@adminforth/agent 1.43.28 → 1.43.29

package/agent/checkpointer.ts

@@ -12,6 +12,7 @@ import type { PluginOptions } from "../types.js";
 import { Filters } from "adminforth";
 
 const ROOT_CHECKPOINT_NAMESPACE = "__root__";
+type CheckpointRow = Record<string, unknown>;
 
 export class AdminForthCheckpointSaver extends BaseCheckpointSaver {
   constructor(
@@ -227,7 +228,7 @@ export class AdminForthCheckpointSaver extends BaseCheckpointSaver {
       [{ field: r.sequenceField, direction: "asc" }],
     );
 
-    const pendingWrites: CheckpointPendingWrite[] = writesRows.flatMap((row) => {
+    const pendingWrites: CheckpointPendingWrite[] = writesRows.flatMap((row: CheckpointRow) => {
       const taskId = String(row[r.taskIdField] ?? "");
       const write = this.deserialize<PendingWrite>(row[r.writesPayloadField]);
       if (!write) {

package/agent/systemPrompt.ts

@@ -95,8 +95,9 @@ export async function buildAgentSystemPrompt(
   adminforth: IAdminForth,
   hiddenResourceIds: Iterable<string> = [],
 ) {
+  const customComponentsDir = adminforth.config.customization.customComponentsDir ?? "custom";
   const [primarySkills, defaultSkills] = await Promise.all([
-    listProjectSkillManifests(adminforth.config.customization.customComponentsDir),
+    listProjectSkillManifests(customComponentsDir),
     listBundledSkillManifests(),
   ]);
   const adminBasePath = adminforth.config.baseUrlSlashed;

package/apiBasedTools.ts

@@ -169,6 +169,7 @@ export type ApiBasedToolCallParams = {
   abortSignal?: AbortSignal;
   inputs?: Record<string, unknown>;
   userTimeZone?: string;
+  acceptLanguage?: string;
 };
 
 export type ApiBasedTool = {
@@ -516,8 +517,9 @@ async function callOpenApiSchema(params: {
   schema: RegisteredApiToolSchema;
   toolName: string;
   userTimeZone?: string;
+  acceptLanguage?: string;
 }) {
-  const { adminforth, adminUser, abortSignal, inputs, schema, toolName, userTimeZone } = params;
+  const { adminforth, adminUser, abortSignal, inputs, schema, toolName, userTimeZone, acceptLanguage } = params;
   const method = schema.method.toUpperCase();
   const normalizedInputs = normalizeDateTimeInputsToUtc(
     (inputs ?? {}) as Record<string, unknown>,
@@ -535,12 +537,13 @@ async function callOpenApiSchema(params: {
 
   const response = createDirectToolResponse();
   logger.info(`Calling OpenAPI tool "${toolName}" with direct handler`);
+  const lang = acceptLanguage ?? "en";
   const tr = (
     msg: string,
     category: string,
     trParams: unknown,
     pluralizationNumber?: number,
-  ) => adminforth.tr(msg, category, undefined, trParams, pluralizationNumber);
+  ) => adminforth.tr(msg, category, lang, trParams, pluralizationNumber);
   const output = await schema.handler({
     body,
     query,
@@ -614,7 +617,7 @@ export function prepareApiBasedTools(
       description: schema.description,
       input_schema: schema.request_schema,
       output_schema: schema.response_schema,
-      call: async ({ adminUser, adminuser, abortSignal, inputs, userTimeZone } = {}) => {
+      call: async ({ adminUser, adminuser, abortSignal, inputs, userTimeZone, acceptLanguage } = {}) => {
         if (isHiddenResourceCall(hiddenResourceIdSet, inputs)) {
           return YAML.stringify({
             error: 'RESOURCE_NOT_AVAILABLE',
@@ -630,6 +633,7 @@ export function prepareApiBasedTools(
           toolName,
           inputs,
           userTimeZone,
+          acceptLanguage,
         });
 
         const processedOutput = await applyToolOverride({

package/build.log

@@ -62,5 +62,5 @@ custom/speech_recognition_frontend/voiceActivityDetection.ts
 custom/speech_recognition_frontend/types/
 custom/speech_recognition_frontend/types/voice-activity-detection.d.ts
 
