orchestrator-agent 37d7b7e6c3 Gate every NestQuest service behind the admin permission check ...

permission_gate wraps all registered services at registration time:
admin-only policy reads call.context.user_id against admin_allowlist
is_admin (fail closed on no context); complete_quest stays open.

2026-09-19 08:36:14 -04:00

..

nestquest

Gate every NestQuest service behind the admin permission check

2026-09-19 08:36:14 -04:00