OWP Tencent CVM

WHMCS Tencent Cloud CVM provisioning suite -- a paired server module and addon module for selling, provisioning, and managing Tencent Cloud CVM instances from WHMCS.

---

Status

This repository is in the v0.8.5 CVM/EIP association readiness hardening stage. It now contains the paired WHMCS server module and addon module layout, shared PHP library loader, idempotent addon table creation, a customer control panel, a self-contained Tencent Cloud API 3.0 client, encrypted credential storage, and admin-side sellable template CRUD with read-only template validation.

CreateAccount is wired with dry-run enabled by default, validated-template gating, Tencent ClientToken idempotency, instance persistence, guarded suspend/unsuspend/terminate, guarded password reset, package-change rejection policy, read-only status sync, and a customer-facing control panel modeled from the accepted design. Release-package docs now cover manual WHMCS upload, operator checklists, and a starter Tencent Cloud CAM policy. Reinstall remains blocked until a later explicit policy switch. Customer and admin POST actions include module-owned CSRF tokens. Resource templates can leave VPC, subnet, and security group IDs blank so the module can auto-create or reuse shared network resources at provisioning time. Auto-created resource names use the admin-configurable prefix owp-whmcs by default. Templates can also choose direct public IP, Elastic IP, or Anycast Elastic IP modes; EIP-based modes now wait for Tencent Cloud to report the allocated address as UNBIND before calling AssociateAddress. CreateAccount also verifies that the RunInstances instance ID exists before persisting it, and only switches to a differentiated ClientToken when Tencent Cloud idempotency returns a terminated ghost instance. EIP association waits for the target CVM to become RUNNING, and retries can reuse a recorded allocated-but-unbound EIP instead of skipping the service.

• modules/servers/owp_tencentcvm/: WHMCS provisioning module for service lifecycle and client-area controls.
• modules/addons/owp_tencentcvm/: WHMCS addon module for admin-side Tencent Cloud credentials, sellable templates, resource policy, logs, and recovery tools.

No Tencent Cloud credentials, WHMCS production values, customer data, or deployment secrets belong in this repository.

See ROADMAP.md for the staged implementation plan, PR/version rules, and design-prompt workflow.

---

Target Features

Area	Scope
Provisioning	Create Tencent Cloud CVM instances after paid WHMCS orders, store InstanceId, EIP IDs, public IPs, region, image, and template metadata.
Lifecycle	Start, stop, reboot, reset password, suspend, unsuspend, terminate, and poll async operation status.
Client area	Product-detail page controls for power actions, password reset, VNC/console link, instance status, IPs, and operation history.
Admin addon	Configure Tencent Cloud API credentials, regions, zones, instance templates, images, optional VPC/subnet/security group IDs, public IP mode, dry-run mode, and module logs.
Safety	CAM least-privilege credentials, no hardcoded secrets, idempotent create flow, operation audit log, destructive-action confirmation.
Packaging	Public white-label package following the ONC-style README, VERSION, CHANGELOG, and MIT license pattern.

---

Architecture

WHMCS order/payment/cron
        |
        v
modules/servers/owp_tencentcvm
        |
        | shared lib + database tables
        v
modules/addons/owp_tencentcvm
        |
        v
Tencent Cloud CVM API
        |
        v
Customer CVM instance

The module should call Tencent Cloud API 3.0 directly with a small self-contained client for the CVM actions required by this package. This keeps WHMCS installation simple and avoids requiring Composer on production systems.

---

Directory Structure

docs/
  INSTALL.md
  CAM_POLICY.md
  RELEASE.md
  TENCENT_API.md
  design/
    client-area-prompt.md
    admin-addon-prompt.md
    admin-addon-revision-prompt.md
modules/
  servers/owp_tencentcvm/
    owp_tencentcvm.php
    clientarea.tpl
    lib/
      AdminPage.php
      ConfigStore.php
      CsrfGuard.php
      ClientAreaController.php
      ElasticIpManager.php
      LifecycleManager.php
      NetworkResourceManager.php
      Provisioner.php
      TemplateValidator.php
      TencentClient.php
      TencentApiException.php
      TencentResponse.php
      Schema.php
      Config.php
      Templates.php
      Instances.php
      Operations.php
      Redactor.php
  addons/owp_tencentcvm/
    owp_tencentcvm.php
install/
  schema.sql

Install

See docs/INSTALL.md for the manual WHMCS upload and activation checklist.

See docs/TENCENT_API.md for the bundled Tencent Cloud API client behavior and safety boundaries.

See docs/RELEASE.md for the release package checklist and manual operator validation path.

See docs/CAM_POLICY.md for a starter Tencent Cloud CAM policy.

Design Workflow

Customer and admin pages are designed with external design-tool prompts before implementation:

• docs/design/client-area-prompt.md
• docs/design/admin-addon-prompt.md
• docs/design/admin-addon-revision-prompt.md

Use the full prompt for the first Claude Design artifact. For later iterations inside the same Claude Design conversation, use the revision prompt so Claude can modify the current artifact instead of rebuilding the page from scratch.

---

Local Secrets

Use SECRETS.local.md in the local project directory for private notes such as Tencent Cloud SecretId, SecretKey, region choices, test service IDs, and WHMCS deployment values.

That file is ignored by git and must never be copied into issues, pull requests, logs, screenshots, or public docs.

---

License

MIT (c) 2026 wingsrabbit