Platform: fix all-policies path (tenant via header not URL)

The /all-policies endpoint does not take a tenant_id URL segment —
the target tenant is resolved from the x-uipath-internal-tenantid
header that _build_org_scoped_request already injects.

Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>

Author: evanbijoy251

packages/uipath-platform/src/uipath/platform/governance/_governance_service.py

@@ -7,7 +7,7 @@
 - ``POST /{org}/agenticgovernance_/api/v1/runtime/govern``  — compensating
   governance call fired when a ``guardrail_fallback`` rule matches
   (see :meth:`GovernanceService.compensate`).
-- ``GET  /{org}/agenticgovernance_/api/v1/all-policies/{tenant_id}``  — fetch
+- ``GET  /{org}/agenticgovernance_/api/v1/all-policies``  — fetch
   WASM bundle metadata for all hooks (see :meth:`GovernanceService.retrieve_all_policies`).
 
 A third backend endpoint —
@@ -154,10 +154,12 @@ async def get_policy_async(self, context: PolicyContext) -> PolicyResponse:
     def retrieve_all_policies(self) -> AllPoliciesResponse:
         """Fetch WASM bundle metadata for all hooks for the active tenant.
 
-        Calls ``GET /{org}/agenticgovernance_/api/v1/all-policies/{tenant_id}``
-        and returns the list of :class:`HookBundle` objects — one per
-        lifecycle hook that has a compiled WASM policy bundle. Download
-        each bundle's bytes separately with :meth:`download_bundle`.
+        Calls ``GET /{org}/agenticgovernance_/api/v1/all-policies`` and
+        returns the list of :class:`HookBundle` objects — one per
+        lifecycle hook that has a compiled WASM policy bundle. The target
+        tenant is resolved from the ``x-uipath-internal-tenantid`` header
+        injected by :meth:`_build_org_scoped_request`. Download each
+        bundle's bytes separately with :meth:`download_bundle`.
 
         Returns:
             AllPoliciesResponse: List of hook bundles with pre-signed
@@ -181,7 +183,7 @@ def retrieve_all_policies(self) -> AllPoliciesResponse:
             ```
         """
         url, headers = self._build_org_scoped_request(
-            f"{ALL_POLICIES_API_PATH}/{UiPathConfig.tenant_id}"
+            ALL_POLICIES_API_PATH
         )
         response = self.request("GET", url=url, headers=headers)
         return AllPoliciesResponse.model_validate(response.json())
@@ -193,7 +195,7 @@ async def retrieve_all_policies_async(self) -> AllPoliciesResponse:
         See :meth:`retrieve_all_policies` for parameter and return semantics.
         """
         url, headers = self._build_org_scoped_request(
-            f"{ALL_POLICIES_API_PATH}/{UiPathConfig.tenant_id}"
+            ALL_POLICIES_API_PATH
         )
         response = await self.request_async("GET", url=url, headers=headers)
         return AllPoliciesResponse.model_validate(response.json())

packages/uipath-platform/tests/services/test_governance_service.py

@@ -964,7 +964,7 @@ def test_returns_parsed_response(
         httpx_mock.add_response(
             url=(
                 f"{base_url}/{ORG_ID}/agenticgovernance_"
-                f"/api/v1/all-policies/{TENANT_ID}"
+                f"/api/v1/all-policies"
             ),
             status_code=200,
             json=_ALL_POLICIES_RESPONSE,
@@ -992,7 +992,7 @@ def test_returns_empty_list_when_no_bundles(
         httpx_mock.add_response(
             url=(
                 f"{base_url}/{ORG_ID}/agenticgovernance_"
-                f"/api/v1/all-policies/{TENANT_ID}"
+                f"/api/v1/all-policies"
             ),
             status_code=200,
             json={"hookBundles": []},
@@ -1019,7 +1019,7 @@ def capture(request: httpx.Request) -> httpx.Response:
             capture,
             url=(
                 f"{base_url}/{ORG_ID}/agenticgovernance_"
-                f"/api/v1/all-policies/{TENANT_ID}"
+                f"/api/v1/all-policies"
             ),
         )
 
@@ -1067,7 +1067,7 @@ def test_raises_on_http_error(
         httpx_mock.add_response(
             url=(
                 f"{base_url}/{ORG_ID}/agenticgovernance_"
-                f"/api/v1/all-policies/{TENANT_ID}"
+                f"/api/v1/all-policies"
             ),
             status_code=500,
             text="server error",
@@ -1093,7 +1093,7 @@ def capture(request: httpx.Request) -> httpx.Response:
 
         httpx_mock.add_callback(
             capture,
-            url=f"http://localhost:8123/api/v1/all-policies/{TENANT_ID}",
+            url=f"http://localhost:8123/api/v1/all-policies",
         )
 
         service.retrieve_all_policies()
@@ -1111,7 +1111,7 @@ async def test_async_returns_parsed_response(
         httpx_mock.add_response(
             url=(
                 f"{base_url}/{ORG_ID}/agenticgovernance_"
-                f"/api/v1/all-policies/{TENANT_ID}"
+                f"/api/v1/all-policies"
             ),
             status_code=200,
             json=_ALL_POLICIES_RESPONSE,