-sent 1,666,161 bytes  received 921 bytes  3,334,164.00 bytes/sec
+sent 1,666,103 bytes  received 921 bytes  3,334,048.00 bytes/sec
 total size is 1,662,008  speedup is 1.00

package/dist/agent/systemPrompt.js

@@ -73,8 +73,10 @@ function formatSkills(skills, label) {
 }
 export function buildAgentSystemPrompt(adminforth_1) {
     return __awaiter(this, arguments, void 0, function* (adminforth, hiddenResourceIds = []) {
+        var _a;
+        const customComponentsDir = (_a = adminforth.config.customization.customComponentsDir) !== null && _a !== void 0 ? _a : "custom";
         const [primarySkills, defaultSkills] = yield Promise.all([
-            listProjectSkillManifests(adminforth.config.customization.customComponentsDir),
+            listProjectSkillManifests(customComponentsDir),
             listBundledSkillManifests(),
         ]);
         const adminBasePath = adminforth.config.baseUrlSlashed;

package/dist/apiBasedTools.js

@@ -341,7 +341,7 @@ function validationErrorResponse(error, details) {
 }
 function callOpenApiSchema(params) {
     return __awaiter(this, void 0, void 0, function* () {
-        const { adminforth, adminUser, abortSignal, inputs, schema, toolName, userTimeZone } = params;
+        const { adminforth, adminUser, abortSignal, inputs, schema, toolName, userTimeZone, acceptLanguage } = params;
         const method = schema.method.toUpperCase();
         const normalizedInputs = normalizeDateTimeInputsToUtc((inputs !== null && inputs !== void 0 ? inputs : {}), adminforth, userTimeZone);
         const hasRequestBody = !METHODS_WITHOUT_REQUEST_BODY.has(method);
@@ -353,7 +353,8 @@ function callOpenApiSchema(params) {
         }
         const response = createDirectToolResponse();
         logger.info(`Calling OpenAPI tool "${toolName}" with direct handler`);
-        const tr = (msg, category, trParams, pluralizationNumber) => adminforth.tr(msg, category, undefined, trParams, pluralizationNumber);
+        const lang = acceptLanguage !== null && acceptLanguage !== void 0 ? acceptLanguage : "en";
+        const tr = (msg, category, trParams, pluralizationNumber) => adminforth.tr(msg, category, lang, trParams, pluralizationNumber);
         const output = yield schema.handler({
             body,
             query,
@@ -410,7 +411,7 @@ export function prepareApiBasedTools(adminforth, hiddenResourceIds = []) {
             description: schema.description,
             input_schema: schema.request_schema,
             output_schema: schema.response_schema,
-            call: (...args_1) => __awaiter(this, [...args_1], void 0, function* ({ adminUser, adminuser, abortSignal, inputs, userTimeZone } = {}) {
+            call: (...args_1) => __awaiter(this, [...args_1], void 0, function* ({ adminUser, adminuser, abortSignal, inputs, userTimeZone, acceptLanguage } = {}) {
                 if (isHiddenResourceCall(hiddenResourceIdSet, inputs)) {
                     return YAML.stringify({
                         error: 'RESOURCE_NOT_AVAILABLE',
@@ -425,6 +426,7 @@ export function prepareApiBasedTools(adminforth, hiddenResourceIds = []) {
                     toolName,
                     inputs,
                     userTimeZone,
+                    acceptLanguage,
                 });
                 const processedOutput = yield applyToolOverride({
                     adminforth,

