Add native host management and role-based operator authentication

Introduce an outbound Python host agent, Debian installer, durable remote
operations, immutable game-file libraries, host-aware deployments and ports,
and occupancy-safe campaigns and draining. Native hosts do not require Komodo.

Add administrator, operator and viewer accounts, protected management routes,
secure sessions, password recovery, audit history and separate telemetry tokens.
Document first-admin setup, reporter migration and live-host acceptance checks.

Validation: 1,343 TypeScript tests and 39 agent tests passed, along with type
checking, the production build, compiled SSR/API smoke tests and administrator
recovery. Real Debian/Docker T5/T6 acceptance remains unrun.

src/routes/api/servers/+server.ts

@@ -7,17 +7,24 @@ import { queueCreateServer } from '$lib/server/provisioning/index.js';
 import { config, komodoConfigured, rconConfigured } from '$lib/server/config.js';
 import type { GameMode, ZombieGame } from '$lib/server/fleet/map-aliases.js';
 import { runningVersions } from '$lib/server/integrations/plutonium.js';
+import { listHosts } from '$lib/server/hosts/index.js';
+import { nativeInstance } from '$lib/server/backends/native.js';
 
 export async function GET() {
     const rconHost = config.rcon.host;
+    const hosts = listHosts();
+    const hostsById = new Map(hosts.map(host => [host.id, host]));
     const versions = new Map(runningVersions().map(version => [version.server, version]));
     const servers = listServers().map((s) => {
+        const instance = s.native_instance_id ? nativeInstance(s.name) : null;
         return {
             ...serverObservation(s),
+            host: s.host_id ? hostsById.get(s.host_id) ?? null : null,
+            network: instance ? { bindAddress: instance.bind_address, localPort: instance.port, publicAddress: instance.public_address, publicPort: instance.public_port } : null,
             plutonium: versions.get(s.name),
             // Derived endpoint — same logic as endpointFor() but without asking
             // Komodo. If we don't have a port yet, endpoint is null.
-            endpoint: s.game_port ? { host: s.rcon_host ?? rconHost, port: s.game_port } : null,
+            endpoint: instance ? { host: `agent:${instance.host_id}`, port: instance.port } : s.game_port ? { host: s.rcon_host ?? rconHost, port: s.game_port } : null,
             held: [...heldByBeta(s.name).entries()].map(([target, betaId]) => ({ target, betaId }))
         };
     });
@@ -26,6 +33,9 @@ export async function GET() {
         serverNow: Date.now(),
         reservedNames: (db().prepare("SELECT j.server FROM server_creation_jobs j JOIN server_deployments d ON d.id = j.deployment_id WHERE d.state IN ('queued', 'running', 'awaiting-health')").all() as { server: string }[]).map(row => row.server),
         integrations: {
+            native: hosts.length > 0 || !komodoConfigured(),
+            hostsReady: hosts.filter(host => host.readiness === 'ready').length,
+            hostsTotal: hosts.length,
             rcon: rconConfigured(),
             komodo: komodoConfigured(),
             rconTimeoutMs: config.rcon.timeoutMs,
@@ -36,6 +46,7 @@ export async function GET() {
 
 export async function POST({ request }: { request: Request }) {
     const body = (await request.json().catch(() => ({}))) as {
+        hostId?: string; libraryId?: string; image?: string; bindAddress?: string; publicAddress?: string; publicPort?: number;
         game?: string;
         gameMode?: string;
         mapSlug?: string;
@@ -56,7 +67,7 @@ export async function POST({ request }: { request: Request }) {
         plutoKey: body.plutoKey,
         expectedName: body.expectedName,
         previewId: body.previewId,
-        createdBy: 'ui'
+        createdBy: 'ui', hostId: body.hostId, libraryId: body.libraryId, image: body.image, bindAddress: body.bindAddress, publicAddress: body.publicAddress, publicPort: body.publicPort
     });
     if (!result.ok) {
         const status = result.kind === 'bad-request' ? 400 : result.kind === 'unconfigured' ? 503