fix(gastown): replace per-agent JWTs with per-container JWT#988

Merged

jrf0110 merged 13 commits intomainfrom

923-container-secret-auth

Mar 11, 2026

Commits on Mar 11, 2026

fix(convoy): call updateConvoyProgress after MR bead closes to trigger landing (#962) (#13)

authored and
jrf0110
committed
fix(patrol): break triage agent feedback loop (#965) (#12)

authored and
jrf0110
committed
fix(gastown): replace per-agent JWTs with per-container HMAC secrets (#923)
jrf0110
committed
fix(gastown): send userId header with container secret auth
jrf0110
committed
refactor(gastown): replace HMAC secrets with per-container JWT
jrf0110
committed
fix(gastown): address PR review comments
jrf0110
committed
fix(gastown): address second round of PR review comments
jrf0110
committed
fix(gastown): address third round of PR review comments
jrf0110
committed
fix(gastown): populate agentId from header for routes without :agentId param
jrf0110
committed
fix(gastown): send agent identity header in broadcastEvent
jrf0110
committed
fix(gastown): propagate non-2xx refresh-token responses as failures
jrf0110
committed
chore: remove accidentally committed plans document
jrf0110
committed
fix(gastown): use townId fallback for empty userId in startMergeInContainer
jrf0110
committed