3 Commits (2b2bb439a5efe330cd9c7a9f2de660c367c034e0)

Author	SHA1	Message	Date
nexxo	f43ade79b0	fix(engine-b): address Codex round 6 (crash-window idempotency) ... - Clone: recover via vmExists() when the task ref was lost, instead of re-cloning the reserved vmid (which Proxmox rejects). - Deploy: persist the DB password ENCRYPTED before compose up and reuse it on retry, so a crash can't regenerate a mismatching credential. - Complete: gate credential delivery on a credentials_sent breadcrumb so a retry after a crash doesn't re-send the email. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 12:23:28 +02:00
nexxo	fffcecb152	fix(engine-b): address Codex round 3 (webhook email/replay/rotation, db secret) ... - Require a real customer email (no unknown@ fallback merging customers). - Stripe signature: enforce 5-min replay tolerance + accept any rotating v1. - DeployApplicationStack no longer persists the DB password in the run context. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 12:12:24 +02:00
nexxo	446da58061	feat(engine-b): 15-step customer pipeline + DNS/Traefik services ... validate->reserve(placement)->clone->cloudinit->start->guestagent->network-> deploy->nextcloud->admin->dns/tls->backup->monitoring->acceptance->complete. HetznerDnsClient + TraefikWriter (interface+fake+real), CloudReady notification, hosts.node (set by RegisterCapacity). Secrets transient/encrypted, never plaintext. 21 tests incl. mocked end-to-end + crash idempotency. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 11:50:26 +02:00