Fix initial artifact deployment and drift file replacement

src/lib/server/fleet/create.ts

@@ -20,6 +20,7 @@ import { kick } from '../pipeline/worker.js';
 import { getPromotedServerConfig, getServerMapConfig, MAP_CONFIG_FILE } from './server-config.js';
 import { recordScript } from './inventory.js';
 import { sha256Buffer } from './files.js';
+import { promotedArtifacts } from './promoted-artifacts.js';
 
 // Currently every t5 zombie server uses the same config file + game id. If we
 // ever add MP or SP, split these based on mode.
@@ -187,12 +188,25 @@ async function createServerUnlocked(input: CreateServerInput): Promise<CreateSer
     const hostDir = `${config.serversRoot}/${name}`;
     const initialConfig = getPromotedServerConfig('t5', mapEntry.canonical);
     const mapConfig = getServerMapConfig('t5', mapEntry.canonical)!;
+    const initialArtifacts = promotedArtifacts('t5', mapEntry.canonical);
 
     // Step 1: filesystem. mkdir mode is masked by umask, so chmod explicitly
     // after — plutainer expects to be able to write to /home/plutainer/app.
     try {
         await mkdir(hostDir, { recursive: true, mode: 0o777 });
         await chmod(hostDir, 0o777);
+        for (const { kind, script, version } of initialArtifacts) {
+            const dest = destOfKind(name, kind);
+            const target = join(dest, script.target_rel_path);
+            await mkdir(dirname(target), { recursive: true, mode: 0o777 });
+            // Make every newly created ancestor writable by Plutainer, even
+            // when the manager's umask removed write permissions at mkdir.
+            for (let dir = dirname(target); dir !== join(hostDir) && dir !== dirname(dir); dir = dirname(dir)) {
+                await chmod(dir, 0o777);
+            }
+            await writeFile(target, version.content);
+            await chmod(target, 0o666);
+        }
         const mapConfigPath = join(destOfKind(name, 'config'), MAP_CONFIG_FILE);
         await mkdir(dirname(mapConfigPath), { recursive: true, mode: 0o777 });
         await chmod(dirname(mapConfigPath), 0o777);
@@ -240,6 +254,9 @@ async function createServerUnlocked(input: CreateServerInput): Promise<CreateSer
                 recordScript(name, T5_ZOMBIE_CONFIG_FILE, null, sha256Buffer(initialConfig), initialConfig.byteLength, 'create');
             }
             recordScript(name, MAP_CONFIG_FILE, null, sha256Buffer(mapConfig), mapConfig.byteLength, 'create-map');
+            for (const { script, version } of initialArtifacts) {
+                recordScript(name, script.target_rel_path, version.id, version.sha256, version.size, 'create');
+            }
         })();
     } catch (err) {
         // Roll back Komodo + FS if the DB insert fails (very unlikely — most