feat: add --port flag to azlin for bastion tunnel reuse (#2897)

[rysweet]

Summary

• Adds --port <N> option to azlin exec and azlin start CLI commands to reuse an existing bastion tunnel instead of creating a new one per SSH session
• VMOptions.tunnel_port stores the port; Executor._azlin_port_args() injects --port <N> into all azlin subcommands (cp, connect, ssh)
• SessionManager._execute_ssh_command accepts optional tunnel_port for the same purpose
• Both .claude/tools/amplihack/remote/ and amplifier-bundle/tools/amplihack/remote/ are kept in sync

Motivation

Currently each azlin connect, azlin cp, and azlin ssh call creates a new bastion tunnel, adding overhead per operation. With --port, users can establish one tunnel upfront and reuse it for the session's lifetime.

Usage

# Establish tunnel externally on port 2222, then reuse it:
amplihack remote exec --port 2222 auto "my task"
amplihack remote start --port 2222 "my task"

Test Plan

• 13 outside-in tests in tests/outside_in/test_bastion_tunnel_reuse.py cover:
  • VMOptions.tunnel_port defaults to None, accepts integer
  • Executor._azlin_port_args() returns [] or ['--port', 'N']
  • transfer_context includes --port in azlin cp command when set
  • check_tmux_status includes --port in azlin connect command when set
  • CLI exec and start accept --port flag without error
  • --port is wired into VMOptions.tunnel_port and Executor(tunnel_port=...)
  • No regression when --port is not provided
• All 13 tests pass: uv run pytest tests/outside_in/test_bastion_tunnel_reuse.py -v

Quality Audit

• Security: tunnel_port is int | None; click validates type=int at CLI boundary; no injection risk
• Simplicity: _azlin_port_args() is a minimal helper eliminating 6 repetitive conditionals
• No dead code: every new line is exercised by tests
• Module boundaries: VMOptions (config) → Executor (executes) → cli.py (wires) — clean
• Backward compatible: all new params default to None; existing callers unaffected

🤖 Generated with Claude Code

[github-actions]

🤖 Auto-fixed version bump

The version in pyproject.toml has been automatically bumped to the next patch version.

If you need a minor or major version bump instead, please update pyproject.toml manually and push the change.

[github-actions]

Repo Guardian - Passed

All files in this PR are durable repository content:

• Python source files implementing the --port flag feature for azlin tunnel reuse
• Test files with proper outside-in test coverage
• Configuration file update (pyproject.toml version bump)

No ephemeral content detected.

AI generated by Repo Guardian

[github-actions]

🤖 Auto-fixed version bump

The version in pyproject.toml has been automatically bumped to the next patch version.

If you need a minor or major version bump instead, please update pyproject.toml manually and push the change.

[github-actions]

Repo Guardian - Passed

All files in this PR are durable repository content:

• Python source files implementing the --port flag feature for azlin tunnel reuse
• Test files with proper outside-in test coverage
• Configuration file update (pyproject.toml version bump)

No ephemeral content detected.

AI generated by Repo Guardian

AI generated by Repo Guardian