feat: add /deploy-plugins webhook route + deploy-plugins script

2026-08-17 00:05:55 +02:00
parent eca81ae9af
commit 22fe1526ca
42 changed files with 342 additions and 8156 deletions
--- a/internal/adapters/postgres/governance.go
+++ b/internal/adapters/postgres/governance.go
@@ -64,8 +64,9 @@ func (g *GovernanceRepo) AssentWindowActive(ctx context.Context, agentID domain.
 }

 // DestructiveWindowActive checks the target+session-scoped destructive
-// window key. Key format must match cmd/nomos/store.go's
-// openDestructiveWindow — both processes read/write the same rows.
+// window key. Key format must match the writer in approvals.go
+// (openDestructiveWindow) — same rows, same format:
+// "destructive_window.agent:<id>.target:<slug>".
 func (g *GovernanceRepo) DestructiveWindowActive(ctx context.Context, agentID domain.UUID, targetSlug, sessionID string) bool {
 	if agentID == "" || targetSlug == "" || sessionID == "" {
 		return false // fail closed