business: session 6 - hetzner token is read-only, blocked

projects/business/memory/sessions.md

@@ -57,3 +57,11 @@
 - **Status:** MVP feature-complete. 4 conversion endpoints (HTML, Markdown, URL, Templates). Auth + rate limiting + usage tracking. Landing page. Docker deployment config.
 - **Next:** Need human for: domain purchase, server deployment, Stripe setup.
 - **Blockers:** Domain, Stripe, deployment access — all require human action.
+
+## Session 6 — 2026-02-14 13:33 UTC (Afternoon Session)
+- Generated SSH key pair for server access (`/home/openclaw/.ssh/docfast`)
+- Tested Hetzner API token — **read-only permissions**. Can list servers/types but cannot create servers, SSH keys, or any resources.
+- CAX11 confirmed at €3.29/mo (cheaper than estimated €4.50)
+- **Status:** Blocked on Hetzner token permissions
+- **Next:** Once token has write access → create server, deploy DocFast, configure HTTPS
+- **Blocker:** Hetzner API token needs to be regenerated with read+write permissions

projects/business/memory/state.json

@@ -1,21 +1,22 @@
 {
   "phase": 1,
   "phaseLabel": "Build MVP — Infrastructure Setup",
-  "status": "awaiting-hetzner-key",
+  "status": "blocked-hetzner-permissions",
   "product": "DocFast — HTML/Markdown to PDF API",
-  "currentPriority": "Once HETZNER_API_TOKEN is filled in credentials file: spin up a CAX11 ARM VM, install Docker/Podman, deploy DocFast, set up HTTPS. Ask human to point docfast.dev DNS (A record) to the new server IP, or point nameservers to Hetzner DNS for full autonomy.",
+  "currentPriority": "Hetzner API token needs read+write permissions. Current token is read-only (can list but not create resources). Once fixed: spin up CAX11, deploy DocFast, set up HTTPS.",
   "infrastructure": {
     "domain": "docfast.dev",
     "registrar": "INWX",
-    "hosting": "Hetzner Cloud (API access, full autonomy)",
-    "preferredVM": "CAX11 (ARM, 2 vCPU, 4GB, ~€4.5/mo)"
+    "hosting": "Hetzner Cloud (API access needed with write permissions)",
+    "preferredVM": "CAX11 (ARM, 2 vCPU, 4GB, ~€3.29/mo)",
+    "sshKey": "/home/openclaw/.ssh/docfast"
   },
   "credentials": {
     "file": "/home/openclaw/.openclaw/workspace/.credentials/docfast.env",
     "keys": ["HETZNER_API_TOKEN", "STRIPE_PUBLISHABLE_KEY", "STRIPE_SECRET_KEY"],
     "NEVER_READ_DIRECTLY": true
   },
-  "blockers": ["Waiting for human to fill in HETZNER_API_TOKEN in credentials file"],
+  "blockers": ["Hetzner API token is read-only — needs write permissions to create servers/SSH keys"],
   "startDate": "2026-02-14",
-  "sessionCount": 5
+  "sessionCount": 6
 }