feat(ssl): Add domain & certificate management, Cloudflare sync, SQLite cert manager, WebSocket realtime updates, and HTTP API SSL endpoints

.claude/CLAUDE.md

@@ -36,6 +36,24 @@ Common mistakes to avoid:
   - `ts/classes/` - All class implementations
   - `ts/` - Root level utilities (logging, types, plugins, cli, info)
 
+### WebSocket Real-time Communication
+- **Backend**: WebSocket endpoint at `/api/ws` (`ts/classes/httpserver.ts:96-174`)
+  - Connection management with client Set tracking
+  - Broadcast methods: `broadcast()`, `broadcastServiceUpdate()`, `broadcastServiceStatus()`
+  - Integrated with service lifecycle (start/stop/restart actions)
+  - Status monitoring loop broadcasts changes automatically
+- **Frontend**: Angular WebSocket service (`ui/src/app/core/services/websocket.service.ts`)
+  - Auto-connects on app initialization
+  - Exponential backoff reconnection (max 5 attempts)
+  - RxJS Observable-based message streaming
+  - Components subscribe to real-time updates
+- **Message Types**:
+  - `connected` - Initial connection confirmation
+  - `service_update` - Service lifecycle changes (action: created/updated/deleted/started/stopped)
+  - `service_status` - Real-time status changes from monitoring loop
+  - `system_status` - System-wide updates
+- **Testing**: Use `.nogit/test-ws-updates.ts` to monitor WebSocket messages
+
 ### Docker Configuration
 - **System Docker**: Uses root Docker at `/var/run/docker.sock` (NOT rootless)
 - **Swarm Mode**: Enabled for service orchestration