fix(ci): unblock test_beacon_atlas_behavior.py + sqlite3.Row.get() bug

Two related fixes that together unblock Rustchain CI on main (red since 2026-05-04, blocking 7+ paid PRs across multiple authors).

Test fix (tests/test_beacon_atlas_behavior.py):
- Seed 4 test agents (bcn_alice_test, bcn_bob_test, bcn_test_from, bcn_test_to) into relay_agents in setUp so the create_contract route's existence check passes
- Add X-Agent-Key headers to POST /api/contracts and PUT /api/contracts/<id> client calls
- For PUT to 'active' (offered → active), authenticate as to_agent (bcn_bob_test) since recipient-only transition

Production fix (node/beacon_api.py:539):
- contract.get('to_agent', '') would AttributeError on sqlite3.Row (no .get() method) → 500 in update_contract
- Replaced with bracket access using .keys() membership check

Codex consensus reviewed the test patch and validated the diagnosis + safety. Production fix surfaced when applying the test fix locally — 401→201 worked but PUT then 500'd. Both fixes are required.

Verification:
- Full tests/test_beacon_atlas_behavior.py: 15/15 pass locally
- No production behavior change beyond fixing the AttributeError path

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: Scottcjn

node/beacon_api.py

@@ -536,7 +536,7 @@ def update_contract(contract_id):
             return jsonify({'error': 'Missing X-Agent-Key header — authentication required'}), 401
 
         from_agent = contract['from_agent']
-        to_agent = contract.get('to_agent', '')
+        to_agent = contract['to_agent'] if 'to_agent' in contract.keys() else ''
 
         # Caller must be either the from_agent or to_agent
         if agent_key != from_agent and agent_key != to_agent:

tests/test_beacon_atlas_behavior.py

@@ -69,6 +69,21 @@ def setUp(self):
             conn.execute("DELETE FROM beacon_bounties")
             conn.execute("DELETE FROM beacon_reputation")
             conn.execute("DELETE FROM beacon_chat")
+            conn.execute("DELETE FROM relay_agents")
+            now = int(time.time())
+            conn.executemany(
+                """
+                INSERT INTO relay_agents
+                (agent_id, pubkey_hex, name, status, created_at, updated_at)
+                VALUES (?, ?, ?, ?, ?, ?)
+                """,
+                [
+                    ('bcn_alice_test', '0x' + '11' * 32, 'Alice Test', 'active', now, now),
+                    ('bcn_bob_test', '0x' + '22' * 32, 'Bob Test', 'active', now, now),
+                    ('bcn_test_from', '0x' + '33' * 32, 'From Test', 'active', now, now),
+                    ('bcn_test_to', '0x' + '44' * 32, 'To Test', 'active', now, now),
+                ],
+            )
             conn.commit()
 
     def test_health_endpoint_returns_ok(self):
@@ -95,7 +110,8 @@ def test_create_contract_workflow(self):
         create_response = self.client.post(
             '/api/contracts',
             data=json.dumps(contract_data),
-            content_type='application/json'
+            content_type='application/json',
+            headers={'X-Agent-Key': 'bcn_alice_test'},
         )
         self.assertEqual(create_response.status_code, 201)
 
@@ -118,7 +134,8 @@ def test_create_contract_workflow(self):
         update_response = self.client.put(
             f'/api/contracts/{contract_id}',
             data=json.dumps({'state': 'active'}),
-            content_type='application/json'
+            content_type='application/json',
+            headers={'X-Agent-Key': 'bcn_bob_test'},
         )
         self.assertEqual(update_response.status_code, 200)
 
@@ -249,15 +266,17 @@ def test_invalid_state_update_rejected(self):
         create_response = self.client.post(
             '/api/contracts',
             data=json.dumps(contract_data),
-            content_type='application/json'
+            content_type='application/json',
+            headers={'X-Agent-Key': 'bcn_test_from'},
         )
         contract_id = json.loads(create_response.data)['id']
 
         # Try invalid state
         update_response = self.client.put(
             f'/api/contracts/{contract_id}',
             data=json.dumps({'state': 'invalid_state'}),
-            content_type='application/json'
+            content_type='application/json',
+            headers={'X-Agent-Key': 'bcn_test_from'},
         )
         self.assertEqual(update_response.status_code, 400)