Renn F f8d31bf940 [F038/F039] orchestrator: sign X-Agent-Token on self-API calls ...

The prior self-PATCH 401 fix only carried X-Agent-ID/X-Agent-Role. Arming
ROBOCO_AGENT_AUTH_REQUIRED=true made the middleware require a signed
X-Agent-Token, so every orchestrator self-call (auto-block / auto-resume /
auto-recover / SLA annotation) 401'd and silently no-op'd — wedging
paused/blocked parents.

Add _system_api_headers() that wraps the base headers with a signed token
for the system identity (issue_agent_token); switch all six self-call sites.
Dev fallback: no secret set => UNSIGNED sentinel + auth not required.

2026-06-28 11:07:56 +02:00

..

fixtures

Feature: lifecycle canonical spec (#14)

2026-05-11 02:15:47 +02:00

foundation

[F031] identity: role_for_slug_or_none so defensive skip-guards don't crash the dispatcher tick on stale slugs

2026-06-28 10:53:25 +02:00

integration

[F002] retype board-routed MegaTask root-subtasks code->planning on activation

2026-06-28 09:57:08 +02:00

property

Chore: reduce analytics complexity (#100)

2026-06-11 04:36:17 +02:00

unit

[F038/F039] orchestrator: sign X-Agent-Token on self-API calls

2026-06-28 11:07:56 +02:00

__init__.py

[beb8cae1] Type-gate tests/ under mypy — fix all errors and flip quality gate (#156) (#157)

2026-06-14 13:43:46 +02:00

conftest.py

fix(gate): clear the xenon complexity failure + fixable test warnings

2026-06-12 23:51:45 +02:00