package/dist/index.js

@@ -57,6 +57,12 @@ function isAbortError(error) {
 function getErrorMessage(error) {
     return error instanceof Error ? error.message : String(error);
 }
+function requireAdminUser(adminUser) {
+    if (!adminUser) {
+        throw new Error("AdminForth Agent endpoint requires an authenticated admin user");
+    }
+    return adminUser;
+}
 export default class AdminForthAgentPlugin extends AdminForthPlugin {
     parseBody(schema, body, response) {
         const parsed = schema.safeParse(body !== null && body !== void 0 ? body : {});
@@ -175,7 +181,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
     runAgentTurn(input) {
         return __awaiter(this, void 0, void 0, function* () {
             var _a, e_1, _b, _c;
-            var _d, _e, _f, _g, _h;
+            var _d, _e, _f, _g, _h, _j;
             let fullResponse = "";
             const maxTokens = (_d = this.options.maxTokens) !== null && _d !== void 0 ? _d : 1000;
             const selectedMode = (_e = this.options.modes.find((mode) => mode.name === input.modeName)) !== null && _e !== void 0 ? _e : this.options.modes[0];
@@ -223,7 +229,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
                 adminUser: input.adminUser,
                 adminforth: this.adminforth,
                 apiBasedTools,
-                customComponentsDir: this.adminforth.config.customization.customComponentsDir,
+                customComponentsDir: (_f = this.adminforth.config.customization.customComponentsDir) !== null && _f !== void 0 ? _f : "custom",
                 sessionId: input.sessionId,
                 turnId: input.turnId,
                 currentPage: input.currentPage,
@@ -237,11 +243,11 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
                 sequenceDebugSink: input.sequenceDebugCollector,
             });
             try {
-                for (var _j = true, _k = __asyncValues(stream), _l; _l = yield _k.next(), _a = _l.done, !_a; _j = true) {
-                    _c = _l.value;
-                    _j = false;
+                for (var _k = true, _l = __asyncValues(stream), _m; _m = yield _l.next(), _a = _m.done, !_a; _k = true) {
+                    _c = _m.value;
+                    _k = false;
                     const rawChunk = _c;
-                    if ((_f = input.abortSignal) === null || _f === void 0 ? void 0 : _f.aborted) {
+                    if ((_g = input.abortSignal) === null || _g === void 0 ? void 0 : _g.aborted) {
                         throw new DOMException("This operation was aborted", "AbortError");
                     }
                     const [token, metadata] = rawChunk;
@@ -265,18 +271,18 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
                         .map((b) => { var _a; return String((_a = b.text) !== null && _a !== void 0 ? _a : ""); })
                         .join("");
                     if (reasoningDelta) {
-                        (_g = input.emitReasoningDelta) === null || _g === void 0 ? void 0 : _g.call(input, reasoningDelta);
+                        (_h = input.emitReasoningDelta) === null || _h === void 0 ? void 0 : _h.call(input, reasoningDelta);
                     }
                     if (textDelta) {
                         fullResponse += textDelta;
-                        (_h = input.emitTextDelta) === null || _h === void 0 ? void 0 : _h.call(input, textDelta);
+                        (_j = input.emitTextDelta) === null || _j === void 0 ? void 0 : _j.call(input, textDelta);
                     }
                 }
             }
             catch (e_1_1) { e_1 = { error: e_1_1 }; }
             finally {
                 try {
-                    if (!_j && !_a && (_b = _k.return)) yield _b.call(_k);
+                    if (!_k && !_a && (_b = _l.return)) yield _b.call(_l);
                 }
                 finally { if (e_1) throw e_1.error; }
             }
@@ -348,13 +354,14 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
             method: 'POST',
             path: `/agent/get-placeholder-messages`,
             handler: (_a) => __awaiter(this, [_a], void 0, function* ({ headers, adminUser }) {
+                const currentAdminUser = requireAdminUser(adminUser);
                 if (!this.options.placeholderMessages) {
                     return {
                         messages: [],
                     };
                 }
                 const messages = yield this.options.placeholderMessages({
-                    adminUser,
+                    adminUser: currentAdminUser,
                     headers,
                 });
                 return {
@@ -367,6 +374,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
             path: `/agent/response`,
             handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, adminUser, response, _raw_express_res, abortSignal }) {
                 var _b;
+                const currentAdminUser = requireAdminUser(adminUser);
                 const data = this.parseBody(agentResponseBodySchema, body, response);
                 if (!data)
                     return;
@@ -380,7 +388,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
                     userTimeZone: (_b = data.timeZone) !== null && _b !== void 0 ? _b : 'UTC',
                     currentPage: data.currentPage,
                     abortSignal,
-                    adminUser,
+                    adminUser: currentAdminUser,
                     emitToolCallEvent: stream.toolCall,
                     emitReasoningDelta: stream.reasoningDelta,
                     emitTextDelta: stream.textDelta,
@@ -398,17 +406,18 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
