Function mint_token

src/orgkernel/pyapi/router.py:456–470

Mint a new ExecutionToken. The token is: - Scoped to agent_id + mission_id - Signed by the Org CA (prevents Token Grafting) - Time-bounded by expires_at - Scope-restricted by execution_scope

(
    data: ExecutionTokenCreate,
    db: Annotated[AsyncSession, Depends(get_db)],
)

    description="Create and sign a new ExecutionToken scoped to an agent + mission.",
)
async def mint_token(
    data: ExecutionTokenCreate,
    db: Annotated[AsyncSession, Depends(get_db)],
) -> ExecutionTokenOut:
    """
    Mint a new ExecutionToken.

    The token is:
        - Scoped to agent_id + mission_id
        - Signed by the Org CA (prevents Token Grafting)
        - Time-bounded by expires_at
        - Scope-restricted by execution_scope
    """
    svc = ExecutionTokenService(db)
    return await svc.mint(data)


@_token.get(