4 commits

Author	SHA1	Message	Date
Mitchell R	093f4947a1	chore(kiosk): silence dead_code warnings on intentionally-held fields	2026-05-19 04:30:42 +02:00
Mitchell R	d9c59d9276	fix(kiosk): export WorkerMsg, import DecodePublicKey trait; CI master-push → dev ... - WorkerMsg made pub + re-exported at crate root so local_server can send through the UI channel. - ed25519_dalek::pkcs8::DecodePublicKey trait import — needed for VerifyingKey::from_public_key_pem call site. - Workflow: pushes to master now auto-trigger a dev-channel build (in addition to tag-pushes for stable/beta). Concurrency group cancels superseded master builds; tag builds never cancel each other.	2026-05-19 04:25:59 +02:00
Mitchell R	69cd0391b5	feat(ota): phase 3 — rollouts + automated rollback ... Rollouts (server side): - /admin/firmware/rollouts page lists + creates campaigns. Pick release, target kiosk_ids (empty = whole channel), percentage (1-100). - Active rollouts override channel-latest in /api/kiosk/firmware/check. - Deterministic bucket via sha256(rollout_id:kiosk_id) % 100 — same kiosk consistently lands in the same bucket across re-checks. - Pause / resume / complete state controls. Rollback (kiosk side): - Before swap, kiosk writes firmware-applying.json marker. - After clean boot + first successful heartbeat, marker deleted. - New ExecStartPre hook (/usr/local/sbin/betterframe-firmware-rollback.sh) runs every service start; stale marker (>120s) + .prev present → restore .prev. Pairs with systemd's StartLimit to catch crash loops.	2026-05-14 07:28:20 +02:00
Mitchell R	e5009fdd14	feat(ota): replacement pairing + firmware OTA (admin UI, kiosk client, CI)	2026-05-13 20:56:42 +02:00