}</p>{% for reason in offer.reasons %}<p>{{ reason }}</p>{% endfor %}
{% if offer.eligible %}<form class="form-stack" method="post" action="/updates/request"><input type="hidden" name="csrf_token" value="{{ session.csrf_token }}"><input type="hidden" name="version" value="{{ offer.version }}"><label class="field"><span>Authorization reference</span><input name="authorization_reference" required maxlength="200" placeholder="Your change or approval reference"></label><button class="button button-primary" type="submit">Request {{ offer.version }}</button></form>{% endif %}</section>{% else %}<section class="empty-state"><p>No verified release offers are currently available.</p></section>{% endfor %}
{% if state.transaction %}{% set tx=state.transaction %}<section class="panel" id="update-transaction" data-transaction="{{ tx.id }}"><h2>Update transaction</h2><p>{{ tx.prior_release }} → {{ tx.requested_release }}</p><p class="metadata">{{ tx.id }}</p><p>Progress: <strong id="update-stage">{{ tx.current_stage|replace('_',' ') }}</strong></p><p>Outcome: <strong id="update-result">{{ tx.final_result|replace('_',' ') if tx.final_result else 'Not completed' }}</strong></p><p id="update-diagnostic">{{ tx.safe_diagnostic or '' }}</p>
<p id="update-live-status" role="status"></p>
{% if tx.current_stage == 'completed' and tx.final_result == 'succeeded' %}<div class="alert alert-success" id="update-succeeded" role="status">Updated from {{ tx.prior_release }} to {{ tx.requested_release }} on {{ tx.updated_at }}. Identity, configuration and data were kept.</div>{% elif tx.final_result == 'rolled_back' %}<div class="alert alert-warning">The update failed and the prior release was restored. Review the failure before requesting another release.</div>{% elif tx.current_stage == 'operator_required_stop' %}<div class="alert alert-danger">Operator intervention required. Do not retry or reset this transaction.</div>{% elif tx.current_stage == 'failed' and tx.safe_diagnostic == 'StateConflict' and tx.events|length == 2 %}<div class="alert alert-info" id="update-withdrawn">This request was withdrawn before it started: the installation was reinstalled on another release. Nothing was changed. You can request a current release.</div>{% endif %}
<ol id="update-events">{% for event in tx.events %}<li>{{ event.stage|replace('_',' ') }} — {{ event.created_at }}{% if event.safe_diagnostic %} · {{ event.safe_diagnostic }}{% endif %}</li>{% endfor %}</ol>
{% if connected and tx.current_stage == 'requested' and not tx.final_result %}
<a class="button button-secondary" href="/updates/{{ tx.id }}/request.json">Download request for authorization</a>
{% if state.dispatch %}<p class="alert alert-warning">Delivery dispatch was attempted. Delivery result: {{ state.dispatch.delivery.get('Result', 'unknown') if state.dispatch.delivery else 'unknown' }}. If progress has stopped, have the host operator inspect the pull unit and retained evidence. This screen will not launch the transaction again.</p>
{% else %}<p>Have the signed per-Portal authorization published through the existing approval process, then start delivery. Missing or invalid authorization cannot reach the executor.</p><form id="update-execute-form" class="form-stack" method="post" action="/updates/{{ tx.id }}/execute"><input type="hidden" name="csrf_token" value="{{ session.csrf_token }}"><label class="check-row"><input type="checkbox" name="confirm" value="execute" required><span>I authorize execution of this exact transaction and its defined rollback policy.</span></label><button class="button button-primary" type="submit">Download and execute authorized update</button></form>{% endif %}{% endif %}</section>{% endif %}
{% endblock %}
{% block scripts %}<script src="/static/updates.js" defer></script>{% endblock %}