3 Commits (f43ade79b0defc09c271129b9dc0dadc470dfd21)

Author	SHA1	Message	Date
nexxo	65717bd3bd	fix(engine): address Codex review (auth token bootstrap, tunnel recheck, ssh) ... - CreateAutomationToken now bootstraps the pveum role/user/token over the authenticated SSH session (a fresh host has no API token yet); ProxmoxClient is read-only in A. - ConfigureWireguard re-verifies the handshake on the idempotent replay path, never advancing over a dead tunnel. - PhpseclibRemoteShell treats a missing SSH exit status as failure (255). - connectWithKey verifies the pinned host key fingerprint on later logins. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 10:20:59 +02:00
nexxo	ac3d17cd6a	feat(engine): 11-step host onboarding pipeline (SSH -> WG -> Proxmox) ... Idempotent steps: validate, ssh-trust (deploy key + scrub password), prepare base, wireguard (hub peer), install proxmox-ve, reboot-into-pve (retry-poll), configure, automation token, verify api, register capacity, complete. StartHostOnboarding action. 22 tests incl. mocked end-to-end + crash idempotency. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 10:04:39 +02:00
nexxo	c06ca0ae5d	feat(engine): SSH / WireGuard / Proxmox service layer ... RemoteShell (phpseclib + fake), WireguardHub (local wg + fake), ProxmoxClient (REST + fake). Interfaces bound in AppServiceProvider; tests swap fakes via fakeServices() helper. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 09:58:02 +02:00