orchestrator-agent
37d7b7e6c3
Gate every NestQuest service behind the admin permission check
...
permission_gate wraps all registered services at registration time:
admin-only policy reads call.context.user_id against admin_allowlist
is_admin (fail closed on no context); complete_quest stays open.
2026-09-19 08:36:14 -04:00
orchestrator-agent
b1c42f10d0
Regenerate child instances after presence service writes
...
Presence pattern and override handlers now call regenerate_for_child.
Definition edit/activate pass HA-local today and configured horizon.
2026-09-18 16:03:42 -04:00
orchestrator-agent
2d30f0ce77
Register canonical NestQuest HA services with schemas
...
Domain-global handlers for the ENTITIES-AND-SERVICES inventory plus
regenerate. No permission decorator yet.
2026-09-18 15:59:02 -04:00
orchestrator-agent