feat: add ECC2 local control pane (#2131)

* feat: add ECC2 local control pane

* fix: refresh control pane package locks

* test: harden control pane coverage

* test: allow portable control pane shutdown

* test: retry local control pane fetches

* fix: harden control pane error handling

* fix: wrap control pane metadata

scripts/control-pane.js

@@ -0,0 +1,65 @@
+#!/usr/bin/env node
+'use strict';
+
+const { spawn } = require('child_process');
+
+const {
+  createControlPaneServer,
+  parseArgs,
+  usage,
+} = require('./lib/control-pane/server');
+
+function openBrowser(url) {
+  if (process.platform !== 'darwin') return;
+  const child = spawn('open', [url], {
+    stdio: 'ignore',
+    detached: true,
+  });
+  child.on('error', error => {
+    console.error(`[control-pane] failed to open browser: ${error.message}`);
+  });
+  child.unref();
+}
+
+async function main(argv = process.argv) {
+  const args = parseArgs(argv);
+
+  if (args.help) {
+    console.log(usage());
+    return;
+  }
+
+  const app = createControlPaneServer(args);
+  await app.listen();
+
+  console.log(`ECC Control Pane: ${app.url}`);
+  console.log(`ECC2 database: ${app.config.dbPath}`);
+  console.log(args.allowActions ? 'Actions: enabled for local allowlist' : 'Actions: read-only');
+
+  if (args.openBrowser) {
+    openBrowser(app.url);
+  }
+
+  const shutdown = async () => {
+    try {
+      await app.close();
+    } finally {
+      process.exit(0);
+    }
+  };
+
+  process.on('SIGINT', shutdown);
+  process.on('SIGTERM', shutdown);
+}
+
+if (require.main === module) {
+  main().catch(error => {
+    console.error(`[control-pane] ${error.message}`);
+    process.exit(1);
+  });
+}
+
+module.exports = {
+  main,
+  openBrowser,
+};