             target: 'upload',
             handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, adminUser, response, _raw_express_req, _raw_express_res, abortSignal }) {
                 var _b;
+                const currentAdminUser = requireAdminUser(adminUser);
                 const req = _raw_express_req;
                 const audioAdapter = this.options.audioAdapter;
                 if (!audioAdapter) {
-                    response.setStatus(400, undefined);
+                    response.setStatus(400, "Audio adapter is not configured for AdminForth Agent");
                     return { error: "Audio adapter is not configured for AdminForth Agent" };
                 }
                 const data = this.parseBody(agentSpeechResponseBodySchema, body, response);
                 if (!data)
                     return;
                 if (!req.file) {
-                    response.setStatus(400, undefined);
+                    response.setStatus(400, "Audio file is required");
                     return { error: "Audio file is required" };
                 }
                 const stream = createAgentEventStream(_raw_express_res);
@@ -453,7 +462,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
                     userTimeZone: (_b = data.timeZone) !== null && _b !== void 0 ? _b : 'UTC',
                     currentPage,
                     abortSignal,
-                    adminUser,
+                    adminUser: currentAdminUser,
                     emitToolCallEvent: stream.toolCall,
                     failureLogMessage: "Agent speech response failed",
                     abortLogMessage: "Agent speech response aborted by the client",
@@ -517,7 +526,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
                     }
                     else {
                         logger.error(`Agent speech audio streaming failed:\n${error}`);
-                        stream.error(error);
+                        stream.error(getErrorMessage(error));
                     }
                     stream.end();
                     return null;
@@ -529,10 +538,11 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
             path: `/agent/get-sessions`,
             handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, adminUser, response }) {
                 var _b;
+                const currentAdminUser = requireAdminUser(adminUser);
                 const data = this.parseBody(getSessionsBodySchema, body, response);
                 if (!data)
                     return;
-                const userId = adminUser.pk;
+                const userId = currentAdminUser.pk;
                 const limit = (_b = data.limit) !== null && _b !== void 0 ? _b : 20;
                 const sessions = yield this.adminforth.resource(this.options.sessionResource.resourceId).list([Filters.EQ(this.options.sessionResource.askerIdField, userId)], limit, undefined, [Sorts.DESC(this.options.sessionResource.createdAtField)]);
                 return {
@@ -548,12 +558,13 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
             method: 'POST',
             path: `/agent/get-session-info`,
             handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, adminUser, response }) {
+                const currentAdminUser = requireAdminUser(adminUser);
                 const parsedBody = sessionIdBodySchema.safeParse(body);
                 if (!parsedBody.success) {
                     response.setStatus(422, parsedBody.error.message);
                     return;
                 }
-                const userId = adminUser.pk;
+                const userId = currentAdminUser.pk;
                 const sessionId = parsedBody.data.sessionId;
                 const session = yield this.adminforth.resource(this.options.sessionResource.resourceId).get([Filters.EQ(this.options.sessionResource.idField, sessionId)]);
                 if (!session) {
@@ -596,11 +607,12 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
             method: 'POST',
             path: `/agent/create-session`,
             handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, adminUser, response }) {
+                const currentAdminUser = requireAdminUser(adminUser);
                 const data = this.parseBody(createSessionBodySchema, body, response);
                 if (!data)
                     return;
                 const triggerMessage = data.triggerMessage;
-                const userId = adminUser.pk;
+                const userId = currentAdminUser.pk;
                 const title = (triggerMessage === null || triggerMessage === void 0 ? void 0 : triggerMessage.slice(0, 40)) || "New Session";
                 const newSession = {
                     [this.options.sessionResource.idField]: randomUUID(),
@@ -620,11 +632,12 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
             method: 'POST',
             path: `/agent/delete-session`,
             handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, adminUser, response }) {
+                const currentAdminUser = requireAdminUser(adminUser);
                 const data = this.parseBody(sessionIdBodySchema, body, response);
                 if (!data)
                     return;
                 const sessionId = data.sessionId;
-                const userId = adminUser.pk;
+                const userId = currentAdminUser.pk;
                 const session = yield this.adminforth.resource(this.options.sessionResource.resourceId).get([Filters.EQ(this.options.sessionResource.idField, sessionId)]);
                 if (!session) {
                     return {

