host.mw master pushes node installs over SSH — user doesn't have to log into the remote.
Flow
- My Licenses → pick lic → "One-Click Install" modal
- Enter remote SSH host/port/user/creds + optional OTP
- master one_click_install validates lic + signs temp IP-mode token
- Background SSH task pushes install.sh + exec returns immediately (15s)
- install.sh runs nohup'd on the client, reports progress per STEP
- Frontend polls lic/install-progress
SUDO preflight
Probe remote SUDO state before deploy. ROOT direct OK / NOPASSWD sudo OK / password-sudo or no-sudo → reject immediately (prevent polluting home).
OTP design
If remote SSH has 2FA on, NK keeps a single SSH session alive (so OTP not re-prompted each reconnect) + two-stage download/install + keepalive.