@@ -14,6 +14,7 @@ import { Button } from "~/components/ui/button";
 import AnimatedFilters from "~/components/common/AnimatedFilters.vue";
 import { Spinner } from "~/components/ui/spinner";
 import { Separator } from "~/components/ui/separator";
+import { Fold, HeightSwap } from "~/components/ui/transitions";
 import ClipBoard from "~/components/ClipBoard.vue";
 import PlayerSearch from "~/components/PlayerSearch.vue";
 import RconCommander from "~/components/servers/RconCommander.vue";
@@ -31,8 +32,6 @@ import {
   stopUtilityPracticeMutation,
 } from "~/graphql/utilityGraphql";
 import { readUtilityPracticeSession } from "~/types/utility";
-import { useAuthStore } from "~/stores/AuthStore";
-import { e_player_roles_enum } from "~/generated/zeus";
 import type {
   UtilityPracticeSession,
   UtilityPracticeSessionOutput,
@@ -161,15 +160,8 @@ const canDrive = computed(() => practice.value.isLive && canManage.value);
 const matchId = computed(() => practice.value.matchId);
 const serverId = computed(() => practice.value.serverId);
 
-// RCON is refused by the API for anyone below these roles, so showing it lower
-// would only ever render a console that answers with an error. It takes an
-// administrator, or the moderator running the match, which the practice host is.
-const isAdmin = computed(() =>
-  useAuthStore().isRoleAbove(e_player_roles_enum.administrator),
-);
-
-const canOperate = computed(
-  () => isAdmin.value || useAuthStore().isRoleAbove(e_player_roles_enum.moderator),
+const staffCanStop = computed(
+  () => practice.value.canStop && !canManage.value,
 );
 
 const operatorOpen = ref(false);
@@ -214,6 +206,10 @@ onBeforeUnmount(() => {
 const invitees = ref<Invitee[]>([]);
 const inviting = ref(false);
 const ending = ref(false);
+const confirmingStop = ref(false);
+const stopping = ref(false);
+
+const hostName = computed(() => props.session?.host?.name ?? null);
 
 const inviteeSteamIds = computed(() =>
   invitees.value.map((entry) => entry.steamId),
@@ -306,6 +302,35 @@ async function end() {
   }
 }
 
+async function staffStop() {
+  const id = sessionId.value;
+
+  if (!id || !staffCanStop.value) {
+    return;
+  }
+
+  stopping.value = true;
+
+  try {
+    await getGraphqlClient().mutate({
+      mutation: stopUtilityPracticeMutation,
+      variables: { session_id: id },
+    });
+
+    confirmingStop.value = false;
+    invitees.value = [];
+    emit("ended");
+  } catch (error: any) {
+    toast({
+      title: t("pages.utility.practice.stop_failed"),
+      description: error?.message,
+      variant: "destructive",
+    });
+  } finally {
+    stopping.value = false;
+  }
+}
+
 const sectionLabel =
   "flex items-center gap-1.5 font-mono text-[0.62rem] uppercase tracking-[0.16em] text-muted-foreground";
 
@@ -463,12 +488,12 @@ const panelCta = "w-full font-bold uppercase tracking-[0.22em]";
       </template>
 
       <!-- Operator tools. A practice pod is a game server like any other, and
-           when one refuses connections its console is what answers why. It
-           is staff-gated here because RCON is staff-gated on the server. -->
-      <template v-if="canOperate">
+           when one refuses connections its console is what answers why. The
+           api only hands the server id to viewers RCON lets in. -->
+      <Fold :open="!!serverId">
         <Separator />
 
-        <Collapsible v-model:open="operatorOpen">
+        <Collapsible v-model:open="operatorOpen" class="mt-3">
           <CollapsibleTrigger
             class="flex w-full items-center justify-between gap-2 text-left"
           >
@@ -494,26 +519,75 @@ const panelCta = "w-full font-bold uppercase tracking-[0.22em]";
             />
           </CollapsibleContent>
         </Collapsible>
-      </template>
+      </Fold>
     </template>
 
     <!-- Whatever the surface wants between the session and the way out of it. -->
     <slot name="extra" />
 
