fix: make server discovery and audits read-only

src/main/ipc.cjs

@@ -1244,6 +1244,31 @@ function registerIpc({
     }
     return results;
   });
+  register("deployment:plan-server-reconciliation", async ({ serverId }) => {
+    const repositoryList = await repositories.refresh();
+    const remoteRepositories = repositoryList.filter((repository) => repository.owner?.login !== "local");
+    const result = await unraid.planServerInventoryReconciliation(serverId, remoteRepositories, { autoLink: true });
+    await audit.append("deployment.server-reconciliation-planned", {
+      serverId,
+      planId: result.plan.id,
+      summary: result.plan.summary,
+    });
+    return result;
+  });
+  register("deployment:apply-server-reconciliation", async ({ serverId, planId }) => {
+    const repositoryList = await repositories.refresh();
+    const remoteRepositories = repositoryList.filter((repository) => repository.owner?.login !== "local");
+    const result = await unraid.reconcileServerInventory(serverId, remoteRepositories, { autoLink: true, expectedPlanId: planId });
+    await audit.append("deployment.server-reconciliation-applied", {
+      serverId,
+      planId,
+      adopted: result.adopted,
+      refreshed: result.refreshed,
+      retired: result.retired,
+      recoverySnapshot: result.recoverySnapshot?.filePath || null,
+    });
+    return { ...result, state: store.getPublicState() };
+  });
   register("deployment:profile-state", async ({ fullName, profileId }) => {
     const profile = store.getDeploymentProfile(fullName, profileId);
     if (profile?.provider === "ssh-unraid") {