Nothing needs action right now.
`;
return `
-
- ${card('updates', u.updatesAvailable, 'Updates available', u.updatesAvailable ? 'across your apps' : "you're current",
- `
`)}
- ${card('verify', u.totalCves, 'Known CVEs',
- (sev.critical || sev.high) ? `${sev.critical || 0} critical Β· ${sev.high || 0} high` : 'no high-severity issues',
- `
`)}
- ${card('updater', u.improvements, 'Improvements', u.improvements ? 'signed hotfixes to apply' : 'nothing pending',
- `
`)}
- ${card('backups', b.protectedLabel, 'Backups protected', b.sub,
- `
`)}
- ${card('system', u.apps, 'Apps tracked', `last scan: ${checked}`)}
+
+
+
+
${chip('all', 'Everything')}${chip('action', 'Needs action', warn.length)}
- ${(this.updater && this.updater.updates) ? '' : `
No scan data yet β the first automatic scan runs within a couple of minutes, or hit Check now.
`}`;
+ ${list}`;
+ }
+
+ // One status per area. kind 'warn' = actionable (gets buttons), 'ok' = quiet
+ // one-liner, 'none' = no data yet. Amber is the ceiling β per the
+ // not-alarmist convention nothing on this board is *broken*, it just wants a
+ // decision; severity detail (e.g. critical CVEs) lives in the row's badge.
+ areaStatuses() {
+ const esc = (s) => this.escape(s);
+ const up = this.updater;
+ const u = up ? up.counts() : { updatesAvailable: 0, totalCves: 0, cveTotals: {}, improvements: 0, apps: 0 };
+ const scanned = !!(up && up.updates);
+ const goto = (tab, label, filter, primary) =>
+ `
`;
+ const rows = [];
+
+ // Updates
+ const pending = up ? up.apps.filter((a) => a.update_available) : [];
+ if (!scanned) {
+ rows.push({ hue: 'updates', icon: 'β¬οΈ', kind: 'none', text: 'Updates β not scanned yet' });
+ } else if (pending.length) {
+ const names = pending.map((a) => a.displayName || a.name);
+ const list = names.slice(0, 3).join(', ') + (names.length > 3 ? ` +${names.length - 3} more` : '');
+ rows.push({
+ hue: 'updates', icon: 'β¬οΈ', kind: 'warn',
+ text: `${pending.length} update${pending.length === 1 ? '' : 's'} available`,
+ sub: `${esc(list)} β a recovery snapshot is taken before each update`,
+ actions: goto('updates', 'Review', 'updates')
+ + `
`,
+ });
+ } else {
+ rows.push({
+ hue: 'updates', icon: 'β¬οΈ', kind: 'ok',
+ text: u.apps ? `Updates β all ${u.apps} app${u.apps === 1 ? '' : 's'} current` : 'Updates β no installed apps to track yet',
+ });
+ }
+
+ // Security (needs scan data β without it the updates row already says so)
+ if (scanned) {
+ const sev = u.cveTotals || {};
+ if (u.totalCves) {
+ const hit = up.apps.filter((a) => (a.cves || []).length).length;
+ const order = ['critical', 'high', 'medium', 'low'];
+ const worst = order.find((s) => sev[s]);
+ rows.push({
+ hue: 'verify', icon: 'π‘οΈ', kind: 'warn',
+ text: `${u.totalCves} known CVE${u.totalCves === 1 ? '' : 's'} across ${hit} app${hit === 1 ? '' : 's'}`,
+ badge: worst ? `
${worst}` : '',
+ sub: order.filter((s) => sev[s]).map((s) => `${sev[s]} ${s}`).join(' Β· '),
+ actions: goto('updates', 'Review', 'security'),
+ });
+ } else {
+ rows.push({ hue: 'verify', icon: 'π‘οΈ', kind: 'ok', text: 'Security β no known CVEs' });