     <Separator />
 
-    <Button
-      :variant="canManage ? 'destructive' : 'outline'"
-      size="lg"
-      :class="panelCta"
-      :loading="ending"
-      @click="end()"
-    >
-      {{
-        canManage
-          ? $t("pages.utility.practice.stop")
-          : $t("pages.utility.practice.leave")
-      }}
-    </Button>
+    <!-- Staff who joined are still offered Leave: Stop sits beside it, and
+         asks first, because it ends the server for everyone on it. -->
+    <HeightSwap>
+      <div
+        v-if="confirmingStop && staffCanStop"
+        key="confirm"
+        class="flex flex-col gap-2 rounded-md border border-destructive/50 bg-destructive/[0.06] p-2.5"
+      >
+        <p class="text-xs text-foreground/90">
+          {{
+            hostName
+              ? $t("pages.utility.practice.staff_stop_ask", { host: hostName })
+              : $t("pages.utility.practice.staff_stop_ask_unnamed")
+          }}
+        </p>
+        <div class="flex items-center justify-end gap-2">
+          <Button
+            variant="outline"
+            size="sm"
+            class="h-7"
+            :disabled="stopping"
+            @click="confirmingStop = false"
+          >
+            {{ $t("common.cancel") }}
+          </Button>
+          <Button
+            variant="destructive"
+            size="sm"
+            class="h-7"
+            :loading="stopping"
+            @click="staffStop()"
+          >
+            {{ $t("pages.utility.practice.stop") }}
+          </Button>
+        </div>
+      </div>
+      <div v-else key="way-out" class="flex items-center gap-1.5">
+        <Button
+          :variant="canManage ? 'destructive' : 'outline'"
+          size="lg"
+          :class="[panelCta, 'min-w-0 flex-1']"
+          :loading="ending"
+          @click="end()"
+        >
+          {{
+            canManage
+              ? $t("pages.utility.practice.stop")
+              : $t("pages.utility.practice.leave")
+          }}
+        </Button>
+        <Button
+          v-if="staffCanStop"
+          variant="outline"
+          size="lg"
+          class="shrink-0 font-bold uppercase tracking-[0.22em] text-destructive hover:text-destructive"
+          :disabled="ending"
+          @click="confirmingStop = true"
+        >
+          {{ $t("pages.utility.practice.staff_stop") }}
+        </Button>
+      </div>
+    </HeightSwap>
   </div>
 </template>
@@ -133,9 +133,10 @@ export const utilityPracticeSessionFields = {
   // Named, not just numbered: the only useful thing to tell a guest whose
   // server is on the wrong map is who can move it.
   host: { name: true },
-  // Only for the staff console and the pod log tail below the panel; nothing
-  // player-facing reads it.
-  match: { server_id: true },
+  // The staff console's server. Not match.server_id: practice matches are
+  // hidden from every role, so that is always null. Null too for anyone RCON
+  // would refuse, which is what decides whether the console is offered.
+  server_id: true,
   team_id: true,
   map_name: true,
   map_changing_at: true,
@@ -153,6 +154,7 @@ export const utilityPracticeSessionFields = {
   is_member: true,
   can_view: true,
   can_manage: true,
+  can_stop: true,
 } as const;
 
 // A drill record belongs to a player, so signed out there is none to read --
@@ -736,9 +738,9 @@ export const inviteToUtilityPracticeMutation = generateMutation({
 });
 
 /**
- * The other half of stopUtilityPractice. Stopping is gated on `can_manage`, and
- * without this a joiner has no way out of a session at all — they are on the
- * roster of a server they cannot end and cannot leave.
+ * The other half of stopUtilityPractice. Stopping is the host's (and staff's,
+ * through `can_stop`), and without this a joiner has no way out of a session at
+ * all — they are on the roster of a server they cannot end and cannot leave.
  */
 export const leaveUtilityPracticeMutation = generateMutation({
   leaveUtilityPractice: [
 
@@ -6934,7 +6934,10 @@
         "ask_host": "اطلب من {host} تبديلها.",
         "ask_the_host": "اطلب من المضيف تبديلها.",
         "nav_switching": "قيد التبديل",
-        "operator": "وحدة تحكم الخادم"
+        "operator": "وحدة تحكم الخادم",
+        "staff_stop": "إيقاف",
+        "staff_stop_ask": "إيقاف خادم {host} لكل من عليه؟",
+        "staff_stop_ask_unnamed": "إيقاف هذا الخادم لكل من عليه؟"
       },
       "collections": {
         "tab": "المجموعات",
 
