Edge: trust active deployments for skill invoke gate

[Franlinozz]

Summary

• Allows skill invokes when the persistent deployment record is already active, even if the agent row still says activating after Edge restart/recovery.
• Keeps existing safeguards: owner auth, policy allow-list, receipt minting, and active/initialized bootstrap checks remain in place.
• Adds regression coverage for the recovered production state (agent.status=activating, deployment.status=active).

Production evidence

After PR #15 deployed successfully, production agents #25/#27/#28 still rejected skill invokes with 409 Activation in progress even though their deployment records were active and they had receipts/skills. The gate only trusted agent status/onboarding fallback; it did not trust the durable deployment active state.

Verification

• pnpm -F @apogee/edge typecheck
• pnpm -F @apogee/edge build
• pnpm -F @apogee/edge test

Scope

No changes to receipt minting, wallet ownership checks, policy enforcement, skill response shape, frontend rendering, Aurora/Vesper/Helix, or heartbeat runtime.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
apogee	Ready	Preview, Comment	May 19, 2026 11:24am