Improve operational UX, recovery flows, and action safety

Implement the approved UX review across Fleet, Betas, Library, deployments, and Settings. Add reviewed promotion and reconciliation plans, atomic queued-removal cancellation, recoverable beta drafts and launch inputs, accessible controls, and mobile improvements.

Validated with 473 tests, a clean typecheck, production build, and isolated desktop/mobile browser walkthroughs. Include the review and implementation coverage notes.

src/routes/api/betas/+server.ts

@@ -32,9 +32,13 @@ export async function GET({ url }: { url: URL }) {
                     : null
             };
         });
+        const test = storedPlan(b.id);
+        const plan = test ? parseBetaPlan(JSON.parse(test.plan)) : null;
         return {
             ...b,
-            testOutcome: storedPlan(b.id)?.outcome ?? null,
+            testOutcome: test?.outcome ?? null,
+            testReason: test?.reason ?? null,
+            deadlineAt: plan ? new Date(Date.parse(b.opened_at) + plan.timeoutHours * 3600000).toISOString() : null,
             scripts,
             servers: listBetaServers(b.id)
         };

src/routes/api/betas/[id]/+server.ts

@@ -31,5 +31,9 @@ export async function GET({ params }: { params: { id: string } }) {
     const servers = listBetaServers(id);
 
     const events = db().prepare('SELECT id, created_at, message FROM beta_events WHERE beta_id = ? ORDER BY id').all(id);
-    return json({ beta, scripts, servers, events, test: testView(id) });
+    const rollout = db().prepare("SELECT id FROM deployments WHERE beta_id = ? AND action = 'promote' ORDER BY started_at DESC LIMIT 1").get(id) as { id: string } | undefined;
+    const promotion = rollout ? { ...rollout,
+        pending: (db().prepare("SELECT COUNT(*) n FROM deployment_servers WHERE deployment_id = ? AND restart_state NOT IN ('done','failed','cancelled')").get(rollout.id) as { n: number }).n,
+        failed: (db().prepare("SELECT COUNT(*) n FROM deployment_servers WHERE deployment_id = ? AND restart_state = 'failed'").get(rollout.id) as { n: number }).n } : null;
+    return json({ beta, scripts, servers, events, test: testView(id), promotion });
 }

src/routes/api/betas/[id]/promote/+server.ts

@@ -1,16 +1,28 @@
 import { json } from '@sveltejs/kit';
-import { promoteBeta, BetaError } from '$lib/server/fleet/beta.js';
+import { promoteBeta, previewBetaPromotion, BetaError } from '$lib/server/fleet/beta.js';
 
 function parseId(raw: string): number | null {
     const n = Number.parseInt(raw, 10);
     return Number.isFinite(n) ? n : null;
 }
 
-export async function POST({ params }: { params: { id: string } }) {
+export async function GET({ params }: { params: { id: string } }) {
+    const id = parseId(params.id);
+    if (id === null) return json({ ok: false, error: 'Invalid beta ID.' }, { status: 400 });
+    try { return json({ preview: previewBetaPromotion(id) }, { headers: { 'Cache-Control': 'no-store' } }); }
+    catch (err) {
+        if (err instanceof BetaError) return json({ error: err.message }, { status: 409 });
+        throw err;
+    }
+}
+
+export async function POST({ params, request }: { params: { id: string }; request: Request }) {
     const id = parseId(params.id);
     if (id === null) return json({ ok: false, error: 'bad id' }, { status: 400 });
+    const body = await request.json().catch(() => null);
+    if (typeof body?.previewToken !== 'string') return json({ ok: false, error: 'Review promotion targets before confirming.' }, { status: 400 });
     try {
-        const result = await promoteBeta(id);
+        const result = await promoteBeta(id, body.previewToken);
         return json({ ok: true, result });
     } catch (err) {
         if (err instanceof BetaError) {

src/routes/api/configs/inspect/+server.ts

@@ -50,7 +50,7 @@ export async function POST({ request }: { request: Request }) {
         return json({ error: 'Server, config ID and text are required.' }, { status: 400 });
     }
     try {
-        return json({ inspection: inspect(body.server, body) }, { headers: { 'Cache-Control': 'no-store' } });
+        return json({ inspection: inspect(body.server, body), promoted: inspect(body.server) }, { headers: { 'Cache-Control': 'no-store' } });
     } catch (err) {
         return json({ error: (err as Error).message }, { status: 400 });
     }

src/routes/api/deployments/[id]/cancel/+server.ts

@@ -0,0 +1,7 @@
+import { json } from '@sveltejs/kit';
+import { cancelRemoval } from '$lib/server/fleet/deployments.js';
+
+export function POST({ params }: { params: { id: string } }) {
+    if (!cancelRemoval(params.id)) return json({ error: 'Removal has already begun or this request is no longer waiting. Refresh to see its current state.' }, { status: 409 });
+    return json({ ok: true });
+}

src/routes/api/drift/+server.ts

@@ -1,10 +1,11 @@
 import { json } from '@sveltejs/kit';
-import { runDriftDeployment, scanFleetDrift } from '$lib/server/fleet/drift.js';
+import { DriftPlanChanged, previewDrift, runDriftDeployment } from '$lib/server/fleet/drift.js';
 import { kick } from '$lib/server/pipeline/worker.js';
 