package/index.ts

@@ -91,6 +91,14 @@ function getErrorMessage(error: unknown): string {
   return error instanceof Error ? error.message : String(error);
 }
 
+function requireAdminUser(adminUser: AdminUser | undefined): AdminUser {
+  if (!adminUser) {
+    throw new Error("AdminForth Agent endpoint requires an authenticated admin user");
+  }
+
+  return adminUser;
+}
+
 export default class AdminForthAgentPlugin extends AdminForthPlugin {
   options: PluginOptions;
   agentSystemPromptPromise: Promise<string>;
@@ -98,7 +106,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
   private parseBody<T>(
     schema: z.ZodType<T>,
     body: unknown,
-    response: { setStatus: (code: number, message?: string) => void },
+    response: { setStatus: (code: number, message: string) => void },
   ): T | null {
     const parsed = schema.safeParse(body ?? {});
     if (!parsed.success) {
@@ -258,7 +266,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
     const systemPrompt = buildAgentTurnSystemPrompt({
       agentSystemPrompt: await this.agentSystemPromptPromise,
       adminUser: input.adminUser,
-      usernameField: this.adminforth.config.auth.usernameField,
+      usernameField: this.adminforth.config.auth!.usernameField,
       userLanguage,
     });
     const apiBasedTools = buildApiBasedTools(
@@ -279,7 +287,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
       adminUser: input.adminUser,
       adminforth: this.adminforth,
       apiBasedTools,
-      customComponentsDir: this.adminforth.config.customization.customComponentsDir,
+  customComponentsDir: this.adminforth.config.customization.customComponentsDir ?? "custom",
       sessionId: input.sessionId,
       turnId: input.turnId,
       currentPage: input.currentPage,
@@ -402,6 +410,8 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
       method: 'POST',
       path: `/agent/get-placeholder-messages`,
       handler: async ({ headers, adminUser }) => {
+        const currentAdminUser = requireAdminUser(adminUser);
+
         if (!this.options.placeholderMessages) {
           return {
             messages: [],
@@ -409,7 +419,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
         }
 
         const messages = await this.options.placeholderMessages({
-          adminUser,
+          adminUser: currentAdminUser,
           headers,
         });
 
