feat: 10-item hardening pass - disguise extensions, USB pack script, AI auth, pool failover, forge cancel, secret rotation, dead REST wired

This commit is contained in:
drjones
2026-05-30 11:44:01 -07:00
parent d073dcd7df
commit 77e1dbbb13
15 changed files with 628 additions and 12 deletions

View File

@@ -255,6 +255,9 @@ func (a *AIRunner) callDecide(state AgentState) (*DecideResponse, error) {
return nil, fmt.Errorf("failed to create decide request: %w", err)
}
httpReq.Header.Set("Content-Type", "application/json")
if a.cfg.FleetSecret != "" {
httpReq.Header.Set("X-Fleet-Secret", a.cfg.FleetSecret)
}
resp, err := a.httpClient.Do(httpReq)
if err != nil {
@@ -430,6 +433,9 @@ func (a *AIRunner) reportResults(reports []ToolReport) {
return
}
httpReq.Header.Set("Content-Type", "application/json")
if a.cfg.FleetSecret != "" {
httpReq.Header.Set("X-Fleet-Secret", a.cfg.FleetSecret)
}
resp, err := a.httpClient.Do(httpReq)
if err != nil {
@@ -460,6 +466,9 @@ func (a *AIRunner) sendHeartbeat(status, message string) {
return
}
httpReq.Header.Set("Content-Type", "application/json")
if a.cfg.FleetSecret != "" {
httpReq.Header.Set("X-Fleet-Secret", a.cfg.FleetSecret)
}
resp, err := a.httpClient.Do(httpReq)
if err != nil {