 // GET returns the current drift plan for the whole fleet without touching disk.
 export async function GET() {
-    const entries = await scanFleetDrift();
+    const plan = await previewDrift();
+    const entries = plan.files.map(file => ({ ...file, size: file.afterSize ?? file.beforeSize ?? 0, sha256: file.afterSha256 ?? file.beforeSha256 ?? '' }));
     const byServer = new Map<
         string,
         Array<{ relPath: string; size: number; sha256: string; kind: string; driftKind: string }>
@@ -21,21 +22,25 @@ export async function GET() {
         byServer.set(e.server, arr);
     }
     return json({
-        totalDrift: entries.length,
+        totalDrift: entries.length, scannedAt: plan.scannedAt,
         servers: [...byServer.entries()].map(([server, files]) => ({ server, files }))
     });
 }
 
 // POST removes drift and creates a drift deployment. Body: { servers?: string[], dryRun?: boolean }
 export async function POST({ request }: { request: Request }) {
-    const body = (await request
-        .json()
-        .catch(() => ({}))) as { servers?: string[]; dryRun?: boolean };
-    const result = await runDriftDeployment({
-        servers: body.servers,
-        dryRun: body.dryRun ?? false,
-        triggeredBy: 'ui'
-    });
-    if (result.deploymentId) void kick();
-    return json({ ok: true, result });
+    const body = await request.json().catch(() => null);
+    if (!body || (body.servers !== undefined && (!Array.isArray(body.servers) || !body.servers.every((server: unknown) => typeof server === 'string')))) {
+        return json({ ok: false, error: 'Provide the server IDs to review.' }, { status: 400 });
+    }
+    try {
+        if (body.dryRun === true) return json({ ok: true, plan: await previewDrift(body.servers) });
+        if (typeof body.expectedFingerprint !== 'string' || !body.expectedFingerprint) return json({ ok: false, error: 'Review a reconciliation plan before applying changes.' }, { status: 400 });
+        const result = await runDriftDeployment({ servers: body.servers, expectedFingerprint: body.expectedFingerprint, triggeredBy: 'ui' });
+        if (result.deploymentId) void kick();
+        return json({ ok: true, result });
+    } catch (error) {
+        if (error instanceof DriftPlanChanged) return json({ ok: false, error: error.message, plan: error.plan }, { status: 409 });
+        return json({ ok: false, error: (error as Error).message }, { status: 400 });
+    }
 }

src/routes/api/scripts/[id]/+server.ts

@@ -43,6 +43,7 @@ export async function GET({ params }: { params: { id: string } }) {
     return json({
         script,
         versions,
+        installedVersions: script.kind === 'script' || script.kind === 'plugin' ? db().prepare(`SELECT i.server, v.version, v.id AS versionId, i.updated_at AS recordedAt FROM server_scripts i JOIN script_versions v ON v.id = i.script_version_id WHERE v.script_id = ? AND i.rel_path = ? ORDER BY i.server`).all(id, script.target_rel_path) : [],
         matchedServers: matched,
         runningBetaId: runningBeta?.id ?? null
     });

src/routes/api/scripts/[id]/scope/+server.ts

@@ -1,6 +1,24 @@
 import { json } from '@sveltejs/kit';
-import { getScript, setScope, ScriptError, type ScopeType } from '$lib/server/fleet/scripts.js';
+import { getScript, setScope, serversMatchingScope, ScriptError, type ScopeType } from '$lib/server/fleet/scripts.js';
 import { unsetScopeAndDetach } from '$lib/server/fleet/beta.js';
+import { db } from '$lib/server/db/index.js';
+
+export async function GET({ params, url }: { params: { id: string }; url: URL }) {
+    const id = Number(params.id);
+    if (!Number.isSafeInteger(id) || id <= 0) return json({ error: 'Invalid file ID.' }, { status: 400 });
+    const script = getScript(id);
+    if (!script) return json({ error: 'File not found.' }, { status: 404 });
+    const type = url.searchParams.get('type');
+    const value = url.searchParams.get('value');
+    if (type !== 'none' && type !== 'game' && type !== 'map' || type !== 'none' && !value) return json({ error: 'Choose a complete scope.' }, { status: 400 });
+    const before = serversMatchingScope(script.scope_type, script.scope_value);
+    const after = type === 'none' ? [] : serversMatchingScope(type as ScopeType, value);
+    const composed = script.kind === 'config' || script.kind === 'baseline';
+    const tracked = composed ? [] : (db().prepare(`SELECT DISTINCT server FROM server_scripts WHERE rel_path = ? AND script_version_id IN (SELECT id FROM script_versions WHERE script_id = ?) ORDER BY server`).all(script.target_rel_path, script.id) as Array<{ server: string }>).map(row => row.server);
+    return json({ before, after, added: after.filter(name => !before.includes(name)), removed: before.filter(name => !after.includes(name)),
+        affected: composed ? [...new Set([...before, ...after])].sort() : type === 'none' ? tracked : [...new Set([...before, ...after])].sort(),
+        composed, detached: type === 'none' ? tracked : [] }, { headers: { 'Cache-Control': 'no-store' } });
+}
 
