3 Commits (f43ade79b0defc09c271129b9dc0dadc470dfd21)

Author	SHA1	Message	Date
nexxo	f43ade79b0	fix(engine-b): address Codex round 6 (crash-window idempotency) ... - Clone: recover via vmExists() when the task ref was lost, instead of re-cloning the reserved vmid (which Proxmox rejects). - Deploy: persist the DB password ENCRYPTED before compose up and reuse it on retry, so a crash can't regenerate a mismatching credential. - Complete: gate credential delivery on a credentials_sent breadcrumb so a retry after a crash doesn't re-send the email. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 12:23:28 +02:00
nexxo	e2b8f25e78	fix(engine-b): address Codex round 5 (capacity release, activate-last, guest-ip poll, email unique) ... - Failed run releases the instance (status=failed) so its quota stops counting against host capacity. - CompleteProvisioning activates instance+order only AFTER onboarding tasks + credential delivery succeed. - ConfigureNetwork polls until the guest has an address (no wrong Traefik route). - customers.email unique + race-safe customer resolution in the intake action. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 12:19:31 +02:00
nexxo	446da58061	feat(engine-b): 15-step customer pipeline + DNS/Traefik services ... validate->reserve(placement)->clone->cloudinit->start->guestagent->network-> deploy->nextcloud->admin->dns/tls->backup->monitoring->acceptance->complete. HetznerDnsClient + TraefikWriter (interface+fake+real), CloudReady notification, hosts.node (set by RegisterCapacity). Secrets transient/encrypted, never plaintext. 21 tests incl. mocked end-to-end + crash idempotency. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 11:50:26 +02:00