@@ -6934,7 +6934,10 @@
         "ask_host": "Bed {host} om at skifte den.",
         "ask_the_host": "Bed værten om at skifte den.",
         "nav_switching": "Skifter",
-        "operator": "Serverkonsol"
+        "operator": "Serverkonsol",
+        "staff_stop": "Stop",
+        "staff_stop_ask": "Stop serveren, som {host} har startet, for alle på den?",
+        "staff_stop_ask_unnamed": "Stop denne server for alle på den?"
       },
       "collections": {
         "tab": "Samlinger",
 
@@ -6934,7 +6934,10 @@
         "ask_host": "Bitte {host}, sie zu wechseln.",
         "ask_the_host": "Bitte den Host, sie zu wechseln.",
         "nav_switching": "Wechselt",
-        "operator": "Server-Konsole"
+        "operator": "Server-Konsole",
+        "staff_stop": "Stoppen",
+        "staff_stop_ask": "Server von {host} für alle darauf stoppen?",
+        "staff_stop_ask_unnamed": "Diesen Server für alle darauf stoppen?"
       },
       "collections": {
         "tab": "Sammlungen",
 
@@ -6934,7 +6934,10 @@
         "ask_host": "Ask {host} to switch it.",
         "ask_the_host": "Ask the host to switch it.",
         "nav_switching": "Switching",
-        "operator": "Server console"
+        "operator": "Server console",
+        "staff_stop": "Stop",
+        "staff_stop_ask": "Stop {host}'s server for everyone on it?",
+        "staff_stop_ask_unnamed": "Stop this server for everyone on it?"
       },
       "collections": {
         "tab": "Collections",
 
@@ -6934,7 +6934,10 @@
         "ask_host": "Pídele a {host} que lo cambie.",
         "ask_the_host": "Pídele al anfitrión que lo cambie.",
         "nav_switching": "Cambiando",
-        "operator": "Consola del servidor"
+        "operator": "Consola del servidor",
+        "staff_stop": "Detener",
+        "staff_stop_ask": "¿Detener el servidor de {host} para todos los que están en él?",
+        "staff_stop_ask_unnamed": "¿Detener este servidor para todos los que están en él?"
       },
       "collections": {
         "tab": "Colecciones",
 
@@ -6934,7 +6934,10 @@
         "ask_host": "Demandez à {host} de la changer.",
         "ask_the_host": "Demandez à l'hôte de la changer.",
         "nav_switching": "Changement",
-        "operator": "Console du serveur"
+        "operator": "Console du serveur",
+        "staff_stop": "Arrêter",
+        "staff_stop_ask": "Arrêter le serveur de {host} pour tous ceux qui y sont ?",
+        "staff_stop_ask_unnamed": "Arrêter ce serveur pour tous ceux qui y sont ?"
       },
       "collections": {
         "tab": "Collections",
 
@@ -6934,7 +6934,10 @@
         "ask_host": "Chiedi a {host} di cambiarla.",
         "ask_the_host": "Chiedi all'host di cambiarla.",
         "nav_switching": "Cambio mappa",
-        "operator": "Console del server"
+        "operator": "Console del server",
+        "staff_stop": "Ferma",
+        "staff_stop_ask": "Fermare il server di {host} per tutti quelli che ci sono?",
+        "staff_stop_ask_unnamed": "Fermare questo server per tutti quelli che ci sono?"
       },
       "collections": {
         "tab": "Raccolte",
 
@@ -6934,7 +6934,10 @@
         "ask_host": "{host} に切り替えを頼んでください。",
         "ask_the_host": "ホストに切り替えを頼んでください。",
         "nav_switching": "切り替え中",
-        "operator": "サーバーコンソール"
+        "operator": "サーバーコンソール",
+        "staff_stop": "停止",
+        "staff_stop_ask": "{host} のサーバーを、参加中の全員に対して停止しますか？",
+        "staff_stop_ask_unnamed": "このサーバーを、参加中の全員に対して停止しますか？"
       },
       "collections": {
         "tab": "コレクション",