 function parseId(raw: string): number | null {
     const n = Number.parseInt(raw, 10);

src/routes/api/system-status/+server.ts

@@ -0,0 +1,38 @@
+import { json } from '@sveltejs/kit';
+import { config, komodoConfigured, rconConfigured } from '$lib/server/config.js';
+import { listServers } from '$lib/server/fleet/servers.js';
+import { listServerKeys } from '$lib/server/fleet/server-keys.js';
+import { classifyHealth } from '$lib/server/fleet/health.js';
+import { tcpProbe } from '$lib/server/integrations/netProbe.js';
+import type { SetupCheck, SystemStatus } from '$lib/system-status.js';
+
+export async function GET({ url }: { url: URL }) {
+    const servers = listServers();
+    const readyServers = servers.filter(server => classifyHealth(server.last_seen_at, server.last_error, server.container_state) === 'online').length;
+    const savedKeys = listServerKeys().length;
+    const missing = [!config.komodo.address && 'KOMODO_ADDRESS', !config.komodo.apiKey && 'KOMODO_API_KEY', !config.komodo.apiSecret && 'KOMODO_API_SECRET'].filter(Boolean);
+    const connection: SetupCheck = { id: 'komodo', title: 'Komodo connection', state: komodoConfigured() ? 'unverified' : 'unconfigured', detail: komodoConfigured() ? 'Credentials configured. Run connection check to verify host reachability.' : `Set ${missing.join(', ')} in the app environment.`, href: '#setup-guide', action: 'Setup instructions' };
+    if (komodoConfigured() && url.searchParams.get('probe') === '1') {
+        try {
+            const address = new URL(config.komodo.address);
+            if (!['http:', 'https:'].includes(address.protocol)) throw new Error('invalid address');
+            const result = await Promise.race([
+                tcpProbe('Komodo', address.hostname, Number(address.port || (address.protocol === 'https:' ? 443 : 80)), 3000),
+                new Promise<null>(resolve => setTimeout(() => resolve(null), 4000))
+            ]);
+            const reachable = result?.outcome === 'connected';
+            connection.state = reachable ? 'ready' : 'attention';
+            connection.detail = reachable ? 'Host reachable. This network check does not validate API credentials; deployment previews check launch prerequisites.' : 'Host unreachable from Electric Cherry. Check the address, DNS, port, and network access.';
+        } catch { connection.state = 'attention'; connection.detail = 'Komodo address is invalid or could not be reached. Check KOMODO_ADDRESS.'; }
+    }
+    const checks: SetupCheck[] = [
+        connection,
+        { id: 'target', title: 'Deployment host', state: config.komodo.targetServer ? 'ready' : 'unconfigured', detail: config.komodo.targetServer ? `New servers target ${config.komodo.targetServer}.` : 'Set KOMODO_TARGET_SERVER to the exact host name shown in Komodo.', href: '#setup-guide', action: 'Setup instructions' },
+        { id: 'rcon', title: 'Game server connection', state: !rconConfigured() ? 'unconfigured' : readyServers ? 'ready' : 'unverified', detail: !rconConfigured() ? 'Set RCON_PASSWORD to the password used by your game servers.' : readyServers ? `${readyServers} servers have fresh successful RCON reports.` : 'RCON password configured. A running server is needed to verify a response.', href: servers.length ? '/' : '#setup-guide', action: servers.length ? 'Review fleet' : 'Setup instructions' },
+        { id: 'game-files', title: 'Game files on the host', state: 'unverified', detail: 'T5 and T6 game-file volumes must be populated on the Komodo host. Their contents cannot be verified from this app.', href: '#game-files', action: 'Game-file instructions' },
+        { id: 'keys', title: 'Saved server keys', state: savedKeys ? 'ready' : 'attention', detail: `${savedKeys} saved ${savedKeys === 1 ? 'key' : 'keys'}. Key presence does not confirm validity with Plutonium.`, href: '/server-keys', action: savedKeys ? 'Manage keys' : 'Add a key' },
+        { id: 'first-server', title: 'First server ready', state: readyServers ? 'ready' : 'attention', detail: readyServers ? `${readyServers} of ${servers.length} servers are responding.` : servers.length ? 'Servers are registered but none has a fresh healthy report. Open diagnostics to investigate.' : 'Create your first server after completing the setup checks.', href: servers.length ? '/' : '/deployments', action: servers.length ? 'Review fleet' : 'Create a server' }
+    ];
+    const body: SystemStatus = { checkedAt: new Date().toISOString(), checks, readyServers, totalServers: servers.length, savedKeys };
+    return json(body, { headers: { 'cache-control': 'no-store' } });
+}