Function issue_from_csr

src/orgkernel/pyapi/router.py:127–144

Issue an AgentIdentity from a validated CSR. The agent receives: - identity: DB record (server-side only) - certificate: proof of identity (agent stores this) - ca_fingerprint: for verification - private_key_pem: agent's private key (agent stores this

(
    csr: AgentIdentityCSR,
    db: Annotated[AsyncSession, Depends(get_db)],
)

    description="Step 2-3: validate CSR, sign certificate with Org CA, persist identity.",
)
async def issue_from_csr(
    csr: AgentIdentityCSR,
    db: Annotated[AsyncSession, Depends(get_db)],
) -> AgentIdentityIssueResult:
    """
    Issue an AgentIdentity from a validated CSR.

    The agent receives:
        - identity: DB record (server-side only)
        - certificate: proof of identity (agent stores this)
        - ca_fingerprint: for verification
        - private_key_pem: agent's private key (agent stores this — NEVER sent again)
    """
    svc = AgentIdentityService(db)
    try:
        return await svc.issue_from_csr(csr)
    except ValueError as e:
        raise HTTPException(status_code=409, detail=str(e))


@_identity.post(