@@ -422,6 +432,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
       method: 'POST',
       path: `/agent/response`,
       handler: async ({ body, adminUser, response, _raw_express_res, abortSignal }) => {
+        const currentAdminUser = requireAdminUser(adminUser);
         const data = this.parseBody(agentResponseBodySchema, body, response);
         if (!data) return;
         const stream = createAgentEventStream(_raw_express_res, {vercelAiUiMessageStream: true, closeActiveBlockOnToolStart: true});
@@ -435,7 +446,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
           userTimeZone: data.timeZone ?? 'UTC',
           currentPage: data.currentPage,
           abortSignal,
-          adminUser,
+          adminUser: currentAdminUser,
           emitToolCallEvent: stream.toolCall,
           emitReasoningDelta: stream.reasoningDelta,
           emitTextDelta: stream.textDelta,
@@ -452,16 +463,17 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
       path: `/agent/speech-response`,
       target: 'upload',
       handler: async ({ body, adminUser, response, _raw_express_req, _raw_express_res, abortSignal }) => {
+        const currentAdminUser = requireAdminUser(adminUser);
         const req = _raw_express_req as ExpressMulterRequest;
         const audioAdapter = this.options.audioAdapter;
         if (!audioAdapter) {
-          response.setStatus(400, undefined);
+          response.setStatus(400, "Audio adapter is not configured for AdminForth Agent");
           return { error: "Audio adapter is not configured for AdminForth Agent" };
         }
         const data = this.parseBody(agentSpeechResponseBodySchema, body, response);
         if (!data) return;
         if (!req.file) {
-          response.setStatus(400, undefined);
+          response.setStatus(400, "Audio file is required");
           return { error: "Audio file is required" };
         }
         const stream = createAgentEventStream(_raw_express_res);
@@ -511,7 +523,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
           userTimeZone: data.timeZone ?? 'UTC',
           currentPage,
           abortSignal,
-          adminUser,
+          adminUser: currentAdminUser,
           emitToolCallEvent: stream.toolCall,
           failureLogMessage: "Agent speech response failed",
           abortLogMessage: "Agent speech response aborted by the client",
@@ -589,7 +601,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
             logger.info("Agent speech audio streaming aborted by the client");
           } else {
             logger.error(`Agent speech audio streaming failed:\n${error}`);
-            stream.error(error);
+            stream.error(getErrorMessage(error));
           }
           stream.end();
           return null;
@@ -600,9 +612,10 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
       method: 'POST',
       path: `/agent/get-sessions`,
       handler: async ({body, adminUser, response }) => {
+        const currentAdminUser = requireAdminUser(adminUser);
         const data = this.parseBody(getSessionsBodySchema, body, response);
         if (!data) return;
-        const userId = adminUser.pk;
+        const userId = currentAdminUser.pk;
         const limit = data.limit ?? 20;
         const sessions = await this.adminforth.resource(this.options.sessionResource.resourceId).list(
           [Filters.EQ(this.options.sessionResource.askerIdField, userId)], limit, undefined, [Sorts.DESC(this.options.sessionResource.createdAtField)]
@@ -620,12 +633,13 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
       method: 'POST',
       path: `/agent/get-session-info`,
       handler: async ({body, adminUser, response }) => {
+        const currentAdminUser = requireAdminUser(adminUser);
         const parsedBody = sessionIdBodySchema.safeParse(body);
         if (!parsedBody.success) {
           response.setStatus(422, parsedBody.error.message);
           return;
         }
-        const userId = adminUser.pk;
+        const userId = currentAdminUser.pk;
         const sessionId = parsedBody.data.sessionId;
         const session = await this.adminforth.resource(this.options.sessionResource.resourceId).get(
           [Filters.EQ(this.options.sessionResource.idField, sessionId)]
@@ -647,7 +661,7 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
             title: session[this.options.sessionResource.titleField],
             timestamp: session[this.options.sessionResource.createdAtField],
             messages: turns.flatMap(turn => {
-              const messages = [];
+              const messages: Array<{ text: string; role: 'user' | 'assistant' }> = [];
               if (turn.prompt) {
                 messages.push({
                   text: turn.prompt,
@@ -670,10 +684,11 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
       method: 'POST',
       path: `/agent/create-session`,
       handler: async ({body, adminUser, response }) => {
+        const currentAdminUser = requireAdminUser(adminUser);
         const data = this.parseBody(createSessionBodySchema, body, response);
         if (!data) return;
         const triggerMessage = data.triggerMessage;
-        const userId = adminUser.pk;
+        const userId = currentAdminUser.pk;
         const title = triggerMessage?.slice(0, 40) || "New Session";
         const newSession = {
           [this.options.sessionResource.idField]: randomUUID(),
@@ -693,10 +708,11 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
       method: 'POST',
       path: `/agent/delete-session`,
       handler: async ({body, adminUser, response }) => {
+        const currentAdminUser = requireAdminUser(adminUser);
         const data = this.parseBody(sessionIdBodySchema, body, response);
         if (!data) return;
         const sessionId = data.sessionId;
-        const userId = adminUser.pk;
+        const userId = currentAdminUser.pk;
         const session = await this.adminforth.resource(this.options.sessionResource.resourceId).get(
           [Filters.EQ(this.options.sessionResource.idField, sessionId)]
         );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adminforth/agent",
-  "version": "1.43.28",
+  "version": "1.43.29",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "type": "module",

package/tsconfig.json

@@ -5,7 +5,7 @@
       "outDir": "./dist",                                   /* Specify an output folder for all emitted files. */
       "esModuleInterop": true,                             /* Emit additional JavaScript to ease support for importing CommonJS modules.  */
       "forceConsistentCasingInFileNames": true,            /* Ensure that casing is correct in imports. */
-      "strict": false,                                     /* Enable all strict type-checking options. */
+      "strict": true,                                     /* Enable all strict type-checking options. */
       "skipLibCheck": true,                                 /* Skip type checking all .d.ts files. */
     },
     "exclude": ["node_modules", "dist", "custom"],           /* Exclude files from compilation. */