[nicosuave]

ATM's HTTP-mode Classic ELB rejects the gallery WebSocket upgrade. The client refreshed on failed reconnects, remounted the empty library, and moved content when connection status changed. Native Worker apps were also unavailable because the existing celld provider supported a single host rather than ATM's bucket-backed fleet.

Use an authenticated HTTP event stream for hosted live updates, reconcile missed changes without clearing the loaded view or dirty editors, and keep connection/copy feedback in stable layout slots. Refine onboarding, Secrets, request and schedule forms within the existing gallery UI.

Add a celld-fleet provider with one authenticated publisher for app and host updates. It preserves Artifacts as the default Worker, app-owned native resources, and the deployment registry in the fleet bucket. Native service bindings carry requests; app cron handlers run in their own environments. Publication checks adoption on all nodes and retains reconciliation state after interruption. Build and publish matching runtime and publisher Docker targets.

Validated locally:

• Type checks and minified Cloudflare dry-run build.
• 223 unit tests, 48 browser tests, rendered onboarding and Secrets screenshots.
• Actual celld HTTP event stream and two-node S3-backed fleet tests covering storage, queues, cron delivery, admission, credential stripping, host/app updates, and node/publisher restart. Repeated with a node polling every 15 seconds to cover HTTP publication timeouts.
• Runtime-container persistence and authenticated publisher-image release checks.

Production is unchanged. The separate ATM manifests PR must use matching published images from the merged source commit before rollout. Public app WebSockets still require an ingress that supports upgrades.