+ }
+ }
+
+ // Improvements (signed hotfixes β independent of the version scan)
+ if (u.improvements) {
+ rows.push({
+ hue: 'updater', icon: 'β¨', kind: 'warn',
+ text: `${u.improvements} signed improvement${u.improvements === 1 ? '' : 's'} ready to apply`,
+ sub: 'individually reversible β a snapshot is taken first',
+ actions: goto('improvements', 'View'),
+ });
+ } else {
+ rows.push({ hue: 'updater', icon: 'β¨', kind: 'ok', text: 'Improvements β nothing pending' });
+ }
+
+ // Backups
+ const b = this.backupSummary();
+ if (!this.backup) {
+ rows.push({ hue: 'backups', icon: 'πΎ', kind: 'none', text: 'Backups β no backup data yet' });
+ } else if (b.apps && !b.locations) {
+ rows.push({
+ hue: 'backups', icon: 'πΎ', kind: 'warn',
+ text: 'No backup location configured',
+ sub: 'apps canβt be protected until thereβs somewhere to back them up to',
+ actions: goto('backups', 'Open Backups'),
+ });
+ } else if (b.never + b.old) {
+ const n = b.never + b.old;
+ rows.push({
+ hue: 'backups', icon: 'πΎ', kind: 'warn',
+ text: `${n} app${n === 1 ? '' : 's'} need${n === 1 ? 's' : ''} a fresh backup`,
+ sub: [b.never && `${b.never} never backed up`, b.old && `${b.old} older than a week`].filter(Boolean).join(' Β· '),
+ actions: goto('backups', 'Open Backups'),
+ });
+ } else {
+ rows.push({
+ hue: 'backups', icon: 'πΎ', kind: 'ok',
+ text: b.apps ? `Backups β all ${b.apps} app${b.apps === 1 ? '' : 's'} protected Β· last ${b.latest}` : 'Backups β no apps to protect yet',
+ });
+ }
+ return rows;
+ }
+
+ boardRow(r) {
+ return `
+
+
${r.icon}
+
+
${r.text}${r.badge || ''}
+ ${r.sub ? `
${r.sub}
` : ''}
+
+ ${r.actions ? `
${r.actions}
` : ''}
+
`;
}
backupSummary() {
const d = this.backup;
- if (!d) return { protectedLabel: 'β', sub: 'no backup data', stale: 0 };
+ if (!d) return { apps: 0, protectedLabel: 'β', never: 0, old: 0, locations: 0, latest: 'never' };
const apps = Array.isArray(d.apps) ? d.apps : [];
- const protectedCount = apps.filter((a) => a.latest_snapshot).length;
const now = Date.now();
- const stale = apps.filter((a) => {
- if (!a.latest_time) return true;
+ let never = 0, old = 0, newest = 0;
+ for (const a of apps) {
+ if (!a.latest_snapshot) { never++; continue; }
const t = Date.parse(a.latest_time);
- return isNaN(t) ? true : (now - t) > 7 * 86400 * 1000;
- }).length;
- const latest = (d.system && d.system.latest_time && this.updater) ? this.updater.fmtRel(d.system.latest_time) : 'never';
+ if (isNaN(t) || (now - t) > 7 * 86400 * 1000) old++;
+ if (!isNaN(t) && t > newest) newest = t;
+ }
+ const sysT = d.system ? Date.parse(d.system.latest_time) : NaN;
+ if (!isNaN(sysT) && sysT > newest) newest = sysT;
return {
- protectedLabel: `${protectedCount}/${apps.length || 0}`,
- sub: stale ? `${stale} need attention Β· last ${latest}` : `all current Β· last ${latest}`,
- stale,
+ apps: apps.length,
+ protectedLabel: `${apps.length - never}/${apps.length}`,
+ never, old,
+ locations: Array.isArray(d.locations) ? d.locations.length : 0,
+ latest: (newest && this.updater) ? this.updater.fmtRel(new Date(newest).toISOString()) : 'never',
};
}