chore: extract ShareServer into its own repository

Move the existing Hono API, React console, tests, build configuration,
and feature documentation from GoodBuddy into a standalone project.
Keep the current interactive-prototype behavior and production limitations.

Document the source commit and sibling-checkout links to the authoritative
Desktop network architecture. Independent install, tests, typecheck, lint,
build, and built-service HTTP smoke checks passed.

server/app.test.ts

@@ -0,0 +1,40 @@
+// @vitest-environment node
+import { describe, expect, it } from 'vitest'
+import { app } from './app.js'
+
+describe('ShareServer prototype API', () => {
+  it('reports prototype readiness without claiming production readiness', async () => {
+    const response = await app.request('/api/v1/public/ready')
+    expect(response.status).toBe(200)
+    await expect(response.json()).resolves.toMatchObject({
+      status: 'ready',
+      mode: 'interactive-prototype',
+      productionReady: false
+    })
+  })
+
+  it('returns the organization-scoped console snapshot', async () => {
+    const response = await app.request('/api/v1/web/prototype/snapshot')
+    expect(response.status).toBe(200)
+    await expect(response.json()).resolves.toMatchObject({
+      instance: { organization: 'MesaLab' },
+      pages: {
+        devices: expect.any(Array),
+        approvals: expect.any(Array),
+        myDevices: expect.any(Array)
+      }
+    })
+  })
+
+  it('rejects malformed prototype actions', async () => {
+    const response = await app.request('/api/v1/web/prototype/actions', {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ action: '批准申请' })
+    })
+    expect(response.status).toBe(400)
+    await expect(response.json()).resolves.toMatchObject({
+      code: 'INVALID_PROTOTYPE_ACTION'
+    })
+  })
+})

server/app.ts

@@ -0,0 +1,75 @@
+import { serveStatic } from '@hono/node-server/serve-static'
+import { Hono } from 'hono'
+import { logger } from 'hono/logger'
+import { secureHeaders } from 'hono/secure-headers'
+import { prototypeSnapshot } from '../shared/prototype-data.js'
+
+const app = new Hono()
+
+app.use('*', logger())
+app.use(
+  '*',
+  secureHeaders({
+    contentSecurityPolicy: {
+      defaultSrc: ["'self'"],
+      scriptSrc: ["'self'"],
+      styleSrc: ["'self'", "'unsafe-inline'"],
+      imgSrc: ["'self'", 'data:'],
+      connectSrc: ["'self'"]
+    },
+    crossOriginEmbedderPolicy: false
+  })
+)
+
+app.get('/api/v1/public/health', (context) =>
+  context.json({
+    status: 'ok',
+    service: 'shareserver',
+    version: '0.1.0-prototype.1'
+  })
+)
+
+app.get('/api/v1/public/ready', (context) =>
+  context.json({
+    status: 'ready',
+    mode: 'interactive-prototype',
+    productionReady: false
+  })
+)
+
+app.get('/api/v1/web/prototype/snapshot', (context) =>
+  context.json({
+    ...prototypeSnapshot,
+    instance: {
+      ...prototypeSnapshot.instance,
+      generatedAt: new Date().toISOString()
+    }
+  })
+)
+
+app.post('/api/v1/web/prototype/actions', async (context) => {
+  const body = await context.req.json<{ action?: string; targetId?: string }>().catch(() => null)
+  if (!body?.action || !body.targetId) {
+    return context.json(
+      {
+        code: 'INVALID_PROTOTYPE_ACTION',
+        message: '缺少原型操作或目标对象。',
+        requestId: crypto.randomUUID()
+      },
+      400
+    )
+  }
+
+  return context.json({
+    accepted: true,
+    action: body.action,
+    targetId: body.targetId,
+    prototypeOnly: true,
+    requestId: crypto.randomUUID()
+  })
+})
+
+app.use('*', serveStatic({ root: './dist' }))
+app.get('*', serveStatic({ path: './dist/index.html' }))
+
+export { app }

server/index.ts

@@ -0,0 +1,9 @@
+import { serve } from '@hono/node-server'
+import { app } from './app.js'
+
+const port = Number(process.env.SHARESERVER_PORT ?? 8787)
+const hostname = process.env.SHARESERVER_HOST ?? '127.0.0.1'
+
+serve({ fetch: app.fetch, port, hostname }, (info) => {
+  console.log(`ShareServer interactive prototype listening on http://${hostname}:${info.port}`)
+})