feat: make each plugin an npm workspace built by a termix-plugin CLI

plugins/proxmox/tests/backend/proxmox-sudo.test.ts

@@ -0,0 +1,52 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import type { Client } from "ssh2";
+
+const execElevated = vi.fn();
+vi.mock(
+  "../../../../src/backend/hosts/metrics-shared/exec-elevated.js",
+  () => ({
+    execElevated: (...args: unknown[]) => execElevated(...args),
+  }),
+);
+
+const { execPveshCommand } = await import("../../src/backend/routes.js");
+
+const client = {} as Client;
+
+describe("Proxmox discovery sudo execution", () => {
+  beforeEach(() => {
+    execElevated.mockReset();
+  });
+
+  it("forces pvesh through the stored sudo credentials", async () => {
+    execElevated.mockResolvedValue({
+      stdout: '[{"type":"qemu"}]',
+      stderr: "",
+      code: 0,
+      usedSudo: true,
+    });
+
+    await expect(
+      execPveshCommand(client, "pvesh get /cluster/resources", "secret", 12000),
+    ).resolves.toBe('[{"type":"qemu"}]');
+    expect(execElevated).toHaveBeenCalledWith(
+      client,
+      "pvesh get /cluster/resources",
+      "secret",
+      { forceSudo: true, timeoutMs: 12000 },
+    );
+  });
+
+  it("surfaces a failed elevated pvesh command", async () => {
+    execElevated.mockResolvedValue({
+      stdout: "",
+      stderr: "pvesh failed",
+      code: 255,
+      usedSudo: true,
+    });
+
+    await expect(
+      execPveshCommand(client, "pvesh get /cluster/resources", "secret"),
+    ).rejects.toThrow("pvesh failed");
+  });
+});