Build GUI dashboard state and recovery policies

Add activity snapshots, operation timelines, dashboard presentation models, device status policies, and flash workflow scaffolding for the saved-device dashboard.

Split registry behavior so configure can merge rediscovered devices while profile edits update by ID and reject duplicate hosts or Bonjour fullnames.

Route recovery actions, password invalidation, and backend-only readiness activity through app stores with focused Swift coverage.

Tests: swift test; .venv/bin/pytest

Author: jamesyc

macos/TimeCapsuleSMB/Sources/TimeCapsuleSMBApp/ActivityStore.swift

@@ -0,0 +1,105 @@
+import Combine
+import Foundation
+
+enum ActivityScope: Equatable {
+    case app
+    case device(DeviceProfile.ID)
+    case unknown
+}
+
+struct ActivitySnapshot: Equatable {
+    let isRunning: Bool
+    let scope: ActivityScope
+    let operationTitle: String
+    let latestMessage: String?
+    let timeline: [OperationTimelineItem]
+}
+
+@MainActor
+final class ActivityStore: ObservableObject {
+    @Published private(set) var snapshot = ActivitySnapshot(
+        isRunning: false,
+        scope: .unknown,
+        operationTitle: "No active operation",
+        latestMessage: nil,
+        timeline: []
+    )
+
+    private let coordinator: OperationCoordinator
+    private var cancellables: Set<AnyCancellable> = []
+
+    init(coordinator: OperationCoordinator) {
+        self.coordinator = coordinator
+        coordinator.$activeOperation
+            .sink { [weak self] _ in
+                Task { @MainActor in
+                    self?.refresh()
+                }
+            }
+            .store(in: &cancellables)
+        coordinator.$activeDeviceID
+            .sink { [weak self] _ in
+                Task { @MainActor in
+                    self?.refresh()
+                }
+            }
+            .store(in: &cancellables)
+        coordinator.backend.$events
+            .sink { [weak self] _ in
+                Task { @MainActor in
+                    self?.refresh()
+                }
+            }
+            .store(in: &cancellables)
+        coordinator.backend.$isRunning
+            .sink { [weak self] _ in
+                Task { @MainActor in
+                    self?.refresh()
+                }
+            }
+            .store(in: &cancellables)
+        coordinator.backend.$activeOperationName
+            .sink { [weak self] _ in
+                Task { @MainActor in
+                    self?.refresh()
+                }
+            }
+            .store(in: &cancellables)
+        refresh()
+    }
+
+    func refresh() {
+        let events = coordinator.backend.events
+        let timeline = OperationTimelineBuilder.timeline(from: events)
+        let latestMessage = timeline.last?.detail ?? events.last?.summary
+        let operation = coordinator.activeOperation?.operation
+            ?? coordinator.backend.activeOperationName
+            ?? latestOperation(from: events)
+        let scope: ActivityScope
+        if let activeDeviceID = coordinator.activeDeviceID {
+            scope = .device(activeDeviceID)
+        } else if isAppOperation(operation) {
+            scope = .app
+        } else {
+            scope = .unknown
+        }
+        snapshot = ActivitySnapshot(
+            isRunning: coordinator.backend.isRunning,
+            scope: scope,
+            operationTitle: operation.map(OperationTimelineBuilder.operationTitle) ?? (timeline.isEmpty ? "No active operation" : "Last operation"),
+            latestMessage: latestMessage,
+            timeline: timeline
+        )
+    }
+
+    private func latestOperation(from events: [BackendEvent]) -> String? {
+        events.last?.operation
+    }
+
+    private func isAppOperation(_ operation: String?) -> Bool {
+        guard let operation else {
+            return false
+        }
+        return ["capabilities", "validate-install", "paths"].contains(operation)
+    }
+}

macos/TimeCapsuleSMB/Sources/TimeCapsuleSMBApp/ActivityView.swift

@@ -0,0 +1,42 @@
+import SwiftUI
+
+struct ActivityCompactView: View {
+    @ObservedObject var activityStore: ActivityStore
+    @ObservedObject var registry: DeviceRegistryStore
+
+    var body: some View {
+        let snapshot = activityStore.snapshot
+        HStack(spacing: 10) {
+            Image(systemName: snapshot.isRunning ? "hourglass" : "checkmark.circle")
+                .foregroundStyle(snapshot.isRunning ? Color.accentColor : Color.secondary)
+            VStack(alignment: .leading, spacing: 2) {
+                Text(title(snapshot))
+                    .font(.caption.weight(.medium))
+                if let latest = snapshot.latestMessage, !latest.isEmpty {
+                    Text(latest)
+                        .font(.caption2)
+                        .foregroundStyle(.secondary)
+                        .lineLimit(1)
+                        .truncationMode(.middle)
+                }
+            }
+            Spacer()
+            if let last = snapshot.timeline.last {
+                Text(last.title)
+                    .font(.caption2)
+                    .foregroundStyle(.secondary)
+            }
+        }
+        .padding(.horizontal)
+        .padding(.vertical, 8)
+        .background(Color.secondary.opacity(0.06))
+    }
+
+    private func title(_ snapshot: ActivitySnapshot) -> String {
+        if case .device(let activeDeviceID) = snapshot.scope,
+           let profile = registry.profile(id: activeDeviceID) {
+            return "\(snapshot.operationTitle) - \(profile.title)"
+        }
+        return snapshot.operationTitle
+    }
+}

