Add native host management and role-based operator authentication

Introduce an outbound Python host agent, Debian installer, durable remote
operations, immutable game-file libraries, host-aware deployments and ports,
and occupancy-safe campaigns and draining. Native hosts do not require Komodo.

Add administrator, operator and viewer accounts, protected management routes,
secure sessions, password recovery, audit history and separate telemetry tokens.
Document first-admin setup, reporter migration and live-host acceptance checks.

Validation: 1,343 TypeScript tests and 39 agent tests passed, along with type
checking, the production build, compiled SSR/API smoke tests and administrator
recovery. Real Debian/Docker T5/T6 acceptance remains unrun.

src/routes/hosts/+page.svelte

@@ -0,0 +1,52 @@
+<script lang="ts">
+    import { onMount } from 'svelte';
+    import { page } from '$app/stores';
+    import type { Host } from '$lib/hosts.js';
+    import SectionHeader from '$ui/components/primitives/SectionHeader.svelte';
+    import Button from '$ui/components/primitives/Button.svelte';
+    let hosts = $state<Host[]>([]);
+    let loading = $state(true); let busy = $state(false); let error = $state('');
+    let name = $state(''); let portMin = $state(28960); let portMax = $state(28980);
+    let enrollment = $state<{ command: string; expiresAt: string; hostId: string } | null>(null);
+    const canManage = $derived($page.data.user?.role === 'admin');
+    async function load() {
+        try { const response = await fetch('/api/hosts'); const body = await response.json(); if (!response.ok) throw new Error(body.error ?? 'Could not load hosts.'); hosts = body.hosts; }
+        catch (cause) { error = (cause as Error).message; } finally { loading = false; }
+    }
+    async function add(event: SubmitEvent) {
+        event.preventDefault(); busy = true; error = ''; enrollment = null;
+        try {
+            const response = await fetch('/api/hosts', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ name, portMin, portMax }) });
+            const body = await response.json(); if (!response.ok) throw new Error(body.error ?? 'Could not add host.');
+            enrollment = body.enrollment; name = ''; await load();
+        } catch (cause) { error = (cause as Error).message; } finally { busy = false; }
+    }
+    onMount(() => { void load(); const timer = setInterval(() => { void load(); }, 15000); return () => clearInterval(timer); });
+</script>
+
+<svelte:head><title>Hosts · Electric Cherry</title></svelte:head>
+<section class="page">
+    <SectionHeader title="Hosts" subtitle="Connect game-server hosts and prepare them for deployment." />
+    {#if error}<p role="alert" class="ui-error">{error}</p>{/if}
+    {#if canManage}<section class="panel">
+        <h2>Add host</h2><p>Run the installation command on a Debian 12 or 13 amd64 machine. Each host connects to this controller over HTTPS.</p>
+        <form onsubmit={add}><fieldset disabled={busy}>
+            <label>Friendly name<input required maxlength="200" bind:value={name} placeholder="Game host 1" /></label>
+            <label>First game port<input type="number" required min="1" max="65535" bind:value={portMin} /></label>
+            <label>Last game port<input type="number" required min={portMin} max="65535" bind:value={portMax} /></label>
+            <Button type="submit" disabled={busy}>{busy ? 'Creating…' : 'Add host'}</Button>
+        </fieldset></form>
+        {#if enrollment}<div class="enrollment" role="status"><h3>Install the agent</h3><p>This single-use command expires {new Date(enrollment.expiresAt).toLocaleString()}. Run it with administrator access on your game host.</p><pre>{enrollment.command}</pre><a href={`/hosts/${enrollment.hostId}`}>Open host setup →</a></div>{/if}
+    </section>{:else}<p>Administrators manage host setup, runtime preparation, and credentials.</p>{/if}
+    {#if loading}<p role="status">Loading hosts…</p>{:else if !hosts.length}<p>No hosts connected yet.{canManage ? ' Add a host to begin.' : ''}</p>{:else}
+        <div class="host-grid">{#each hosts as host}<a class="panel host" href={`/hosts/${host.id}`}><div class="row"><h2>{host.name}</h2><span class:ready={host.readiness === 'ready'} class="state">{host.readiness}</span></div><p>{host.hostname || 'Awaiting enrollment'} · {host.connectionState}</p><p>{host.inventory.os ?? 'OS pending'} · {host.inventory.architecture ?? 'Architecture pending'}</p><p>Game ports {host.portMin}–{host.portMax}</p>{#if host.readinessReasons.length}<p class="reason">{host.readinessReasons[0]}</p>{/if}</a>{/each}</div>
+    {/if}
+</section>
+
+<style>
+    .page { display:grid; gap:24px; } .panel { border:1px solid var(--border-strong); border-radius:var(--radius-md); background:var(--surface); padding:24px; }
+    h2 { font-size:var(--text-md); margin:0; } h3 { font-size:var(--text-sm); } p { color:var(--text-secondary); line-height:1.6; font-size:var(--text-sm); }
+    fieldset { display:flex; gap:16px; flex-wrap:wrap; align-items:end; border:0; padding:0; margin-top:20px; } label { display:grid; gap:8px; font-size:var(--text-sm); } input { width:100%; max-width:280px; padding:10px; color:var(--text-primary); background:var(--surface-sunken); border:1px solid var(--border-control); border-radius:var(--radius-sm); }
+    pre { white-space:pre-wrap; overflow-wrap:anywhere; padding:16px; background:var(--surface-sunken); font-size:var(--text-sm); } .enrollment { border-top:1px solid var(--border-subtle); margin-top:24px; padding-top:16px; }
+    .host-grid { display:grid; grid-template-columns:repeat(auto-fit,minmax(300px,1fr)); gap:16px; } .host { text-decoration:none; color:inherit; } .host:hover { border-color:var(--accent-primary); } .row { display:flex; justify-content:space-between; gap:16px; } .state { font-size:var(--text-xs); text-transform:capitalize; color:var(--text-secondary); } .ready { color:var(--accent-primary); } .reason { margin-bottom:0; }
+</style>