feat(api): add fleet snapshots and durable event stream

apps/api/src/control-plane.ts

@@ -1,11 +1,12 @@
 import type Database from 'better-sqlite3';
+import { EventJournal } from './application/events/event-journal.js';
 import { registerOperationRoutes } from './interface/http/operation-routes.js';
 import { operationCatalogRegistry } from './application/operations/operation-catalog-data.js';
 import {
   SecureOperationExecution,
   secureOperationRegistry,
 } from './application/operations/secure-operation-execution.js';
-import type { FastifyInstance } from 'fastify';
+import type { FastifyInstance, FastifyRequest } from 'fastify';
 import { buildApp, type BuildAppOptions } from './app.js';
 import {
   ConnectionProbe,
@@ -22,6 +23,7 @@ import { InstanceService } from './application/instances/instance-service.js';
 import { DeleteInstanceOperation } from './application/operations/delete-instance-operation.js';
 import type { SecretStore } from './infrastructure/secrets/secret-store.js';
 import { registerInstanceRoutes } from './interface/http/instance-routes.js';
+import { registerEventRoutes } from './interface/http/event-routes.js';
 
 export interface SafeControlPlaneUpstream extends ConnectionTransport {
   request: UpstreamSessionClientOptions['request'];
@@ -32,12 +34,14 @@ export interface ControlPlaneOptions {
   readonly store: SecretStore;
   readonly upstream: SafeControlPlaneUpstream;
   readonly now?: () => Date;
+  readonly authenticateEventStream?: (request: FastifyRequest) => boolean;
   readonly app?: Omit<BuildAppOptions, 'registerRoutes'>;
 }
 export interface ControlPlaneApp extends FastifyInstance {
   retryPendingSecretCleanup(): Promise<unknown>;
 }
 export function buildControlPlaneApp(options: ControlPlaneOptions): ControlPlaneApp {
+  const eventJournal = new EventJournal(options.db);
   const instances = options.now
     ? new InstanceService({ db: options.db, store: options.store, now: options.now })
     : new InstanceService({ db: options.db, store: options.store });
@@ -82,6 +86,12 @@ export function buildControlPlaneApp(options: ControlPlaneOptions): ControlPlane
         registerDeletionPreparationRoute: false,
       });
       registerOperationRoutes(app, operationCatalogRegistry, secureExecution, deletion);
+      registerEventRoutes(app, {
+        journal: eventJournal,
+        ...(options.authenticateEventStream
+          ? { authenticate: options.authenticateEventStream }
+          : {}),
+      });
     },
   });
   Object.assign(app, {