macos/TimeCapsuleSMB/Sources/TimeCapsuleSMBApp/AddDeviceFlowStore.swift

@@ -385,7 +385,7 @@ final class AddDeviceFlowStore: ObservableObject {
                 try passwordStore.save(password, for: profile.keychainAccount)
                 var saved = profile
                 saved.passwordState = .available
-                saved = try registry.save(saved)
+                saved = try registry.updateProfile(saved)
                 savedProfile = saved
             } catch {
                 registry.updatePasswordState(.missing, for: profile.id)

macos/TimeCapsuleSMB/Sources/TimeCapsuleSMBApp/AppStore.swift

@@ -13,6 +13,7 @@ enum DashboardPrimaryAction: String, Equatable {
 struct DeviceDashboardSummary: Equatable {
     let profile: DeviceProfile
     let passwordState: DevicePasswordState
+    let displayStatus: DeviceDisplayStatus
     let primaryAction: DashboardPrimaryAction
     let hostWarning: HostCompatibilityWarning?
 }
@@ -26,6 +27,7 @@ final class AppStore: ObservableObject {
     let deviceRegistry: DeviceRegistryStore
     let operationCoordinator: OperationCoordinator
     let passwordStore: PasswordStore
+    let activityStore: ActivityStore
 
     private var cancellables: Set<AnyCancellable> = []
 
@@ -35,20 +37,23 @@ final class AppStore: ObservableObject {
             appReadinessStore: AppReadinessStore(backend: coordinator.backend),
             deviceRegistry: DeviceRegistryStore(),
             operationCoordinator: coordinator,
-            passwordStore: KeychainPasswordStore()
+            passwordStore: KeychainPasswordStore(),
+            activityStore: ActivityStore(coordinator: coordinator)
         )
     }
 
     init(
         appReadinessStore: AppReadinessStore,
         deviceRegistry: DeviceRegistryStore,
         operationCoordinator: OperationCoordinator,
-        passwordStore: PasswordStore
+        passwordStore: PasswordStore,
+        activityStore: ActivityStore? = nil
     ) {
         self.appReadinessStore = appReadinessStore
         self.deviceRegistry = deviceRegistry
         self.operationCoordinator = operationCoordinator
         self.passwordStore = passwordStore
+        self.activityStore = activityStore ?? ActivityStore(coordinator: operationCoordinator)
 
         appReadinessStore.objectWillChange
             .sink { [weak self] _ in
@@ -65,6 +70,11 @@ final class AppStore: ObservableObject {
                 self?.objectWillChange.send()
             }
             .store(in: &cancellables)
+        self.activityStore.objectWillChange
+            .sink { [weak self] _ in
+                self?.objectWillChange.send()
+            }
+            .store(in: &cancellables)
         deviceRegistry.$profiles
             .sink { [weak self] profiles in
                 Task { @MainActor in
@@ -99,28 +109,30 @@ final class AppStore: ObservableObject {
     }
 
     func dashboardSummary(for profile: DeviceProfile) -> DeviceDashboardSummary {
-        let passwordState = passwordStore.state(for: profile.keychainAccount)
-        let primaryAction: DashboardPrimaryAction
-        if passwordState != .available {
-            primaryAction = .replacePassword
-        } else if profile.lastCheckup == nil {
-            primaryAction = .runCheckup
-        } else if profile.lastDeploy == nil {
-            primaryAction = .installSMB
-        } else if profile.lastCheckup?.failCount ?? 0 > 0 || profile.lastCheckup?.warnCount ?? 0 > 0 {
-            primaryAction = .viewCheckup
-        } else {
-            primaryAction = .openSMB
-        }
+        let passwordState = effectivePasswordState(for: profile)
+        let displayStatus = DeviceStatusPolicy.status(
+            for: profile,
+            passwordState: passwordState,
+            activeOperation: operationCoordinator.activeOperation
+        )
+        let primaryAction = DashboardPrimaryActionPolicy.primaryAction(
+            for: profile,
+            passwordState: passwordState,
+            activeOperation: operationCoordinator.activeOperation
+        )
         return DeviceDashboardSummary(
             profile: profile,
             passwordState: passwordState,
+            displayStatus: displayStatus,
             primaryAction: primaryAction,
             hostWarning: HostCompatibilityPolicy.warning()
         )
     }
 
