feat: add deploy webhook endpoint (POST /api/v1/_deploy)

internal/httpapi/deploy.go

@@ -0,0 +1,31 @@
+package httpapi
+
+import (
+	"log"
+	"net/http"
+	"os/exec"
+)
+
+func (h Handler) handleDeploy(w http.ResponseWriter, r *http.Request) {
+	if !h.cfg.HasDeploy() {
+		writeError(w, http.StatusNotFound, "deploy endpoint not configured")
+		return
+	}
+
+	if r.Header.Get("X-Deploy-Secret") != h.cfg.DeploySecret {
+		writeError(w, http.StatusUnauthorized, "invalid deploy secret")
+		return
+	}
+
+	writeJSON(w, http.StatusAccepted, map[string]string{"status": "deploy started"})
+
+	go func() {
+		cmd := exec.Command("/bin/bash", "deploy.sh")
+		output, err := cmd.CombinedOutput()
+		if err != nil {
+			log.Printf("[deploy] failed: %v, output: %s", err, string(output))
+			return
+		}
+		log.Printf("[deploy] success: %s", string(output))
+	}()
+}

internal/httpapi/handler.go

@@ -53,6 +53,9 @@ func (h Handler) Routes() http.Handler {
 	mux.HandleFunc("GET /api/v1/ontology", h.getOntology)
 	mux.HandleFunc("POST /api/v1/teaching-assets/prompts", h.generateTeachingAssetPrompt)
 	mux.HandleFunc("GET /api/v1/teaching-assets", h.getTeachingAssets)
+	if h.cfg.HasDeploy() {
+		mux.HandleFunc("POST /api/v1/_deploy", h.handleDeploy)
+	}
 	mux.Handle("GET /", webapp.Handler())
 	return mux
 }