phase 3-4: get_execution_status tool, approval creation, delete bin/ + homelab.go, update AGENTS.md

internal/mcp/server.go

@@ -336,6 +336,34 @@ func newServer(pool *db.Pool, agentID uuid.UUID) *mcp.Server {
 		}
 	})
 
+	register(&mcp.Tool{Name: "get_execution_status", Description: "Check the status of a requested execution",
+		InputSchema: objSchema(
+			prop{"execution_id", "string", "Execution UUID (from request_execution output)"},
+		),
+	}, func(ctx context.Context, req *mcp.CallToolRequest) (*mcp.CallToolResult, error) {
+		args := argsMap(req)
+		execID, _ := args["execution_id"].(string)
+		if execID == "" {
+			return textResult("execution_id required"), nil
+		}
+		eid, err := uuid.Parse(execID)
+		if err != nil {
+			// Try finding by exec slug prefix
+			var found uuid.UUID
+			err2 := pool.QueryRow(ctx, "SELECT entity_id FROM executions WHERE entity_id::text LIKE $1 LIMIT 1", execID+"%").Scan(&found)
+			if err2 != nil {
+				return textResult(fmt.Sprintf("execution not found: %s", execID)), nil
+			}
+			eid = found
+		}
+		return queryRows(ctx, pool, `
+			SELECT e.entity_id::text, e.action, e.risk_class, e.status,
+			       e.result::text, e.duration_ms, e.started_at::text,
+			       e.completed_at::text, e.correlation_id
+			FROM executions e
+			WHERE e.entity_id = $1`, eid), nil
+	})
+
 	register(&mcp.Tool{Name: "get_trend", Description: "Get metric trends for an entity",
 		InputSchema: objSchema(
 			prop{"entity_id", "string", "Entity slug"},
@@ -777,4 +805,15 @@ func resolveHost(ctx context.Context, pool *db.Pool, entitySlug string) (hostIP
 		}
 	}
 	return "", "", fmt.Errorf("no IP found for %s", entitySlug)
+}
+
+func createApproval(ctx context.Context, pool *db.Pool, execID, targetID uuid.UUID, action, params, riskClass string) {
+	approvalID, _ := uuid.NewV7()
+	payload := fmt.Sprintf(`{"action":"%s","params":"%s","execution_id":"%s"}`, action, params, execID)
+	pool.Exec(ctx, `
+		INSERT INTO approvals (entity_id, subject_entity_id, action, risk_class,
+			kind, payload, status, expires_at, created_at)
+		VALUES ($1, $2, $3, $4, 'execution', $5::jsonb, 'pending',
+			now() + interval '1 hour', now())`,
+		approvalID, targetID, action, riskClass, payload)
 }