     func password(for profile: DeviceProfile) -> String? {
+        if profile.passwordState == .invalid {
+            return nil
+        }
         do {
             return try passwordStore.password(for: profile.keychainAccount)
         } catch PasswordStoreError.missing {
@@ -137,6 +149,24 @@ final class AppStore: ObservableObject {
         deviceRegistry.updatePasswordState(.available, for: profile.id)
     }
 
+    func updateSettings(_ settings: DeviceProfileSettings, for profile: DeviceProfile) throws {
+        var updated = profile
+        updated.settings = settings
+        try deviceRegistry.updateProfile(updated)
+    }
+
+    func rename(_ profile: DeviceProfile, displayName: String) throws {
+        var updated = profile
+        updated.displayName = displayName
+        try deviceRegistry.updateProfile(updated)
+    }
+
+    func updateHost(_ profile: DeviceProfile, host: String) throws {
+        var updated = profile
+        updated.host = host
+        try deviceRegistry.updateProfile(updated)
+    }
+
     func forget(_ profile: DeviceProfile) throws {
         try passwordStore.deletePassword(for: profile.keychainAccount)
         try deviceRegistry.delete(profile)
@@ -148,8 +178,15 @@ final class AppStore: ObservableObject {
 
     func refreshPasswordStates() {
         for profile in deviceRegistry.profiles {
-            deviceRegistry.updatePasswordState(passwordStore.state(for: profile.keychainAccount), for: profile.id)
+            deviceRegistry.updatePasswordState(effectivePasswordState(for: profile), for: profile.id)
+        }
+    }
+
+    private func effectivePasswordState(for profile: DeviceProfile) -> DevicePasswordState {
+        if profile.passwordState == .invalid {
+            return .invalid
         }
+        return passwordStore.state(for: profile.keychainAccount)
     }
 
     private func syncSelection(profiles: [DeviceProfile]) {

macos/TimeCapsuleSMB/Sources/TimeCapsuleSMBApp/BackendClient.swift

@@ -10,6 +10,7 @@ final class BackendClient: ObservableObject {
     @Published var currentStage: String?
     @Published var currentRisk: String?
     @Published var currentCancellable: Bool?
+    @Published private(set) var activeOperationName: String?
 
     private let runner: any HelperRunning
     private var runTask: Task<Void, Never>?
@@ -33,6 +34,7 @@ final class BackendClient: ObservableObject {
         currentStage = nil
         currentRisk = nil
         currentCancellable = nil
+        activeOperationName = nil
     }
 
     var canCancel: Bool {
@@ -51,6 +53,7 @@ final class BackendClient: ObservableObject {
         currentStage = nil
         currentRisk = nil
         currentCancellable = nil
+        activeOperationName = operation
         activeCall = BackendCall(operation: operation, params: runParams, context: context)
         let helperPath = self.helperPath.trimmingCharacters(in: .whitespacesAndNewlines)
         let runner = self.runner
@@ -107,6 +110,7 @@ final class BackendClient: ObservableObject {
         isRunning = false
         runTask = nil
         activeCall = nil
+        activeOperationName = nil
     }
 }
 

macos/TimeCapsuleSMB/Sources/TimeCapsuleSMBApp/ConnectView.swift

@@ -70,7 +70,7 @@ struct ConnectView: View {
             }
 
             if let error = store.error {
-                ErrorRecoveryView(error: error)
+                ErrorBlock(error: error)
             }
         }
         .padding()
@@ -186,24 +186,3 @@ private struct ConfiguredDeviceView: View {
         .font(.caption)
     }
 }
-
-private struct ErrorRecoveryView: View {
-    let error: BackendErrorViewModel
-
-    var body: some View {
-        VStack(alignment: .leading, spacing: 4) {
-            Text(error.recovery?.title ?? error.code)
-                .font(.body.weight(.medium))
-            Text(error.message)
-                .font(.caption)
-            if let recovery = error.recovery, !recovery.actions.isEmpty {
-                ForEach(recovery.actions, id: \.self) { action in
-                    Text(action)
-                        .font(.caption)
-                        .foregroundStyle(.secondary)
-                }
-            }
-        }
-        .foregroundStyle(.red)
-    }
-}