feat: move proxmox discovery/import/sync into a first-party plugin

src/backend/tests/plugins/first-party.test.ts

@@ -39,20 +39,22 @@ function manifest(overrides: Record<string, unknown> = {}) {
 }
 
 describe("first-party allowlist", () => {
-  it("contains only ssh-terminal, docker, host-metrics and ai", () => {
+  it("contains only ssh-terminal, docker, host-metrics, ai and proxmox", () => {
     expect([...FIRST_PARTY_PLUGIN_IDS].sort()).toEqual([
       "ai",
       "docker",
       "host-metrics",
+      "proxmox",
       "ssh-terminal",
     ]);
   });
 
-  it("recognises ssh-terminal, docker, host-metrics and ai and nothing else", () => {
+  it("recognises ssh-terminal, docker, host-metrics, ai and proxmox and nothing else", () => {
     expect(isFirstParty("ssh-terminal")).toBe(true);
     expect(isFirstParty("docker")).toBe(true);
     expect(isFirstParty("host-metrics")).toBe(true);
     expect(isFirstParty("ai")).toBe(true);
+    expect(isFirstParty("proxmox")).toBe(true);
     expect(isFirstParty("ssh-terminal-pro")).toBe(false);
     expect(isFirstParty("community-plugin")).toBe(false);
     expect(isFirstParty("")).toBe(false);
@@ -69,6 +71,7 @@ describe("runsInProcess", () => {
       true,
     );
     expect(runsInProcess("ai", [TRANSPORT_OWNER_CAPABILITY])).toBe(true);
+    expect(runsInProcess("proxmox", [TRANSPORT_OWNER_CAPABILITY])).toBe(true);
 
     // On the list but not asking for it: stays in a worker, so the manifest
     // remains an honest description of what the plugin does.
@@ -76,6 +79,7 @@ describe("runsInProcess", () => {
     expect(runsInProcess("docker", ["hosts.read"])).toBe(false);
     expect(runsInProcess("host-metrics", ["hosts.read"])).toBe(false);
     expect(runsInProcess("ai", ["hosts.read"])).toBe(false);
+    expect(runsInProcess("proxmox", ["hosts.read"])).toBe(false);
 
     // Asking for it but not on the list.
     expect(
@@ -155,6 +159,18 @@ describe("manifest gate on the reserved capability", () => {
     expect(parsed?.id).toBe("ai");
   });
 
+  it("allows it for proxmox", () => {
+    const { manifest: parsed, errors } = parseManifest(
+      manifest({
+        id: "proxmox",
+        permissions: [TRANSPORT_OWNER_CAPABILITY],
+      }),
+    );
+
+    expect(errors).toEqual([]);
+    expect(parsed?.id).toBe("proxmox");
+  });
+
   it("still accepts an ordinary manifest that never mentions it", () => {
     const { manifest: parsed, errors } = parseManifest(
       manifest({ permissions: ["hosts.read"] }),

src/backend/tests/plugins/proxmox/proxmox-import-auth.test.ts

@@ -1,8 +1,8 @@
 import { describe, expect, it } from "vitest";
-import { resolveProxmoxImportAuth } from "../../../database/routes/proxmox-import-auth.js";
+import { resolveProxmoxImportAuth } from "../../../../../plugins/proxmox/backend/proxmox-import-auth.js";
 
 // The frontend carries its own copy of this decision in
-// src/ui/components/proxmox/proxmox-import-auth.ts. The two drifting apart is
+// plugins/proxmox/frontend/proxmox-import-auth.ts. The two drifting apart is
 // what produced the reported bug, so both are held to the same matrix.
 describe("resolveProxmoxImportAuth", () => {
   it("uses the default credential for key auth when one is configured", () => {

src/backend/tests/plugins/proxmox/proxmox-jump-hosts.test.ts

@@ -2,7 +2,7 @@ import { describe, expect, it } from "vitest";
 import {
   parseProxmoxJumpHosts,
   serializeProxmoxJumpHosts,
-} from "../../../database/routes/proxmox-jump-hosts.js";
+} from "../../../../../plugins/proxmox/backend/proxmox-jump-hosts.js";
 
 describe("Proxmox jump-host persistence", () => {
   const jumpHosts = [{ hostId: 7 }, { hostId: 9 }];

src/backend/tests/plugins/proxmox/proxmox-sudo.test.ts

@@ -6,7 +6,8 @@ vi.mock("../../../hosts/metrics-shared/exec-elevated.js", () => ({
   execElevated: (...args: unknown[]) => execElevated(...args),
 }));
 
-import { execPveshCommand } from "../../../database/routes/proxmox.js";
+const { execPveshCommand } =
+  await import("../../../../../plugins/proxmox/backend/routes.js");
 
 const client = {} as Client;